- 9+ years of experience in vulnerability management, information security, application security, or technical cybersecurity roles
- Bachelors degree in Computer Science or equivalent experience
- Certified Information Systems Security Qualified (CISSP), GIAC Certified Intrusion Analyst (GCIA), or GIAC Continuous Monitoring Certification (GMON)
- Experience designing or managing vulnerability management programs
- Experience conducting vulnerability analysis using Qualys, Tenable, Rapid7, or similar tools
- Experience with networking protocols, including Transmission Control Protocol/Internet Protocol (TCP/IP), Domain Name System (DNS), and Hypertext Transfer Protocol (HTTP)
- Experience using Common Vulnerabilities and Exposures (CVE)
and Common Vulnerability Scoring System (CVSS) frameworks
Preferred:
- Experience developing metrics, dashboards, or executive reporting on vulnerability status and remediation progress
- Experience with asset provisioning or deprovisioning lifecycle processes
- Experience with patch management tools such as Microsoft Intune or Red Hat Satellite
- Experience analyzing malicious code activity, distributed denial of service (DDoS), or network scanning activity
- Experience with Confluence, Jira, or Configuration Management Databases (CMDBs) such as ServiceNow
- Experience with databases, query design, or data analysis