Cybersecurity Vulnerability Management Specialist
Cybersecurity Vulnerability Management Specialist Position Overview We are seeking a Cybersecurity Vulnerability Management Specialist to identify, assess, prioritize, and remediate security vulnerabilities across our enterprise infrastructure and applications, utilizing advanced scanning tools and implementing comprehensive vulnerability management programs to maintain organizational security posture. Key Responsibilities Vulnerability Assessment & Management
- Conduct comprehensive vulnerability assessments using automated scanning tools including InsightVM, Nessus, and Qualys
- Perform manual security testing and penetration testing to identify complex vulnerabilities
- Analyze vulnerability scan results, false positives, and prioritize remediation based on risk scoring
- Track vulnerability lifecycle from discovery through remediation and verification
- Maintain vulnerability databases and generate executive-level security metrics and dashboards
- Evaluate vulnerability severity using CVSS scoring and business impact assessments
- Correlate vulnerability data with threat intelligence to identify active exploitation risks
- Conduct risk assessments considering asset criticality, environmental factors, and exposure levels
- Develop vulnerability treatment strategies including remediation, mitigation, and acceptance decisions
- Create risk-based remediation roadmaps and timeline recommendations
- Collaborate with IT teams to develop and implement remediation strategies and patch deployment schedules
- Coordinate emergency patching for critical vulnerabilities and zero-day exploits
- Validate remediation effectiveness through re-scanning and verification procedures
- Manage patch testing procedures and rollback plans for critical systems
- Implement compensating controls and temporary mitigations for systems that cannot be immediately patched
- Generate comprehensive vulnerability reports for technical teams, management, and audit purposes
- Create security metrics and KPIs to measure vulnerability management program effectiveness
- Support compliance audits and regulatory requirements (SOX, PCI-DSS, HIPAA, ISO 27001)
- Maintain vulnerability management documentation and standard operating procedures
- Present security posture updates to executive leadership and risk committees
- 6+ years experience in vulnerability management and cybersecurity operations
- Expert proficiency with vulnerability scanning tools (InsightVM, Nessus, Qualys, OpenVAS)
- Strong knowledge of common vulnerabilities (OWASP Top 10, CVE database, CWE framework)
- Experience with patch management systems and automated remediation tools
- Understanding of network security, web application security, and infrastructure hardening
- Proficiency in scripting languages (Python, PowerShell) for automation and data analysis
- Strong understanding of risk assessment methodologies and vulnerability prioritization frameworks
- Experience with penetration testing tools and manual security assessment techniques
- Knowledge of security frameworks (NIST, ISO 27001, CIS Controls) and compliance requirements
- Understanding of threat intelligence integration and attack vector analysis
- Bachelor's degree in Cybersecurity, Information Technology, or related field
- Security certifications (CISSP, CISM, CEH, GCIH, GIAC)
- Experience with cloud security assessments (AWS, Azure, GCP)
- Background in DevSecOps and secure software development lifecycle integration
- Knowledge of security orchestration and automated response (SOAR) platforms
Emplois Recommandés
Médecin Vasculaire Paris H/F
Médecin Vasculaire Paris H/F REF75287 Nous recherchons un Phlébologue/Angiologue/Médecin Vasculaire H/F pour une collaboration libérale, salariée ou en remplacement à temps plein ou partiel, au sein …
Responsable pôle social H/F
Description du poste Missions : Dans un cabinet d'expertise-comptable en pleine expansion et à taille humaine, vous prendrez la tête du pôle social suite à un départ à la retraite. Accompagné d…
Tech Lead Java Fullstack React/Angular - Services Financiers - Ile-De-France
En tant qu'organisateur de forums de recrutement, Talents Handicap accompagne de très nombreuses entreprises & organisations en France dans leurs recrutements de collaborateurs en situation de handic…
Head of Pattern Makers - Atelier Flou
Saint Laurent is seeking a Head of Pattern Makers for the Atelier Flou in Paris. This role involves managing the atelier's daily operations, planning resources, mentoring teams, and ensuring high stan…
Tech Lead FullStack Java JavaScript
Votre mission: - Elaboration du design technique des produits. - Choix des techno, être force de proposition - Comprendre et participer à la conception de l'architecture - Suivre et coacher l…
Projeteur CFO CFA H/F
Le poste : Dans le cadre d'un recrutement pour le compte de l'un de nos clients nous sommes à la recherche d'un Projeteur CFA/CFO H/F sur des projets tertiaires. Vos missions sont les suivantes …
Technicien support de proximité VIP H/F
Nous vous invitons à relever de nouveaux challenges et à évoluer sur des projets d'expertise et d'innovation en prenant part à l'aventure Econocom. À travers sa marque Workplace Infra Innovation, l…
Cybersécurité gouvernance / CISO Bureau - Payment CISO
Le besoin Mission de Pilotage de Plans de Remédiation Cyber Le bénéficiaire souhaite une prestation d'accompagnement dans l'objectif d'assurance d'un service de pilotage des plans de remédiatio…
Principal Business Consultant - Commercial
Veeva Systems is a mission-driven organization and pioneer in industry cloud, helping life sciences companies bring therapies to patients faster. As one of the fastest-growing SaaS companies in histo…
Consultant(e) Chef de projet IT H/F
mc2i est un cabinet de conseil indépendant qui accompagne ses clients dans leurs projets de transformation numérique. Avec plus de 1350 collaborateurs, notre entreprise a su rester à taille humaine gr…