Lead Vulnerability Management Analyst

Looking to join a collaborative team that promotes positive culture and work/life balance? Please apply today!

Job Title: Lead Vulnerability Policy Compliance AnalystDuration: 12-month contract - 40-hour work weeks Location: 100% Remote Compensation: Depending on candidate experience and market (most likely anywhere between 55-70/hour)

MUST HAVEAbility to review and write documentation to establish compliance baselines for vulnerability management.Ability to effectively document vulnerability processes, status reports, etc. Detailed understanding of Qualys or a similar vulnerability scanning tool (Symantec, Tenable Nessus, Rapid7, AlgoSec)Ability to work independently, self-starter…proactive person who can take moderate direction and own their role PLUSUnderstanding/experience with Systems Administration (Linux, Unix)Understanding of configuration compliance benchmarks such as CIS or STIG DAY TO DAYThe Vulnerability Analyst will support the configuration compliance and infrastructure vulnerability management programs with identifying, reporting, and enabling remediation of vulnerability and compliance findings. The ideal candidate for this role will have a strong technical foundation in system administration (Unix or Windows), familiarity with networking and cyber security, and hands-on experience with infrastructure scanning tools. The candidate must be equally comfortable speaking with developers as well as infrastructure teams about vulnerabilities and configuration compliance. Reporting into the Director of Vulnerability Management, the Vulnerability Analyst will be accountable for the identification, reporting and remediation of vulnerability and compliance findings within their area of responsibility. Maintain awareness of the latest critical information security vulnerabilities, threats, and exploitsAssist in facilitating vulnerability and compliance scanning and reporting activities, as directed by senior team members, ensuring accurate & timely identification, reporting, and escalation.Leverage vulnerability management reports and metrics, to drive remediation of vulnerabilities for specified areas of the environmentCommunicate with technology staff on vulnerability management and remediation of key vulnerabilities. Assist teams with understanding the vulnerability, possible remediations, and assist with false positives or mitigation solutions. Identify enhancements to tools, standards, and processes to enable continuous process improvement and automation of existing processes.In zero-day events, iterate through VM lifecycle – creatively assist with time-sensitive escalations, developing new types of reports, and perform special investigations.