Sr Vulnerability Management Security Analyst
Pro Search, Inc.
Permanent | Full-time
Westbrook, ME
Job description
Company Overview
Alyn Inc. partners with Fortune 50 companies and top government agencies to enhance their Cybersecurity Operations programs. Our mission is to evaluate organizational structures and align them with NextGen initiatives, ensuring efficiency and effectiveness through expert guidance.
Summary
Alyn Inc. is seeking an experienced candidate to serve as a Vulnerability Assessment Analyst. The successful candidate is well-versed in vulnerability scanning technologies, conducting vulnerability assessments in large and diverse enterprise environments against both on-prem and cloud endpoints, servers and databases. The Vulnerability Assessment Analyst will conduct scan operations, review scan data, report on vulnerability findings, and manage/maintain the scanning environment.
Responsibilities
- Conduct scan operations planning and coordination.
- Execution of Scan operations to include external foot printing, conduct system and data checks upon initial scan of enterprise workstations, servers, and databases; monitor, coordinate, and react to concurrent scans conducted throughout the scan operations; troubleshoot issues that occur during active scanning.
- Develop new testing protocols to expand and deepen scan operations within the enterprise through utilization of new tools, crafting supporting scripts in PERL or Python, and creating new processes/procedures to mature service offering and efficiency of operations.
- Review Scan results and draft assessment reporting to inform leadership of results and guide remediation efforts by system owners.
- Contribute to the management and maintenance of the Vulnerability Scanning Environment.
- Review, create, and document standard operating procedures, recommendations, project specific documents and resource guides as needed. Drive continuous process improvement;
- Demonstrate and encourage innovative thinking, continuous learning and sharing of best practices;
- Maintain strong working relationship with the client to ensure a high degree of client satisfaction.
Required Qualifications
- Must be a US Citizen
- 5 - 7 years of strong network security, and vulnerability assessment experience
- Experience with a variety of assessment tools including Tenable, Nessus Scanner, NMAP, DBProtect, and AppDetective Pro
- Exposure to, and experience conducting Database Scanning of Microsoft SQL Server, Oracle, MySQL, PostgreSQL, MongoDB, AzureSQL, AWS RDS, and other Cloud PaaS Databases
- Ability to prioritize discovered vulnerabilities and set appropriate remediation timelines.
- Experience with MITRE ATT&CK Framework DISA STIG Interpretations, and scanning of Windows, Unix, and Linux Operating Systems
- Strong understanding of the CVSS vulnerability Scoring System
- Strong analytical and critical thinking skills
- Excellent writing and communication skills
Education:
- BA/BS or equivalent work experience
- GSEC, CySA+, Security+, CEH,
Job Types: Full-time, Permanent
Pay: Up to $115,000.00 per year
Benefits:
- 401(k)
- 401(k) matching
- Dental insurance
- Employee assistance program
- Employee discount
- Flexible spending account
- Health insurance
- Health savings account
- Life insurance
- Paid time off
- Professional development assistance
- Referral program
- Tuition reimbursement
- Vision insurance
Experience:
- Vulnerability assessment: 5 years (Preferred)
Ability to Commute:
- Atlanta, GA 30329 (Required)
Ability to Relocate:
- Atlanta, GA 30329: Relocate before starting work (Required)
Work Location: In person