Lead vulnerability assessments and policy compliance scans across on prem, cloud, container (Docker/Kubernetes), database, and web environments using tools like Qualys.
Validate scan results, eliminate false positives, and deliver accurate, actionable reports to stakeholders.
Serve as technical SME: analyze findings, diagnose root causes, and guide remediation efforts.
Develop and maintain a knowledge base to support continuous improvement and team expertise.
Stay current on emerging threats, tools, and VM lifecycle advancements; recommend service enhancements.
Communicate security requirements effectively across the organization and step in as interim team lead when necessary.
Job Skills & Requirements: -
Experience & Education
8+ years in information security
Bachelor s in Engineering, CS, IT, or equivalent.
Industry certifications preferred: CISSP, CISA, CISM, CRISC, CCNA/CCNP/CCIE Security.
Technical Expertise
Proficient with vulnerability scanning platforms (Qualys, Nessus, etc.), false-positive tuning, and compliance frameworks.
Experience across cloud, on prem systems, network devices (routers, firewalls, proxies), and infrastructure components.
Skilled in risk/threat assessment and security policy enforcement.