Overview
Skills
Job Details
Currently, we are hiring for the following position;
Cyber Command Vulnerability Management Specialist
The Threat Management - Vulnerability Management Specialist is essential to OTI Cyber Commands Vulnerability Management program and its ability to defend City systems from cyber threat including direct support of public safety, revenue generating, and City operations that provide everyday services to citizens. The resource will contribute to OTI Cyber Command s ability to issue timely vulnerability notifications and prioritized system patching info.
Scope of Services:
The Cyber Command Threat Management division within OTI requires a Vulnerability Management Specialist to serve as a subject matter expert for vulnerability management:
Tasks
- Research, analyze and brief management and team members on relevant Risk, CVE's, CVSS, Vector Strings, NVD, Mitre, attack vectors and mitigations for various technologies
- Design, architect and build Rapid7 vulnerability management scanning infrastructure and tools
- Manage, configure and conduct Vulnerability Management scans in Rapid7 across various networks
- Conduct vulnerability management analysis through industry research, deep analysis, generating of reports and dashboards in Rapid7 to accurately assess and prioritize risk
- Evaluate security vulnerabilities, assess risk and impact, develop mitigation strategies, and implement remediation
- Present succinct technical briefings to team members and customers for Client research, risk assessment, CVE's, vendor hardware/software, industry trends
- Create scripts utilizing Python, PowerShell and others to automate vulnerability management tasks
- The ability to automate detection, reporting and tracking of vulnerabilities identified
- Create deep analysis and reports around vulnerability management utilizing Rapid7 dashboards and reports, scripts, Excel and PowerPoint
- Travel within NYC for various projects when necessary
Note: Candidates who do not have the mandatory skills will not be considered
- At least 8 years of experience in Cybersecurity, including vulnerability management scanning tools, vulnerability assessments, attack surface management, scripting, vulnerability Client analysis, vulnerability management scan result analysis, Excel
- Strong knowledge of CVE's, CVSS, Vector Strings, NVD, Mitre, attack vectors and mitigations
- Experience with the design, architect and build of vulnerability management scanning infrastructure and tools specifically Rapid7; extensive hands-on experience conducting Rapid7 vulnerability scans across various networks; experience conducting Rapid7 vulnerability management analysis through reports and dashboards to accurately identify risk
- Experience evaluating security vulnerabilities, assessing risk and impact, developing mitigation strategies, and implementing remediation
- Experience conducting Client research around CVE's, vendor hardware/software vulnerabilities, and presenting succinct technical overviews to team members and customers
- Extensive experience with scripting such as Python and PowerShell to automate vulnerability management tasks
- Extensive experience with Excel, especially for performing data analysis through VLookup and Pivot Tables
Thank you.