ARMIS Centrix Certified SME

Job Title:             Armis VIPR (Vulnerability and Prioritization) SME

Location:             100% Remote

Duration:             6+ Months

Must have Armis certification

Job Description:

Number of connectors & what tools: 3 connectors (GitHub Enterprise Server, GitHub (Cloud), ServiceNow)

Ticketing integration: ServiceNow (and possibly Jira) integration(s) needed w/ VIPR ticketing.

Reporting requirements:

• Reporting on vulnerability findings to differentiate when a finding requires a patch vs when a system/app configuration change is needed.
• Reporting on static campaigns that captures findings between specific dates. Including impact to environment, progress on asset remediations, and time to complete campaigns.
• Templated reports review specific CVEs to show impact w/in our environment, progress on remediation, and time taken to implement remediation.
• Reporting to see risk factor modification.
• Reporting to see ignored assets and ignored findings.
• Reporting to see statistics on open/closed tickets within ViPR ticketing.

Automation Rules:

• Build out of custom Labels and Ownership, Compliance, Ignore, & SLA Rules

VIPR Campaigns:

• Creation of VIPR Campaigns and VIPR tickets

Custom risk calc requirements:

• Automated risk calculation adjustments to adjust risk score in ViPR if controls such as WAF, EDR, SIEM, IDS/IPS, File Integrity Monitoring, Anti-malware, Network Segmentation, etc. are or are not in place for assets. 
• Automated risk calculation adjustments to increase severity of finding(s) if CVEs can be chained together to increase impact/risk within the Atmos environment. (Can this be done before Armis releases Attack Mapping feature?)