One of Myticas Consulting's direct clients is seeking a Sr Penetration Testing/Vulnerability Consultant for a 100% Remote contract position.
NOTE: Must be a US Citizen.
Job Description:
One of our direct clients is seeking a Seasoned Senior Vulnerability Analyst who will report to the Lead Cybersecurity Engineer within CSPO and support the projects and tasks associated with Vulnerability Management Program.
The Vulnerability Analyst will play an important role to identify, assess, prioritize, report, and assist others in mitigating vulnerabilities within an organization's information systems.
Qualifications:
- Practical experience in conducting vulnerability assessments and/or penetration tests.
- Experience in system and network administration.
- Familiarity with security concerns and vulnerabilities common in an enterprise environment, including application development, IT/OT environments, virtualization, containers, etc.
- Staying up to date with the latest cybersecurity threats, vulnerabilities, and best practices.
- Strong analytical and problem-solving skills to identify and assess vulnerabilities.
- Meticulous attention to detail to ensure thorough assessments and accurate reporting.
Technical Skills—
Vulnerability Assessment Tools:
- Proficiency in using vulnerability scanning tools such as Tenable, Nessus, Qualys, OpenVAS, and Nexpose.
- Familiarity with penetration testing tools like Metasploit, Burp Suite, and Nmap.
Operating Systems:
- Strong knowledge of various operating systems, including Windows, Linux, and macOS.
- Understanding of system administration and security configurations.
Networking:
- In-depth understanding of network protocols, architecture, and security.
- Experience with network scanning and monitoring tools.
Scripting and Programming:
- Ability to write scripts in languages such as Python, Bash, or PowerShell to automate tasks and analyze data.
- Basic programming skills to understand and analyze code for vulnerabilities.
Security Frameworks and Standards:
- Familiarity with cybersecurity frameworks and standards such as NIST, ISO 27001, CIS Controls, and OWASP.
- Understanding of the Cybersecurity Framework (CSF) and NIST 800-53 controls.
Certifications (Optional):
- Certified Information Systems Security Professional (CISSP):
- Certified Ethical Hacker (CEH):
- CompTIA Security+:
- Certified Information Security Manager (CISM):
- Offensive Security Certified Professional (OSCP):
- GIAC Security Essentials (GSEC):