ABOUT THE ROLE The Vulnerability Assessment Specialist will manage the end-to-end vulnerability lifecycle across the portfolio companies, from scanning and risk prioritization through to verified remediation. You will also plan and execute annual penetration tests, web application assessments, and cloud security reviews. KEY RESPONSIBILITIES
Design and manage vulnerability scanning program across all portfolio companies
Operate and tune scanning platforms (Tenable, Qualys, Rapid7) for continuous coverage
Prioritize findings using CVSS scoring and business risk context
Track remediation SLAs and escalate overdue critical vulnerabilities
Conduct annual internal and external penetration tests per company rotation
Perform web application security assessments (OWASP Top 10)
Deliver cloud configuration reviews and CSPM gap analysis
Produce executive-level and technical vulnerability reports
Build and maintain vulnerability management KPIs and dashboards REQUIREMENTS & SKILLS
Bachelor's in Cybersecurity, CS, or equivalent experience
4+ years invulnerability management or penetration testing roles
Proficiency with Tenable (Nessus), Qualys, or Rapid7 InsightVM
Hands-on penetration testing experience (network, web app, cloud)
Familiarity with OWASP Top 10, CVE/NVD, and CVSS scoring
Knowledge of cloud security(AWS, Azure, GCP) configuration review
Scripting skills (Python, Bash) for automation of scanning workflows