Job Description:
In this role, you are responsible for supporting vulnerability management program. This program focuses on identifying technical security vulnerabilities such as missing patches or insecure configurations, by conducting application, network, and operating system scanning in accordance with information security procedures and available tools. This position ensures daily operations (e.g., execution and support of vulnerability and policy compliance scanning, security posture assessment, metrics, etc.) within the organization, business teams and infrastructure teams are required to identify, track, and remediate open vulnerabilities on the organization's systems. Coordinated and scheduled remediation activities may involve applying patches, registry edits, upgrading versions of software, decommissioning software and documenting the need for business to accept the risk of vulnerabilities not being remediated. Applicants should have leadership and communication skills, an understanding of patch management, experience with supporting Windows and Linux scanning operations. Tools available in support of this effort may include; Tanium, SCCM, PDQ, Snow, ServiceNow Vulnerability Management, InsightIDR, InsightVM, Metasploit, Tripwire and Kenna Security Services.
Additional responsibilities under server administration and operational duties.
· 4+ years of hands on experience with Active Directory Services (2008 and above) administration, configuration and troubleshooting: DNS, DHCP, Sites and Services, Replication, etc.
· 5+ years of hands on experience with server administration, configuration and troubleshooting.
· 3+ years of hands on experience with MS Server OS installation, configuration and troubleshooting: Windows Server 2008-2016
· Optional / hands-on experience with multiple storage technologies, interfaces, and data protection / disaster-recovery including at least one of the following: SAN, NAS, or Object Store
· 3+ years of hands on experience with VMware platforms
· 1+ years working with SCCM/MECM for packaging deployments, collections, reporting
· Optional / 1+ years of hands on experience with CommVault
· Optional / 1+ years of experience in IT Solution Design and Delivery
· General responsibilities such as ability to lift 25 pounds and other duties as assigned
Additional Qualifications that would merit consideration
· 3+ years of hands on experience with UNIX LINUX operating systems
· Experience with SCCM/MECM, PowerSHELL, automating operational tasks
· Knowledge of .NET, JAVA vulnerability management
· Ability to work with a geographically dispersed teams
· Health care industry experience
· Research ability with tools e.g. cve.mitre.org, infrared