Vulnerability Management Analyst

Cyderes (Cyber Defense and Response) is a pure-play, full life-cycle cybersecurity services provider with award-winning managed security services, identity and access management, and professional services designed to manage the cybersecurity risks of enterprise clients.  We specialize in multi-technology, complex environments with the in speed and agility needed to tackle the most advanced cyber threats. We leverage our global scale and decades of experience to accelerate our clients’ cyber outcomes through a full lifecycle of cybersecurity services. We are a global company with operating centers in the United States, Canada, the United Kingdom, and India.

About the Role 

Cyderes is looking for a dedicated, creative, and experienced security engineer to join our Vulnerability Management Analysts' team.  

This candidate should have a deep understanding of security operations, vulnerability management, change management, security awareness, risk reporting, and product ownership. This is a great opportunity for someone who is seeking to solve customers cyber security problems in a great environment with an exceptional team. We have a heavy focus on empowering our employees to make great decisions by collecting rich datasets from customer environments. Critical thinking, passion, and an attitude for growth are essential to the success of this position. 

Responsibilities:

• Implementation and support of attack surface management and vulnerability management platforms such as but not limited to Tanium (preferred), Tenable, and Rapid7.

• Execute vulnerability scanning of internal, external, and cloud networks 

• Provide expert level product ownership and plan, design, & implement enterprise vulnerability scanning infrastructure in a cloud or on prem environment

• Develop scripts, tools, or methodologies to enhance the Vulnerability Management team's processes, using tools such as PowerShell and Python 

• Maintain detailed documentation and best practices for customers.  

• Monitor various sources of threat intelligence feeds and assess their impact to customer environments. 

• Configure web application vulnerability scans. 

• Create comprehensive technical reports and effectively communicate findings to key stakeholders (technical and/or executive)  

Requirements:

• 3 or more years of progressing/in-depth cyber security experience 

• Formal education in computer science, cyber security, or similar 

• Advanced scripting or development experience in one of the following languages: Python, JavaScript, Powershell, bash, etc. 

• Experience with vulnerability management tools such as Rapid7, Tenable, and Qualys 

• Experience with Tanium is preferred. 

• Experience with Security Awareness tools, such as KnowBe4 and Cofense PhishMe, is preferred. 

• Experience with OT vulnerability tools, such as Claroty and Tenable.ot, is preferred. 

• Certifications such as CISSP, and others related to attack surface management & vulnerability management.  

• Experience with Web Application scanning 

• Experience with cloud service providers such as AWS, Azure, GCP 

• Excellent communication skills - written and oral

Cyderes is an Equal Opportunity Employer (EOE). Qualified applicants are considered for employment without regard to race, religion, color, sex, age, disability, sexual orientation, genetic information, national origin, or veteran status.

Note: This job posting is intended for direct applicants only. We request that outside recruiters do not contact us regarding this position.