Information Security Threat AND Vulnerability

Rootshell Enterprise Technologies•Atlanta, GA

4d•Remote

About The Position

The position will work closely with other Information Security Engineers and IT functions to ensure appropriate controls are in place, and to ensure that security policies are being effectively employed. Responsible for running and growing the Threat & Vulnerability Management program. Leads and coordinates stakeholder meetings with affected stakeholders as well provides updates to management regarding scanning results and remediation plans.

Requirements

BS in Computer Science or equivalent with 7+ years of technical or security training experience.
Understanding of controls (e.g. access control, auditing, authentication, encryption, integrity, physical security, and application security).
Well versed in operating systems such as Linux as well as Windows environments, Active Directory, encryption schemas and algorithms, various authorization and authentication mechanisms/software, network monitoring and sniffing, TCP/IP networks, Threat and vulnerability management.
Experience with industry standard vulnerability scanners, vulnerability management systems, patch management and host-based security systems.
VULNERABILITY ASSESSMENT
INFORMATION SECURITY

Nice To Haves

Technical network (e.g. CCNA, CCNP Security) and security certifications highly desirable (e.g. CISA, CISSP, GCIH).
Project Management skill is a plus

Responsibilities

Running and growing the Threat & Vulnerability Management program.
Leads and coordinates stakeholder meetings with affected stakeholders.
Provides updates to management regarding scanning results and remediation plans.
Configuring vulnerability assessment tools, performing scans, researching and analyzing vulnerabilities, identifying relevant threats, and making corrective action recommendations.
Summarizing and reporting results.
Coordinating scanning activities with cross-functional teams and working collaboratively with all levels of the business.
Analyzing penetration test results and engaging with technology partners and business units to resolve identified vulnerabilities within SLAs.
Identifying and resolving false positive findings in assessment results.
Developing and publishing advanced reports based on KPIs that drive reduction in the risk to the business and are tailored to the risk of each vertical.
Producing metrics and reporting on the state of system security, threat, vulnerability, and patch management.
Managing tracking and remediation of vulnerabilities by leveraging agreed-upon action plans and timelines with responsible technology developers and support teams.
Recommending appropriate policy, standards, process, and procedural updates as part of comprehensive remediation solutions.
Validating remediation by reviewing application updates or deployed mitigations to verify resolution.