Bachelor's degree in information technology (or related field) with minimum of 5 years' experience Possess strong knowledge of various technologies and security topics including operating systems, network security, protocols, application security, infrastructure hardening and security baselines. Knowledge of industry standards relating to Vulnerability Management including Common Vulnerabilities and Exposures (CVE), Common Vulnerability Scoring System (CVSS) and Open Web Application Security Project (OWASP) strongly desired. Practical experience with identifying, analyzing, and communicating cyber threat and vulnerability information. Hold key Cybersecurity Certifications, Security+, CISSP, CEH, SANS etc Experience working with cloud technology (Azure, GCP, AWS.) Strong working knowledge of vulnerability management toolsets (Qualys, Wiz.io, Xray Jfrog etc.) Strong working knowledge of operational baselines hardening Knowledge of sound, industry-accepted server software support practices and methodologies Familiar with International Standards, NIST Special Publications and Cyber Security Frameworks Experience with assessing vulnerability management programs Familiarity with General IT infrastructure and enterprise architecture (e.g., Server, Network, Workstation, Cloud, etc.) Familiarization with patching processes and related technologies (e.g. BladeLogic, SCCM) Familiarity with enterprise risk management and how cyber threats and vulnerabilities integrate into ERM efforts Background and knowledge of general cyber security concepts (e.g. defense-in-depth security architectures, security controls) Exemplary verbal and written communication skills (English business fluent spoken and written) Demonstrated ability to think strategically and perform detailed, complex analysis and data interpretation Effective interpersonal skills, out-of-the-box thinking and ability to interface with all levels of staff Ability to work under pressure and deal with ambiguous situations Ability to read and write scripts in various languages. (php, python, ksh, powershell, SQL, and similar) Experience and proficiency in a various toolsets and best practices. Self-motivated and able to work in an independent manner.
