Role Description:
As a Security Engineer - Vulnerability Management Specialist, you will be responsible for managing and enhancing the organization's vulnerability management program. Your primary focus will be on identifying, assessing, and mitigating security vulnerabilities across the organization's systems, networks, and applications. You will work closely with IT, security, and development teams to ensure a robust security posture and compliance with industry standards.
The role requires a proactive approach to identifying and addressing security gaps, implementing best practices, and communicating risks effectively to stakeholders. You will also contribute to the continuous improvement of vulnerability management processes, tools, and reporting mechanisms.
Key Responsibilities:
- Advanced skills in vulnerability exploitation and proof of concept (PoC) development.
- Familiarity with exploit frameworks like Metasploit.
- Experience with cloud security tools and platforms (e.g., AWS Inspector, Azure - Security Center, or GCP Security Command Center).
- Expertise in identifying and mitigating critical vulnerabilities in complex environments.
- Experience with configuration assessment tools such as SCAP or CIS-CAT.
- Knowledge of threat intelligence tools and processes to correlate vulnerabilities with real-world threats.
- Understanding of threat modeling and attack surface analysis.
- Experience with SIEM tools (e.g., Splunk, QRadar) and integration with vulnerability management processes.
- Knowledge of log analysis and event correlation.
- Advanced certifications, such as:
- GIAC Certified Vulnerability Analyst (GCVA).
- Offensive Security Certified Professional (OSCP).
- Certified Information Systems Security Professional (CISSP).
- Certified Information Security Manager (CISM).
Required Qualifications:
- Minimum of 4–6 years of experience in vulnerability management or a related information security role.
This is a remote position.
Who We Are
We are a leading System Integrator and at the forefront of new exponential technologies – including Artificial Intelligence, RPA, and the Internet of Things. We help clients design the future-state of their business using Digital Cloud Solutions, and then we make IT real.
Agility Technologies Inc. is 8(a) SBA, GSA Schedule 70 registered, minority-owned a small business specializing in cloud implementation for Federal Agencies and Commercial customers. We are experts at IT Strategic Planning and Digital Transformation, Lean EA and BPM, IV&V, Application Development, and Program Management.
The ways companies can learn from and adjust to today’s crisis will deeply influence their performance in tomorrow’s changing world, providing the opportunity to retain greater agility as well as closer ties with customers, employees, and suppliers. Now is the time to move forward with Digital initiatives by adopting Next-Gen technologies.
OUR VALUES
Agility Technologies as the name suggests is an Agile organization that has created a cohesive community with a common culture. Cultural norms are reinforced through positive peer behavior and influence in a high-trust environment. We have creative problem solvers with critical thinking skills who are resilient and battle-tested. Our team members are always invited to share their ideas with the group through Brown bag sessions for peak performance to occur. We believe to minimize risk and succeed in a constantly evolving environment, the best way is to embrace uncertainty and be the quickest and most productive in trying new things.