Enterprise Vulnerability Management Lead/Specialist

• Proven experience in the field of cybersecurity, with a specialized focus on vulnerability management, security operations, or infrastructure protection.
• Oversee and direct organization-wide vulnerability management initiatives.
• Develop and implement vulnerability management policies, standards, and operational procedures.
• Promote ongoing enhancements to the vulnerability management framework.
• Establish key performance indicators (KPIs), key risk indicators (KRIs), service level agreements (SLAs), and remediation benchmarks.
• Conduct and coordinate vulnerability assessments across various platforms, including Servers, Workstations, Network Devices, Cloud Platforms (AWS, Azure, GCP), and web applications.
• Monitor remediation efforts and ensure compliance with SLAs.
• Validate remediation efforts and perform follow-up scans.
• Escalate critical and overdue vulnerabilities to relevant stakeholders.
• Engage in Threat & Exposure Management by monitoring security advisories, zero-day vulnerabilities, and emerging threats.
• Manage Security Reporting & Metrics by creating executive dashboards and operational reports, and providing regular updates on vulnerability posture to leadership.
• Participate in Compliance and Risk Management, as well as Stakeholder Management.
• Focus on Automation & Continuous Improvement initiatives.
• Possess technical acumen in the following areas:

·        Vulnerability Management Platforms such as Qualys VMDR, CrowdStrike Spotlight, etc.

·        Application Security methodologies including SAST, DAST, OWASP Top 10, and Secure Software Development Life Cycle (SDLC).

·        Cloud Security frameworks for Microsoft Azure, AWS, Google Cloud, etc.

·        Security Technologies, including SIEM solutions (Microsoft Sentinel, Splunk, QRadar) and Endpoint Security.

·        Operating Systems & Infrastructure knowledge, covering Windows, Linux/Unix, Active Directory, and Network Security.

·        Automation & Scripting proficiencies in PowerShell, Python, Shell Scripting, and REST APIs.