ABOUT THE ROLE:

The State Corporation Commission (SCC) is seeking a Risk and Vulnerability Analyst to support vulnerability assessment and risk analysis activities at the SCC. This role is responsible for conducting vulnerability scanning and analysis, supporting remediation efforts, supporting scanning operations, and helping improve enterprise visibility into security weaknesses and cyber risks.

Responsibilities Include:

Perform vulnerability assessments and assist security scanning across operating systems, databases, web applications, and enterprise infrastructure
Analyze vulnerabilities and support development of remediation recommendations
Support cloud compliance scans and assessment activities
Help troubleshoot scanning issues and support maintenance of vulnerability scanning tools, consoles, and configurations
Support automated and scheduled scanning activities, including scan planning, execution, and reporting
Support ad hoc or emergency vulnerability scanning in support of incident investigation and response activities
Create and maintain scan reports, data feeds, scan policies, repositories, and user access/roles for assessment tools
Support API discovery and scanning, and integration of assessment data into third-party tools
Coordinate with SCC Security Operations team to support tool operations, testing, and vulnerability management activities

Requirements

Skill
Required / Desired
Amount
of Experience
Information Security-related experience
Required
5
Years
Software Vulnerability Management related experience
Required
3
Years
Experience troubleshooting vulnerability scan tools and scan configurations
Required
3
Years
Experience with automation supporting vulnerability assessment operations
Required
3
Years
Experience supporting Information System Vulnerability Management (ISVM) scans and compliance activities
Required
3
Years
Experience with API discovery and security scanning
Required
3
Years
Experience and proficiency with Microsoft, SharePoint and Power BI
Required
5
Years
Proven analytical and problem-solving abilities
Required
5
Years
Excellent verbal and written communication skills
Required
5
Years
Ability to work independently with minimal direction and as a team
Required
5
Years
Highly motivated and self-directed
Required
5
Years

Vereiste vaardigheden

Information SecuritySoftware Vulnerability ManagementVulnerability assessment and analysisVulnerability scanning tools troubleshooting and configurationVulnerability scanning tool administration (consoles and configurations)Automation for vulnerability assessment operations (scheduled/automated scanning)Cloud compliance scanning and assessmentAPI discovery and security scanningScan planning, execution, and reportingDevelopment of remediation recommendationsIntegration of assessment data into third-party toolsMicrosoft proficiencySharePoint proficiencyPower BI proficiencyAnalytical and problem-solving abilities

Vergelijkbare banen