Business System Analyst Intermediate
The Vulnerability Management candidate must be able to demonstrate the ability to:
Install, manage and maintain vulnerability scanning technologies on-premise and in a cloud environments
Manage the remediation of identified vulnerabilities through coordinating the efforts of SMEs responsible for remediation.
Perform assessments of systems, software and networks within the environment and identify deviations from acceptable configurations or policies, measuring the effectiveness of our defense-in-depth architecture against known vulnerabilities.
Plans, develops, configures, and executes vulnerability scans using tools such as Qualys, Tenable-Nessus, Rapid7,
HCL AppScan on a wide variety of global corporate and business information systems both on-premise and cloud based.
Actively investigates and validates the latest security vulnerabilities, advisories (e.g., Microsoft, Oracle, VMWare, et al), incidents, and provides insight to relevance and threat.
Serves as primary point of contact between users and engineering/development staff.
Identifies, documents, reports and tracks system issues.
Supports the process of translating business needs into formal technical requirement deliverables.
Requirements:
5-9 years of experience in IT/Info Sec
Experience with Qualys (Vulnerability and Policy Compliance background) or similar Vulnerability scanning tool
Ability to track vulnerabilities proactively from discovery all the way to remediation while working with infrastructure counterparts
Information Security Background with Remediation/Mitigation tracking
Understanding of Issue Management
Experience Conducting vulnerability assessment on target IT infrastructure, applications and related information assets
Understanding of KRI/KPI reporting
Ability to present to Sr. Management using Excel, PowerPoint, Power Bi
Prior experience in Financial sector working with large data center operations with 1000+ servers and 1000_ endpoint devises
Cloud computing experience
Windows OS/Linus experience