Associate, Vulnerability Assessment
šŗšø United States
Management
Python
AWS
GCP
Azure
Machine Learning
Cybersecurity
Mental Health
$86,000 - $96,000
Associate, Vulnerability Assessment
from šŗšø United States
$86,000 - $96,000
What You'll Do
- Operate, review, or assess implementations of vulnerability scanning tools (Tenable, Qualys, Nexpose, Prisma Cloud, Burp, etc.).
- Provide recommendations on remediating host-based and web application vulnerabilities.
- Conduct manual validation to confirm vulnerability closure.Ā
- Analyze raw scan data to provide reports detailing credential success, inventory validation, and open vulnerabilities.
- Perform analysis to validate justifications provided by clients for vendor dependencies, false positives, operational requirements, and risk adjustments.
- Collaborate with other Coalfire personnel to drive customer satisfaction and ensure timely delivery of vulnerability scan findings, analysis results, and validated justifications.Ā
What You'll Bring
- Less than 2 years of vulnerability assessment experience.
- Past experience with a leading vulnerability scan tool (Tenable, Qualys, Nexpose, Prisma Cloud, Burp, etc.).
- Bachelorās degree in related Cybersecurity, Information Technology, Computer Science, or equivalent combination of education and experience.
- Understanding of policies, procedures, development, and implementation of vulnerability identification, scanning, analysis, remediation tactics, and reporting within an organization.Ā
- In depth knowledge and experience of industry best practices for vulnerability management.Ā
- Expertise in Security Frameworks (ISO, NIST, COBIT, HIPAA/HITECH, etc.) and regulatory requirements.
- Certification in Security+, CCSK, AWS Cloud Practitioner, SSCP, GSEC, CEH, Cloud+, SC-900, ISC² CC, AZā900, Cloud Essentials+, or GCP
Bonus Points
- Familiarity with 3 or more frameworks such as FedRAMP, FISMA, SOC, ISO, HIPAA, HITRUST, etc.
- Experience creating system inventories, boundary diagrams, and/or plans of actions and milestones (POA&M).Ā
- Familiarity with Cloud services such as AWS, GCP, & Azure.Ā
- Familiarity with configuration baseline standards such as CIS & STIG.
- Experience with scripting such as Python, Bash, PowerShell.