Remote: Armis VIPR SME

Armis VIPR SME

100% Remote

6+ Months

Job Description:

Number of assets: ~ 30K

Number of connectors & what tools: 3 connectors (GitHub Enterprise Server, GitHub (Cloud), ServiceNow)

Ticketing integration: ServiceNow (and possibly Jira) integration(s) needed w/ VIPR ticketing.

Reporting requirements:

• Reporting on vulnerability findings to differentiate when a finding requires a patch vs when a system/app configuration change is needed.
• Reporting on static campaigns that captures findings between specific dates. Including impact to environment, progress on asset remediations, and time to complete campaigns.
• Templated reports review specific CVEs to show impact w/in our environment, progress on remediation, and time taken to implement remediation.
• Reporting to see risk factor modification.
• Reporting to see ignored assets and ignored findings.
• Reporting to see statistics on open/closed tickets within ViPR ticketing.

Automation Rules:

• Build out of custom Labels and Ownership, Compliance, Ignore, & SLA Rules

VIPR Campaigns:

• Creation of VIPR Campaigns and VIPR tickets

Custom risk calc requirements:

• Automated risk calculation adjustments to adjust risk score in ViPR if controls such as WAF, EDR, SIEM, IDS/IPS, File Integrity Monitoring, Anti-malware, Network Segmentation, etc. are or are not in place for assets. 
• Automated risk calculation adjustments to increase severity of finding(s) if CVEs can be chained together to increase impact/risk within the Atmos environment. (Can this be done before Armis releases Attack Mapping feature?)

Custom dashboards:

• Total number of Vulnerabilities/findings w/in the Atmos environment
• Campaign specific dashboards
• Findings on vulnerabilities for specific ViPR teams/Remediation Owners
• Vulnerabilities/findings for specific orgs w/in Atmos for leaders to see how their group(s) are tracking
• Template dashboards for Specific CVEs at high/critical level that may require higher priority remediation
• Dashboard to show old open tickets where the finding has been remediated.
• Dashboard(s) showing Mean Time to Remediate (MTTR) & Risk Reduction.