Job Description

1) Understanding of Vulnerability Management principles and Risk Assessment methodologies

2) Familiarity with CVSS, CPE

3) Familiarity with OWASP Top 10 vulnerabilities, SANS 25, MITRE Attack, and CWEs

4) Experience as a Vulnerability or Threat Analyst

Knowledge of Linux and Windows Operating Systems
Familiarity with basic program languages such as Python and Java
Experience conducting vulnerability assessments, code reviews and penetration tests against system and application technologies, services, platforms and languages to find flaws and exploits
(e.g., SQL Injection, Cross-Site Scripting, Cross-Site Request Forgery, Clickjacking, Authentication/Authorization, Privilege Escalation, Business Logic Bypass)