Cyber Security Vulnerability Management Consultant (Threat Identification & Prioritization)

Quick Facts

• Role: Cyber Security Vulnerability Management Consultant (Threat Identification & Prioritization)

Description

You will identify, investigate, and assess security vulnerabilities, then prioritize them using CVSS, exploitability, asset criticality, and business impact. You’ll support Vulnerability Management activities such as remediation and risk reduction, including analyzing vulnerability scanner results and relevant logs. The role also helps identify security risks related to AI systems, LLMs, and AI agents.

Responsibilities

• Identify, investigate, and assess security vulnerabilities
• Analyze vulnerabilities using CVE databases, NVD, vendor advisories, and security bulletins
• Prioritize vulnerabilities based on CVSS scores, exploitability, asset criticality, and business impact
• Support Vulnerability Management processes, including remediation and risk reduction activities
• Work with vulnerability scanning and assessment tools
• Analyze scan results and understand the capabilities and limitations of vulnerability scanning solutions
• Analyze system logs and perform basic troubleshooting of operating systems and network connectivity
• Identify security risks related to AI systems, LLMs, and AI agents

Requirements

• Solid understanding of cybersecurity principles and the common threat landscape
• Practical knowledge of Vulnerability Management and vulnerability assessment processes
• Good understanding of CVSS and vulnerability severity classification/prioritization
• Experience with vulnerability scanning tools such as Qualys, Tenable Nessus, Rapid7, OpenVAS, or similar solutions
• Ability to research and investigate vulnerabilities using CVE, NVD, vendor advisories, and security bulletins
• Understanding of vulnerability remediation processes and risk reduction practices
• Good knowledge of networking fundamentals (TCP/IP, DNS, DHCP, routing, firewalls, proxies, network segmentation)
• Good understanding of Microsoft Windows and Linux, including system administration fundamentals and security best practices
• Knowledge of common Linux commands (grep, find, ps, netstat/ss, chmod, chown, journalctl, systemctl)
• Basic knowledge of PowerShell (administrative and information-gathering commands)
• Ability to analyze logs and collect information for basic troubleshooting

Benefits

Not specified in the provided text.