Job Description

We are looking for Cyber Security Engineer profiles / CVs to share with our clients for their future recruitment campaigns.

Mission:

• Act as an internal subject matter expert with respect to CVA scanning and reporting. Assist in the maintenance of the enterprise to the VMLC (Vulnerability Management Life Cycle) policy and associated VM standard.
• Conduct required tasks for the vulnerability scanning program and publish reported vulnerabilities to impacted teams for remediation.
• Triage and risk rank vulnerabilities according to severity and exposure. Work with Product and IT teams to risk-rank and patch vulnerabilities across the technology stack. Develop remediation plans for vulnerabilities.
• Maintenance of an executive-level dashboard and actionable metrics that reflect the current enterprise security posture.
• Scan and report on the appropriate configuration standards to ensure baselines are being met and compliance drift is managed.
• Initiate improvement activity to reduce risk, ensure compliance, lower cost, and improve quality within IT processes.
• Conduct/support periodic risk assessments and develop appropriate mitigation plans in support of deliverables.
• Continuous review of configuration management and vulnerability management posture inside the company and knowledge of all external developments that could impact the CVA posture, including vendor patches, zero-day exploits, end-of-life systems, or deprecated services.
• The ideal Endpoint Security Ops Engineer will be adept at learning new security capabilities, adaptable, take initiative, and be a team player.