Senior Associate Global Security Office

vulnerability assessmentpenetration testingNexposeNessusMetasploitPythonWindowsLinuxsecurity researchSQL ServerVM Orchestrationcyber security

Key details

Salary

Not specified

Employment type

Full-time

Seniority

Mid-level

Years experience

3-5

Location

Worldwide

Full job description

The role requires familiarity with vulnerability assessment and penetration testing tools such as Nexpose, Nessus, and Metasploit, with knowledge of security rating and application security testing tools as a plus. Candidates must have strong skills in HTTP request/response manipulation to exploit vulnerabilities, system-level attack knowledge, and expertise in Windows and Linux environments. Responsibilities include providing inputs to Cyber Security COEs, designing and maintaining business intelligence platforms, conducting security research, automating processes, integrating security data sources for analysis, coordinating response plans with stakeholders, educating teams on vulnerabilities, and supporting documentation of risks. Strong communication skills and a bachelor's degree in science or related discipline are required.

What you'll do

Provide inputs to other Cyber Security COEs to review and refine processes based on feedback and observations
Design, develop and maintain business intelligence platform for data-driven actionable insights
Continuously perform security research and analyze new and existing security vulnerabilities
Improve internal processes by automating manual tasks
Integrate multiple security rating and vulnerability assessment sources and disparate data sources across Groupe for analysis using SQL Server or VM Orchestration platform
Coordinate with asset owners and stakeholders to action response plans
Help educate team personnel and asset owners about vulnerabilities and their ramifications
Build smooth relationships with IT stakeholders
Support documentation of newly identified vulnerabilities as accepted risks

Requirements

Familiarity with top industry vulnerability assessment and penetration testing tools (Nexpose, Nessus, Metasploit)
Knowledge of security rating and application security testing tools is a plus
Strong command over HTTP request/response construction and manipulation for exploiting vulnerabilities
Good knowledge of system-level attacks and mitigation methods
Core competency in Windows and Linux environments
Familiarity with Windows environments and management domains, Firewalls, VPNs, Intrusion Detection Systems, and enterprise IT
Self-starter with strong organizational skills
Strong oral communication and writing skills
Bachelor’s degree in science or related discipline