What are the responsibilities and job description for the Vulnerability Management Specialist position at Jobs via Dice?
Dice is the leading career destination for tech experts at every stage of their careers. Our client, Dunhill Professional Search, is seeking the following. Apply via Dice today!
Vulnerability Management Specialist will perform the following:
Vulnerability Management Specialist will perform the following:
- *Defines, maintains, and enforces application security best practices
- Conduct vulnerability assessment and manual/automated code reviews
- Demonstrate vulnerabilities to application owners and provide mitigation recommendations
- Proficient in any SAST, DAST, and OSA tools.
- In depth knowledge with any programming language like Java, .NET, C#, etc.
- Performs and conducts penetration tests and manual/automated code reviews.
- Writes comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement
- In depth Knowledge of Secure Coding best practices and OWASP top 10, SANS 25, CVE, etc.
- Identify AppSec related tools/conduct tool analysis, and provide recommendations
- Vulnerability Management Specialist will have at least five years of working knowledge and hands-on experience with five or more of the following tools: BurpSuite, SonarQube, OWASP/Maven, Fortify, Tenable, STIG Viewer, AWS Security Hub, AWS Inspector, ePO, ServiceNow, Jira, ADO, eMASS or equivalent GRC Tools.
- Bachelor s Degree in Computer Science, Engineering, or other Engineering or Technical discipline and a minimum of 5 years of working knowledge and hands-on equivalent relevant experience.
- Candidates must have a Security certification or similar
- Candidates must have an active secret security clearance.
- Position requires on-site work in Alexandria VA 2-3 days/week.
- Working knowledge and hands-on experience with the following:
- BurpSuite
- SonarQube
- OWASP/Maven
- Fortify, Tenable
- STIG Viewer
- AWS Security Hub
- AWS Inspector
- ePO, ServiceNow
- Jira
- ADO
- eMASS or equivalent GRC Tools