[Hiring] Vulnerability Management Specialist @Navtech, Inc.

Role Description

I have an opportunity for a "Vulnerability Management Specialist/ Cybersecurity Project Manager" (Brooklyn, NY - Remote) and I am looking for a candidate who can join immediately. If you are interested, please reply with your updated resume or refer someone.

Position: Vulnerability Management Specialist/ Cybersecurity Project Manager

Location: Brooklyn, NY - REMOTE

Duration: 10+ months

Qualifications

• At least 8 years of experience in Cybersecurity, including:
• Vulnerability management scanning tools
• Vulnerability assessments
• Scripting
• Vulnerability management scan result analysis
• Excel
• Strong knowledge of:
• CVE's
• CVSS
• Vector Strings
• NVD
• Mitre
• Attack vectors and mitigations
• Experience with the design, architect, and build of vulnerability management scanning infrastructure and tools, specifically Rapid7 and Tenable.
• Extensive hands-on experience conducting Rapid7 and Tenable vulnerability scans across various networks.
• Experience conducting Rapid7 and Tenable vulnerability management analysis through reports and dashboards to accurately identify risk.
• Experience evaluating security vulnerabilities, assessing risk and impact, developing mitigation strategies, and implementing remediation.
• Experience conducting intel research around CVE's, vendor hardware/software vulnerabilities, and presenting succinct technical overviews to team members and customers.
• Extensive experience with scripting such as Python and PowerShell to automate vulnerability management tasks.
• Extensive experience with Excel, especially for performing data analysis through VLookup and Pivot Tables.

Requirements

• Experience with Cybersecurity standards and best practices and how to integrate them.
• Provide oral and written reports on vulnerability risk to the team and possibly agencies' technical stakeholders.
• Ability to evaluate the current threat landscape that includes tactics, techniques, and procedures.
• Strong background with next generation firewall products, intrusion detection systems, DMZ, IPSec, DNS, SMTP, HTTP, VPN, proxies, etc.
• Knowledge of security best practices across multiple platforms, such as Microsoft Windows, VMWare, Linux, VPN, Cisco IOS, and Mobile OS Android/Apple IOS.
• Knowledge of public-key cryptography, understanding of encoding, encryption, and hashing techniques.
• Knowledge of security best practices: NIST, CIS, Cisco, Juniper, Palo Alto, Fortinet, Checkpoint, F5, Microsoft, Unix/Linux, etc.
• Ability to analyze Cybersecurity documentation, including security policies, plans, and procedures.
• Extensive experience with Windows and Linux Servers.
• Exceptional written and oral communication skills.
• Exceptional organizational and analytical skills.
• Certifications such as:
• Certified Information Systems Security Professional (CISSP)
• Security Essentials Certification (GSEC)
• Certified Intrusion Analyst (GCIA)
• Certified Incident Handler (GCIH)
• Certified Ethical Hacker (CEH)
• Certified Penetration Tester (CWAPT)

Company Description