Cyber Sphere LLC
Cyber Sphere LLC

Vulnerability Management Assessment SME (Hands-On)

Remote • Posted 1 hour ago • Updated 1 hour ago
Contract W2
12 Months
No Travel Required
Remote
Depends on Experience
Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Job Details

Skills

  • Vulnerability Management
  • Vulnerability Management Assessment
  • Vulnerability Management Program Assessment
  • Enterprise Vulnerability Assessment
  • Vulnerability Assessment
  • Vulnerability Management Consultant
  • Vulnerability Management SME
  • Vulnerability Management Maturity Assessment
  • Vulnerability Gap Analysis
  • Security Risk Assessment
  • Tenable
  • Tenable.sc
  • Tenable.io
  • Nessus
  • Qualys
  • Qualys VMDR
  • Rapid7 InsightVM
  • Nexpose
  • Microsoft Defender Vulnerability Management
  • Credentialed Scanning
  • Authenticated Scanning
  • Vulnerability Scanner Administration
  • Scan Configuration
  • Scan Policy Tuning
  • Scan Coverage Analysis
  • Asset Discovery
  • Asset Inventory
  • False Positive Validation
  • Vulnerability Remediation
  • Vulnerability Risk Prioritization
  • CVSS
  • EPSS
  • CISA KEV
  • Risk-Based Vulnerability Management
  • Remediation SLA
  • Risk Acceptance
  • Vulnerability Exception Management
  • NIST CSF
  • NIST Cybersecurity Framework
  • CIS Controls
  • Windows Security
  • Linux Security
  • Network Security
  • AWS Security
  • Azure Security
  • Cloud Security
  • Python
  • PowerShell
  • ServiceNow
  • SCCM
  • Intune
  • Security Assessment Report
  • Vulnerability Management Roadmap
  • Program Maturity Assessment
  • Security Controls Assessment
  • Enterprise Cybersecurity

Summary

Title – Vulnerability Management Assessment SME (Hands-On)

Location-Remote @ Atlanta, GA  

Duration –Contract

 

Need someone who has done 2 VM assessments

We are looking for a hands-on, technical Vulnerability Management SME who has personally delivered enterprise VM assessments. This is not a governance-only or project-management role. The consultant will work directly in VM tools, analyze scan data, and deliver a risk-based assessment and roadmap within 8 weeks.

Mandatory Requirements

· At least 2 end-to-end vulnerability management program assessments personally delivered for enterprise clients, with the ability to explain the scope, methodology, findings, and outcome of each.

· 7+ years of hands-on technical vulnerability management experience.

· Deep hands-on administration of at least one of Tenable (SC/IO), Qualys VMDR, Rapid7 InsightVM, or Microsoft Defender VM, including scan configuration, credentials, policies, agents, tuning, and reporting.

· Can validate findings technically and identify false positives, scan coverage gaps, and authentication gaps.

· Strong technical knowledge of Windows, Linux, network devices, and cloud (AWS/Azure).

· Has built risk-based prioritization models using CVSS, EPSS, CISA KEV, and asset criticality. Responsibilities

· Review scan configurations, coverage, credentialed scan success rates, and asset inventory accuracy directly in the tools.

· Analyze vulnerability data: aging, recurrence, SLA compliance, and remediation trends.

· Assess program maturity against NIST CSF and CIS Controls.

· Design the prioritization model, remediation SLA matrix, and exception process.

· Deliver the technical assessment report, a 12-month roadmap, and an executive readout. Preferred

· Scripting in Python or PowerShell for scan data analysis or API automation

· Experience integrating with ServiceNow or SCCM/Intune

· Certifications: OSCP, GIAC (GEVA/GPEN), CISSP, or Tenable/Qualys certifications

· Local to the Atlanta area Screening Requirements

· Candidates must describe 2 VM assessments they delivered: client industry, environment size, tools used, and key findings.

· A technical interview will include hands-on scenario questions on scan tuning, credentialed scanning, and prioritization

 

Regards,

 

Sai Srikar

Email:

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
  • Dice Id: 91081414
  • Position Id: 9132218
  • Posted 1 hour ago
Contact the job poster
Sai Sekhar

Sai Sekhar

Recruiter @ Cyber Sphere LLC

View Profile
Create job alert
Never miss an opportunity! Create an alert based on the job you applied for.
Remote jobs at Cyber Sphere LLC