Senior Vulnerability Management Analyst

• Objective:

• To ensure continuous monitoring auditing and remediation of security risks affecting DSS infrastructure components being migrated decommissioned or integrated within the hybrid environment maintaining agency security posture during the transition.

• Scope:

• Scan and Assess agency assets in all locations and environments that are part of he DC migration project.
• Execute vulnerability scans for migrating systems validate risk scores and recommend remediation for in-scope hardware/software.
• Develop and maintain dashboards in Rapid7 tailored for tracking migration-phase vulnerabilities.
• Script and automate vulnerability reporting across all locations and environments.

• Tasks Breakdown:

• Perform vulnerability & exposure management scanning on devices.
• Conduct a comprehensive risk assessment of the current environment to identify and document potential vulnerabilities associated with this migration.
• Categorize and prioritize data based on its sensitivity to tailor security controls accordingly employing methods like encryption for sensitive data both at rest and in transit.
• Create a detailed inventory of all IT assets slated for migration including applications databases servers and network devices.
• Map dependencies between applications and infrastructure components to maintain functionality and minimize security risks during and after the migration.
• Conduct thorough security audits and vulnerability assessments after the migration to identify and address any newly emerged vulnerabilities in the new environment.
• Interpret CVE data to prioritize threats in live & staged environments.
• Document for auditability and incident prevention related to the data migration effort.
• Script PowerShell tools to automate asset reclassification and reporting.

• 5 years of hands-on experience with Rapid7 InsightVM and ability to prioritize vulnerabilities based on exploitability business impact and criticality
• 5 years of experience setting up remediation projects running advanced queries exporting data in Rapid7 and performing analysis in Excel using pivot-tables
• 5 years of hands-on experience with IT Service Management software including ServiceNow (creating tickets searching updating attaching files researching SLA creating child-parent ticket pairs)
• 5 years of strong foundational understanding of general IT concepts with hands-on familiarity across Windows Unix and Linux server environments core networking principles virtualization technologies such as VMware and exposure to enterprise platforms including Oracle and IBM systems

If you are interested in getting more information about this opportunity please contact Irina Rozenbergat your earliest convenience.

At Ariel Partners we solve the most difficult problems that inhibit technology from enabling our customers to achieve their goals. Our vision is to be recognized by our stakeholders as an elite provider of IT solutions so when they have their biggest challenges we are on their short list. We are looking for team members who share our values of: Integrity to do the right thing even when it hurts; Commitment to the long-term success and happiness of our customers our people and our partners; Courage to take on difficult challenges accept new ideas and accept incremental failure; and the constant pursuit of Excellence. Ariel Partners is an Equal Opportunity Employer in accordance with federal state and local laws.