In this role, you will be responsible for the following:
- Review the vulnerability scan reports and eliminate false positives.
- Collaborate with product teams to prioritize and manage vulnerabilities and provide recommendations for remediation.
- Assess the risk of identified vulnerabilities and prioritize the remediation efforts.
- Provide technical support in troubleshooting issues with scanning tools.
- Take part in the patch management process and regularly identify and monitor the critical security vulnerabilities from different sources.
- Assist the development teams in vulnerability remediation process.
The essential requirements of the job include:
- Engineering degree in Computer Science, or equivalent
- 3-4 years of experience in vulnerability management/scanning or any other security domain
- Good understanding of different operating systems
- Experience with vulnerability scanning and testing tools (e.g., Nessus, Qualys, etc.)
- Experience with static code analysis tools (Veracode, fortify, Black Duck)
- Knowledge of security vulnerabilities and analyzing the risk score (e.g. CVE database, CVSS scoring)
- Serve as a technical team member of product cyber security team
- Security certifications (like CEH,OSCP)