Description :

Role - Vulnerability Assessment Specialist 

Experience - 2-4 years

Location - New Delhi

Position Overview:

The Vulnerability Assessment Specialist is responsible for identifying, analyzing, and mitigating vulnerabilities within an organization's IT infrastructure. This role involves conducting regular vulnerability assessments, penetration testing, and security audits to ensure that systems, applications, and networks are secure against potential threats. The specialist will work closely with IT and security teams to implement effective security measures and remediation strategies.

Key Responsibilities:

Vulnerability Scanning: Conduct regular vulnerability scans using automated tools to identify security weaknesses in systems, applications, and networks.

Risk Assessment: Analyze and prioritize vulnerabilities based on risk levels and potential impact on the organization.

Penetration Testing: Perform penetration tests to simulate attacks on systems and networks, assessing the effectiveness of existing security measures.

Reporting: Prepare detailed reports on findings, including risk assessments, remediation recommendations, and compliance status, for technical and non-technical stakeholders.

Collaboration: Work with IT and security teams to develop and implement remediation strategies for identified vulnerabilities.

Security Audits: Participate in security audits and assessments to ensure compliance with industry standards and regulations.

Threat Intelligence: Stay updated on the latest security threats, vulnerabilities, and trends to enhance the organization's security posture.

Documentation: Maintain comprehensive documentation of vulnerability assessments, remediation efforts, and security policies.

Training: Provide training and awareness programs for staff on security best practices and the importance of vulnerability management.

Qualifications:

Bachelor’s degree in Computer Science, Information Security, or a related field.

Relevant certifications such as Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), or Offensive Security Certified Professional (OSCP) are preferred.

Strong knowledge of vulnerability assessment tools (e.g., Nessus, Qualys, OpenVAS).

Familiarity with penetration testing methodologies and frameworks (e.g., OWASP, NIST).

Understanding of network protocols, operating systems, and application security.

Excellent analytical and problem-solving skills.

Strong communication skills, both written and verbal.