Job Information
Insight Global Vulnerability Management Compliance Analyst in Charlotte, North Carolina
Job Description
The Vulnerability Analyst will support the configuration compliance and infrastructure vulnerability management programs with identifying, reporting, and enabling remediation of vulnerability and compliance findings. The ideal candidate for this role will have a strong technical foundation in system administration (Unix or Windows), familiarity with networking and cyber security, and hands-on experience with infrastructure scanning tools. The candidate must be equally comfortable speaking with developers as well as infrastructure teams about vulnerabilities and configuration compliance.
Reporting into the Director of Vulnerability Management, the Vulnerability Analyst will be accountable for the identification, reporting and remediation of vulnerability and compliance findings within their area of responsibility.
* Maintain awareness of the latest critical information security vulnerabilities, threats, and exploits
* Assist in facilitating vulnerability and compliance scanning and reporting activities, as directed by senior team members, ensuring accurate & timely identification, reporting, and escalation.
* Leverage vulnerability management reports and metrics, to drive remediation of vulnerabilities for specified areas of the environment
* Communicate with Ally technology staff on vulnerability management and remediation of key vulnerabilities. Assist teams with understanding the vulnerability, possible remediations, and assist with false positives or mitigation solutions.
* Identify enhancements to tools, standards, and processes to enable continuous process improvement and automation of existing processes.
* In zero-day events, iterate through VM lifecycle -- creatively assist with time-sensitive escalations, developing new types of reports, and perform special investigations.
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com .
To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/ .
Skills and Requirements
MUST HAVE
* Ability to review and write documentation to establish compliance baselines for vulnerability management
* Ability to effectively document vulnerability processes, status reports, etc.
* Detailed understanding of Qualys or a similar vulnerability scanning tool (Symantec, Tenable Nessus, Rapid7, AlgoSec)
* Ability to work independently, self-starter...proactive person who can take moderate direction and own their role
PLUS
* Understanding/experience with Systems Administration (Linux, Unix)
* Understanding of configuration compliance benchmarks such as CIS or STIG null
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion,sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military oruniformed service member status, or any other status or characteristic protected by applicable laws, regulations, andordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to HR@insightglobal.com.