Job Description

Role Purpose:
Lead the implementation, execution, and delivery of VA/PT tools, processes, and services for global clients, ensuring continuous identification, assessment, and remediation of security risks. Key Responsibilities:
Perform daily review and analysis of vulnerabilities identified through infrastructure scans.
Consolidate and assess vulnerability data from various sources (internal/external scans, penetration tests, application assessments).
Execute penetration tests on networks, systems, web applications, and mobile applications.
Conduct security and network audits to ensure compliance with industry standards.
Evaluate, prioritize, and rate vulnerabilities using industry-recognized frameworks (e.g., CVSS).
Coordinate vulnerability notifications and remediation timelines with SMEs and global security teams.
Collaborate closely with security architecture, penetration testing, application development, and risk teams.
Maintain up-to-date knowledge of emerging threats and attack methodologies.
Ensure accurate reporting of scan results through dashboards, reports, and integrated systems. Skills & Competencies:
Strong understanding of application, network, mobile, and OS security.
Hands-on experience with vulnerability assessment, penetration testing, and patch assessment.
Good knowledge of Windows and Linux patching.
Familiarity with vulnerability scoring systems (CVSS/CMSS).
Proficiency with common VA/PT tools.
Strong analytical, documentation, and presentation skills.
Ability to clearly communicate priorities, risks, and escalation paths.
Detail-oriented, organized, and quick at learning new technologies. Preferred Certifications:
CEH, CVA, CISA, CISSP, CISM, CRISC, CIPP or equivalent security certifications.

Skills Required