Job Description (Posting). JD Vulnerability Management L3 1. Experience working on the day-to-day activities on the Insight VM Rapid7 tool 2. Should have good knowledge of information security areas such as Vulnerability Management, Penetration Testing, Risk Management, Web Application Scanning, Policy Compliance 3. Collaborate with various business team for issue resolution and mitigation via workshops 4. Able to drive the VM program and manage team of l2 resources. Should be able to govern and drive the team to achieve the remediation goals. 5. Able to understand, design and develop threat mitigation strategy, prioritize identified threats, managing risks associated with threats 6. Provide technical expertise in identifying modeling and reporting on emerging threats wrt to technologies in client environment 7. Good knowledge on working on Insight VM platform and utilizing all the functionalities available in the platform, 8. Experience working on exploiting vulnerabilities found during the port scan and well versed with using the tools like Metasploit, burp suit, kali Linux would be plus. 9. Good understanding of information security related fields, including security implementation, security operations, and security policy and security technology administration. 10. Experience with accessing information security and Risks on a variety of platforms, including Mainframe, Oracle, Unix, Windows, Networks, Firewall and E-commerce 11. Worked on CIS security controls to configure the controls in the tool template and validate control effectiveness on servers, network devices. 12. Should Possess good knowledge of standards and compliance such as PCIDSS, NIST Risk Framework 13. Able to advise on mitigation and remediation of threats and coordinate with other teams and data source catalogue. 14. Experience in analyzing and prioritizing the vulnerabilities based on the asset criticality 15. Experience in Integrating vulnerability management with other technologies like ticketing tool, CMDB would be a plus. 16. Experience creating dynamic tagging, asset groups, reports, metrics etc. 17. Should have a good customer handling skills Qualification: Candidate should be graduate preferably B.E/ B. Tech/MCA. Certification: Candidate should have done certifications like CISSP/CISA / ISO 27001 LA or other relevant certification. Experience: Candidate should have overall experience of 6+ years in Vulnerability Management. Soft Skills: Must be from global support background. Motivated to complete tasks and projects Excellent spoken English skills, Able to walkthrough reports and discuss on the issues, challenges etc. Excellent writing skills. Must be able to create/edit technical documentation. (1.) To clearly understand the client's cybersecurity environment and respective product. (2.) To monitor, configure, and troubleshoot cybersecurity issues and related monitoring tools (3.) To analyse and validate cybersecurity incidents in-detail and help the L3 team with RCAordata or logs collection (4.) To enable knowledge transferortrainings through creationor maintenance of configuration documents, test plans, operational manuals and provide operational training to L1 team. (5.) To analyse and fine-tune cybersecurity policies, participate in cybersecurity review calls pertaining to change requests and recommendations on cybersecurity policy changes. (6.) To implement changes, monitor security device performance and implements performance tuning when necessary. (7.) To prepare analyses and reports to highlight the project progressorchallenges and ensure quality and accuracy to the client Qualification B-Tech Skill (Primary) Domain Competencies-Cybersecurity Operations-Vulnerability & Compliance Remediation
