Vulnerability Management Program

Required:

• 3-6 years of experience in vulnerability management, information security, or technical cybersecurity roles
• Bachelor's degree in Computer Science or equivalent experience
• Certified Information Systems Security Professional (CISSP) certification
• Experience conducting vulnerability scans across internal and external networks
• Experience with network infrastructure devices, including routers and switches
• Experience with networking protocols, including Transmission Control Protocol/Internet Protocol (TCP/IP), Domain Name System (DNS), and Hypertext Transfer Protocol (HTTP)
• Experience using National Vulnerability Database, Common Vulnerabilities and Exposures (CVE), and Common Vulnerability Scoring System (CVSS) nomenclature

Preferred:

• Experience with vulnerability management tools such as Qualys, Tenable, or Rapid7
• Experience translating technical findings into remediation recommendations
• Experience with patch management tools such as Microsoft Intune, BigFix, Red Hat Satellite, or Microsoft System Center Configuration Manager (SCCM)
• Experience with asset inventory, provisioning, or deprovisioning lifecycle processes
• Experience with Confluence, Jira, or Configuration Management Databases (CMDBs) such as ServiceNow
• Experience with threat analysis, malicious code analysis, or enterprise mitigation strategies