You will be part of a global Vulnerability Management (VM) team dedicated to identifying and mitigating vulnerabilities within our IT systems. The Team utilizes various tools (Crowdstrike Exposure Management, Tenable, Pentera, ZAProxy..etc) to conduct thorough vulnerability assessments and ensure our security posture remains robust against emerging threats.
Your tasks will include:
-
Manage and maintain our Crowdstrike Exposure Management platform for effective vulnerability scanning, analysis, and reporting;
-
Develop and maintain Vulnerability Scan schedules and conduct regular scans across global IT assets (networks, servers, cloud environments, endpoints);
-
Perform vulnerability scans using Crowdstrike Network Scanner, Pentera tool, ZAProxy and Tenable Nessus;
-
Analyze scan results, prioritize vulnerability findings based on risk impact, exploitability, and business criticality, support remediation efforts, and work with other IT departments on mitigation;
-
Manage Pentest request, analyze result and provide consultation about remediation to the requestor;
-
Provide regular reports on vulnerabilities and remediation progress;
-
Provide security recommendations based on industry standards such as CVSS, NIST, and CIS benchmarks;
-
Support IT departments for compliance with global cybersecurity regulations and frameworks (ISO 27001, NIST, GDPR, PCI DSS, etc.);
-
Stay updated on the latest cybersecurity threats and technologies.