Threat and Vulnerability Management Consultant

Job Title: Threat and Vulnerability Management Consultant

Location: Need local to NY OR NJ Onsite

Duration: 12 Month Contract

We'll Trust You To:

• Perform IT Security assessments and partner with other security or IT professionals to assess
• potential impact from vulnerabilities and determine appropriate mitigating controls
• Build strong partnerships with technical teams to promote best practices for managing
• vulnerabilities across traditional infrastructure and in cloud environments.
• Understand business requirements and work with business partners to define appropriate
• solutions; meeting both security mandates and business needs - Help standardize work-flows, processes, procedures and reporting - Produce metrics and key performance indicators that demonstrate the effectiveness of the
• teams remediation efforts across the enterprise
• Improve the design and usefulness of our IT Security management tools and solutions.
• Have excellent interpersonal and effective communications skills

You ll Need To Have:

• 5+ years IT operations, systems management or IT Security related experience
• Hands-on expertise working with enterprise network architectures, Linux and Windows OS,
• system administration or as a software developer
• Knowledge of IT security and system hardening best practices; including but not limited to operating systems (Windows, Unix, Linux), public cloud, web applications, network devices,
• SDLC processes, and concepts Knowledge of Active Directory best practices and application of security hardening
• Experience analyzing vulnerability findings from IT and Security management tools
• Understanding of industry standards such as NIST, CVE, CPE and CVSS
• Ability to interpret complex data sets to make informed risk-based decisions
• Can effectively manage complex tasks, projects, and initiatives

We'd love to see:

• Solid understanding of Risk management frameworks
• Experience working with operational vulnerability scanners, attack surface / path management
• tools (ie: Rapid7, Qualys, Nessus, Bloodhound)
• Ability to learn and implement technologies quickly
• A bachelor's degree in Computer Science, Engineering, Information Security, or other related fields
• 2+ years of Python Programming experience