Vulnerability Manager

Be Challenged and Make a Difference

In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.

Required Qualifications

• Bachelor's degree in a related field or equivalent demonstrated experience and knowledge.
• 6 years of experience as a Security Administrator, Vulnerability Manager or equivalent knowledge.
• Hands-on administration experience with Tenable or Qualys.
• Performing vulnerability scans with tools such as Tenable, Qualys, Burpsuite.
• Deep familiarity with CVSS scoring, risk based prioritization methodologies.
• Excellent oral and written communication skills.
• Familiarity with multi-tiered network applications, common ports and protocols used in those communications, the Common Vulnerability System (CVS) and the exploitation mechanisms of common vulnerability types (e.g., buffer overflows, cross-site-scripting, SQL injection).
• Certifications: Security + required

Preferred Qualifications

• Self-Starter – ability to quickly become competent with new security-related tools and processes.
• Ability to conduct Deep Dive analysis to determine root cause assessment of various network scanning agents’ scanning or communication failures.
• Ability to coordinate remediation strategies with agency’s department technical staff through completion.
• Familiarity with the various use cases and alignment of data from each tool to various security disciplines in configuration management, vulnerability management, risk management and incident management.
• Understanding of the role of interactive training such as phishing exercises for assessment of organizational abilities.
• Familiarity with the use of data analysis tools, including the use of Microsoft Excel or PowerBI to combine data from multiple sources.
• Familiarity with information security terminology and being able to develop or select technical training in the discipline of information security geared to an organization.
• Familiarity with data management and reporting of training data and statistics using common tools such as Microsoft Excel and Word.
• Certifications: CISSP