Security Vulnerability SME - Remote

Job Description:
As a Security Vulnerability SME, you will serve as the subject matter expert for managing and administering the vulnerability management program within the Client. This includes oversight of security vulnerabilities for the Client. The role requires conducting assessments, ensuring regulatory compliance, coordinating remediation efforts, and providing security training and awareness programs.

Key Responsibilities:

• Serve as the SME for the vulnerability management program, ensuring effective administration and oversight
• Conduct regular vulnerability assessments and penetration tests to identify security weaknesses
• Collaborate with compliance teams to ensure adherence to regulatory security standards and industry best practices
• Work with IT and development teams to prioritize vulnerabilities and coordinate remediation efforts
• Stay updated on emerging security threats, trends, and best practices to improve vulnerability management processes
• Prepare and present vulnerability management reports to senior management, providing key findings and recommendations
• Provide security awareness training and risk mitigation guidance to IT and business teams
• Lead incident response activities related to security vulnerabilities and coordinate with external partners as needed
• Utilize incident tracking and ticketing systems to receive, delegate, and document tasks and resolutions
• Provide on-call and emergency support as required, including after-hours availability

Required Skills, Experiences, Education, and Competencies:

• 5+ years of experience in security vulnerability management and IT security operations
• Extensive experience with Tenable Security Center (certifications preferred)
• Experience with Dynamic Application Security Testing (DAST) tools such as Rapid7 AppSpider
• Strong technical proficiency with Windows and Linux operating systems, including system hardening
• Knowledge of cybersecurity regulatory compliance standards and frameworks such as NIST and FAIR
• Strong understanding of network protocols and technologies, including OSI Model, TCP/IP, firewalls, and intrusion detection systems
• Excellent analytical and problem-solving skills, with the ability to adapt to changing circumstances
• Professional oral and written communication skills, including the ability to present findings and negotiate remediation efforts
• Ability to work independently and collaboratively with cross-functional teams in a remote environment

The hourly range for roles of this nature are $40.00 to $80.00/hr. Rates are heavily dependent on skills, experience, location, and industry.

cyberThink is an Equal Opportunity Employer.