Job Title : Vulnerability Security Specialist

Location : (Chicago,IL,60614) OR (Denver,CO,80246)

Duration : 12 Months Contract (Possibility of extensions)

Job Description :

Must Haves:

• Experience as a vulnerability management role
• Experience in documentation with security tool processes & procedures & audit documentation
• Knowledge of compliance scanning, intrusion prevention & detection
• Hands on experience with vulnerability scanning tools
  Nessus, Qualys, Acunetix, OpenVAS,etc.
• Strong PC skills including Office applications
  Excellent communication skills
• Experience in information security and/or data management roles
• Experience with vulnerability management and/or assessment
• Experience provide creative approaches to difficult problems providing a viable solution for risk visibility and risk reduction in the enterprise
• Ability to communicate risks and propose counter measures to senior technology executives
• Ability to review and analyze data to determine overall risk
• Broad technical background utilizing security technologies, such as Server and workstation Operating Systems, Network Security, Vulnerability Scanning Engines, and Compliance Management solutions

Day to Day Responsibilities:

• Analyze findings from vulnerability reporting workstreams, to perform targeted QC on the vulnerabilities being reported and QC around scope of inventory being assessed.
• Review current existing vulnerability scanning processes for ways to streamline and make them more efficient.
• Respond to relevant requests received from stakeholders, or representatives of stakeholders, for investigation of potential reporting issues.
• Performs other related duties incidental to the work described herein and all special assignments as needed or assigned.
• Establishing processes and controls to monitor CVE based vulnerabilities and associated risk on technology where we do not have GIS tools for automated scanning
• Experience with analytics as a focus area within Information Security
• Strong experience with CVE based vulnerability identification and risk analysis