Senior Associate Global Security Office

vulnerability assessmentpenetration testingNexposeNessusMetasploitPythonWindowsLinuxsecurity researchbusiness intelligenceSQL Serverautomationcyber security

Key details

Salary

Not specified

Employment type

Full-time

Seniority

Mid-level

Years experience

3-5

Location

Worldwide

Full job description

The role requires familiarity with vulnerability assessment and penetration testing tools such as Nexpose, Nessus, and Metasploit, with knowledge of security rating and application security testing tools as a plus. Candidates must have strong skills in HTTP request/response manipulation to exploit vulnerabilities, and good knowledge of system-level attacks and mitigation methods, especially in Windows and Linux environments. Experience with Windows management domains, Firewalls, VPNs, Intrusion Detection Systems, and enterprise IT is required. Responsibilities include providing input to Cyber Security COEs, designing and maintaining a business intelligence platform, performing security research, automating processes, integrating multiple security and vulnerability data sources, coordinating with asset owners for response plans, educating teams on vulnerabilities, building relationships with IT stakeholders, and supporting documentation of vulnerabilities as accepted risks. Strong communication skills and a bachelor's degree in science or related discipline are required.

What you'll do

Provide inputs to other Cyber Security COEs to review and refine processes based on feedback and observations
Design, develop and maintain business intelligence platform to provide data-driven actionable insights
Continuously perform security research and analyze new and existing security vulnerabilities
Improve internal processes by automating manual processes
Integrate multiple security rating and vulnerability assessment sources and disparate data sources across Groupe for data analysis and interpretation
Coordinate with asset owners and other stakeholders to action response plans
Help educate team personnel and asset owners about vulnerabilities and their ramifications
Build smooth relationships with IT stakeholders
Support documentation of newly identified vulnerabilities as accepted risks

Requirements

Familiarity with top industry vulnerability assessment and penetration testing tools (Nexpose, Nessus, Metasploit)
Knowledge of security rating and application security testing tools is a plus
Strong command over HTTP request/response construction and manipulation for exploiting vulnerabilities
Good knowledge of system-level attacks and mitigation methods
Core competency in Windows and Linux environments
Familiarity with Windows environments and management domains, Firewalls, VPNs, Intrusion Detection Systems, and enterprise-level IT
Self-starter with strong organizational skills
Ability to identify sponsors, stakeholders, and interested parties within the company
Strong oral communication and writing skills
Bachelor’s degree in science or related discipline