Threat and vulnerability management engineer
Avertium is the managed security and consulting provider that companies turn to when they want more than check-the-box cybersecurityIn today’s threat landscape, your not-so-standard processes, workflows, and vulnerabilities require more than just a standard approach to cybersecurityYou need a smarter, stronger, show-no-weakness approach based on more rigor, more relevance, and more responsivenessThat’s why more than 1,200 organizations in every sector from manufacturing to financial services, healthcare to technology and business services to hospitality rely on avertium for cybersecurity services.
Position profile:
Avertium is looking for a lead engineer on the managed vulnerability assessment team.
As a lead engineer you will be focused on finding reporting and supporting customers vulnerability remediation efforts.
Responsibilities:
Lead and execute the managed vulnerability scanning program.
Develop and maintain vulnerability management architecture, design and strategy with other vmaas leadership.
Experience using tools such as tenable, qualys, nexpose, nmap, ddi and other tools.
Understanding of vulnerability ratings and methodologies.
Knowledge of owasp web and mobile top 10 vulnerabilities and identifying them.
Conduct vulnerability assessments and vulnerability testing of customer systems and networks.
Able to author and issue reports based around application and system scans.
Present report findings and remediation recommendations to customers.
Position qualifications:
Possesses relevant university degree and or professional work experience.
Be able to work in a managed service environment.
Self-motivated, knowledge in industry related news and events.
5-10 years’ experience in information security
Strong written and verbal communication to document and communicate findings and escalate critical events in a customer facing role.
Experience with incident response including knowledge of ttp’s and mirte att&ck framework.
Technical/professional security certifications (such as: ccnp, nse4, sans giac, cissp, crisc, cisa, or vendor-specific).
Proficient understanding of regulatory and compliance frameworks, including but not limited to hipaa, pci.
In addition to a career in the challenging world of computer and network security, avertium offers competitive salaries, full benefits, participation in 401(k), and opportunities for professional growth and developmentWe offer the opportunity to work with cutting-edge security technologies in a stimulating work environmentAvertium is an equal opportunity/affirmative action employerAll qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.
