Vulnerability Management Engineer

SUMMARY

The Vulnerability Management Engineer’s role is to manage various platforms and assist with various infrastructure related projects. This role will ensure the vulnerability management assessment platform is managed following company IT standards and best practices. This individual should possess experience in Vulnerability Management or other related security domain(s). This individual should develop and maintain strong working relationships with teams and Operating Units that are responsible for vulnerability management and patching; requirements for remediation and mitigation of vulnerabilities and use automated technical means to validate that appropriate measures have been implemented to address the enterprise’s cybersecurity requirements. The individual should possess a comprehensive understanding of the kinds of vulnerabilities that can impact cloud, production environments and endpoints.

RESPONSIBILITIES:

• Maintain a comprehensive understanding of vulnerability management methodologies, procedures, and solutions for both application and infrastructure vulnerability management.
• Familiarize and work with patching processes and related technologies, including SCCM, Qualys, PowerShell, and Nessus.
• Possess knowledge and expertise in using Qualys.
• Analyze and understand metrics and trends related to vulnerability management functions.
• Manages and coordinates the activities of a project or solution to ensure that goals and objectives of the project are accomplished within a specified time frame
• Develop, recommend, and implement necessary improvements and changes to existing processes.
• Recommend, schedule, and perform software and hardware improvements, upgrades, patches, reconfigurations, and/or purchases.
• Develop, document, and maintain policies and procedures, along with associated training plans for system administration and appropriate use.

EDUCATION AND EXPERIENCE REQUIREMENTS

Required Education and Experience:
• Bachelor’s Degree
• 3-5 years of experience in Information Security, Computer Science, Business Administration, Data Analytics, or related field
• Experience working with IT Service Management systems
• Experience working with IT Asset Management systems
• Licenses/ Certifications: preferably with ITIL Foundation, Security and GSEC
• Experience working with service delivery methodologies (ITIL) – Intermediate Level
• Experience with End Point Protection – Intermediate Level
• Experience in automation and scripting: PowerShell, VBScript – Intermediate Level
• Performance analysis, troubleshooting and remediation techniques
• High Availability and Disaster Recovery principles, patterns and usage

COMPETENCIES:

• Customer service oriented and proactive in anticipating and resolving problems while maximizing efficient use of available IT resources
• Uses excellent problem-solving, communication, and interpersonal skills along with a patient, positive, and customer-friendly attitude within a team environment
• Demonstrates outstanding customer orientation and desire to enable client productivity
• Communicates effectively and efficiently with technical and non-technical audiences at all levels of organization; utilizes appropriate communication channels for given situations
• Acts professionally and tactfully at all times and in all situations; maintains a professional demeanor and appearance
• Produces high quality work results with a sense of urgency while maintaining a high level of focus on detail, exactness and completeness
• Builds leveraging relationships & teamwork environment with clients, peers and other IT teams that facilitate knowledge and information sharing; contribute to team’s body of knowledge; being recognized as a dependable member of team and a source of positive energy and attitude for clients and team
• Adheres to change management and documentation policies
• Good written and verbal communication skills