Vulnerability Manager (Tenable Platform)
Vulnerability Manager (Tenable Platform)
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Job Description
Vulnerability Manager (Tenable Platform) - MSSP
Reports To: SOC Manager
As a Vulnerability Manager at Telefnica Tech you will be instrumental in identifying assessing prioritizing and facilitating the remediation of security vulnerabilities for our diverse client base. You will be the primary expert responsible for the end-to-end management of our Tenable vulnerability management platform (e.g. Nessus) ensuring optimal performance accurate reporting and actionable insights for our clients. Your work will directly contribute to enhancing our clients security posture and maintaining their compliance with industry standards.
Key Responsibilities:
- Tenable Platform Management:
- Administer configure and optimize the Tenable vulnerability management platform across multiple client environments.
- Develop schedule and execute regular vulnerability scans (internal external web application cloud container) using Tenable products.
- Manage Tenable agents scanners and integrations to ensure comprehensive asset coverage and accurate data collection.
- Troubleshoot and resolve any issues related to scan execution data ingestion or platform performance.
- Stay abreast of new Tenable features and updates and implement them to enhance service delivery.
- Vulnerability Identification & Analysis:
- Analyze scan results from Tenable to identify and assess security vulnerabilities across diverse client infrastructures (on-premise cloud endpoints applications networks).
- Prioritize vulnerabilities based on risk leveraging industry-standard frameworks (CVSS) threat intelligence asset criticality and client-specific context.
- Conduct in-depth research on identified Common Vulnerabilities and Exposures (CVEs) and their potential impact.
- Reporting & Communication:
- Generate clear concise and actionable vulnerability reports and dashboards for various client stakeholders (technical management executive).
- Present vulnerability findings risk assessments and remediation recommendations to clients clearly articulating the business impact of security weaknesses.
- Track and report on remediation progress compliance metrics and overall vulnerability management program effectiveness for each client.
- Remediation & Advisory:
- Work closely with client IT operations and development teams to provide guidance and support for vulnerability remediation efforts.
- Recommend appropriate mitigation strategies including patching configuration changes architectural improvements and compensating controls.
- Facilitate the communication and coordination between clients and internal security teams (e.g. Incident Response Security Architecture).
- Process Improvement & Compliance:
- Develop maintain and continuously improve vulnerability management policies procedures and runbooks within the MSSP framework.
- Ensure vulnerability management processes align with industry best practices (e.g. NIST ISO 27001 CIS Controls) and regulatory requirements (e.g. GDPR PCI DSS).
- Contribute to internal and external audits by providing documentation and evidence related to vulnerability management.
- Threat Intelligence & Research:
- Stay current with the latest cybersecurity threats attack techniques and vulnerability disclosures.
- Integrate threat intelligence into vulnerability assessments to enhance prioritization and proactive defense.
Required Skills & Experience:
- Proven Experience: Minimum of 5 years of experience in cybersecurity with at least 3 years specifically in vulnerability management within an MSSP or large enterprise environment.
- Tenable Expertise: Deep hands-on experience with Tenable products including Nessus Professional and Nessus Agents. Experience with Tenable One is highly desirable.
- Technical Acumen: Strong understanding of network protocols operating systems (Windows Linux) cloud platforms (AWS Azure GCP) databases and web applications.
- Vulnerability Assessment: Proficient in interpreting vulnerability scan results performing risk assessments and applying vulnerability scoring systems (e.g. CVSS).
- Cybersecurity Frameworks: Familiarity with common security frameworks and standards (e.g. NIST CSF ISO 27001 CIS Controls OWASP Top 10).
- Analytical & Problem-Solving: Excellent analytical skills with the ability to identify trends root causes and develop effective solutions.
- Communication: Exceptional written and verbal communication skills with the ability to translate complex technical information into clear actionable insights for both technical and non-technical audiences.
- Collaboration: Proven ability to work effectively in a fast-paced client-facing environment collaborating with internal teams and external stakeholders.
- Certifications (Highly Desirable):
- Tenable Certifications (e.g. Tenable Certified Nessus User Tenable Certified SC User Certified Professional)
- Industry certifications such as CISSP CISM CompTIA Security CEH.
Education:
- Bachelors degree in Computer Science Information Security or a related technical field or equivalent practical experience.
What We Offer:
- Opportunity to work with a leading global MSSP and manage cutting-edge security technologies.
- Exposure to a diverse range of client environments and industries.
- Continuous professional development and training opportunities.
- A collaborative and innovative work environment.
- Competitive salary and benefits package.
Additional Information :
Location: Field Based
Attending Telefnica Tech offices and Customer sites when required.
Must have the right to live and work in the UK.
Must meet Security Clearance vetting requirements.
Any offer would be conditional upon the successful candidate passing a full DBS national security vetting process.
We dont believe hiring is a tick box exercise so if you feel that you dont match the job description 100% but would still be a great fit for role please get in touch.
Remote Work :
No
Employment Type :
Full-time
Employment Type
Full-time
