Vulnerability Analyst

Apply Now

Company: GroupA

Location: Miramar Beach, FL 32550

Description:

Location: Miramar, FL or Dallas, TX (HYRBID)

Lead regular vulnerability assessments of OT systems, networks, and devices to identify risks to the business
Develop information security policies, standards, and procedures for the OT Vulnerability Management program
Coordinate with teams and business partners regarding OT Vulnerability Management best practices for on premise and cloud-based solutions
Manage and monitor newly announced vulnerabilities and CVEs specific to OT environments
Integrate threat intelligence into vulnerability management processes to proactively address security risks
Serve as the OT Vulnerability Management expert and trusted advisor
Address vulnerabilities quickly and efficiently while ensuring little to no impact to the business
Develop strategies for the deployment of security patches, updates, and configurations to mitigate identified vulnerabilities
Develop and maintain OT-specific incident response plans that define detection, analyzing, and respond to security incidents with OT-environments and their systems
Coordinate with other incident response teams
Work closely with internal teams and OT vendors to assess and address security risks on OT systems
Assist with Enterprise vulnerability management

Requirement:

Bachelor's Degree
3 or more years of experience with utilizing, and managing, an Enterprise vulnerability scanner such as Nessus, Nexpose, Qualys, etc.
5+ or more years of experience in OT vulnerability management
Ability to create and influence a Vulnerability Management program at the enterprise level
Windows and Linux operating system
Experience with Vulnerability Management methodology
Deep understanding of OT environments mandatory
Ability to work with third-party vendors to ensure vulnerabilities are addressed in their applications and/or systems
Must understand all aspects of an OT environment to include networking, systems, and applications
Continually follow the threat landscape to stay on top of the latest OT-related vulnerabilities
Work effectively with technical and non-technical partners in a cross-functional setting
Work closely with the Security Operations team in performing Purple Teaming exercises
Must possess a pentesting certification such as OSCP, GPEN, CRTP, CWAPT, etc.

Preferred Qualifications