Vulnerability Management Consultant

Vulnerability Management Contractor
6 month contract (W2 Only, NO C-C)
McKinney, TX (Hybrid)
 
Job Description:
Seeking a highly skilled and experienced Vulnerability Management Contractor to join our client’s cybersecurity team. This role is ideal for a contractor with in-depth knowledge and hands-on experience in Vulnerability Management, Identity and Access Management (IAM), Governance, Risk, and Compliance (GRC), Compromise Remediation and Active Directory (AD), and The ideal candidate will work with cross-functional teams to identify, assess, and mitigate security vulnerabilities across our enterprise infrastructure and systems, ensuring compliance with internal policies and external regulations.
 
Responsibilities:

• Vulnerability Management:
  • Lead the identification, assessment, prioritization, and remediation of vulnerabilities across the organization’s infrastructure, including networks, servers, endpoints, and applications.
  • Perform regular vulnerability scans and assessments using industry-standard tools, such as
  • Collaborate with technical teams to ensure vulnerabilities are appropriately remediated in a timely manner.
  • Track vulnerability remediation progress, ensuring all vulnerabilities are closed within specified SLAs.
• GRC (Governance, Risk, and Compliance):
  • Work closely with GRC teams to ensure vulnerability management processes align with overall governance and compliance requirements.
  • Maintain an understanding of relevant regulatory frameworks (e.g., GDPR, NIST, PCI, SOX, etc.) and ensure compliance through vulnerability mitigation efforts.
  • Document and report vulnerability management activities, findings, and mitigation efforts as required for compliance audits and risk assessments.
• Identity and Access Management (IAM):
  • Work with IAM teams to evaluate and enhance the security of user access controls and identity management systems.
  • Provide guidance on best practices for managing user roles and privileges to prevent unnecessary access and potential threats.
  • Assist with the identification and remediation of IAM-related vulnerabilities.
• Compromise Remediation:
  • Participate in incident response activities, especially regarding security compromises, ensuring quick containment and recovery.
  • Provide expertise in the identification and remediation of vulnerabilities that could lead to or result from system compromise.
  • Work cross-functionally with security teams to improve post-compromise detection and remediation strategies.
• Active Directory (AD) Management:
  • Utilize AD expertise to assess security risks, manage group policies, user access controls, and auditing procedures.
  • Assist in remediating vulnerabilities related to AD configuration and permissions, ensuring minimal exposure to security threats.
  • Conduct regular AD security assessments to ensure compliance with organizational security standards.

Requirements:

• Proven experience in vulnerability management with a focus on enterprise IT environments.
• Strong understanding of Active Directory (AD), including security configurations, user account management, and group policies.
• Work experience in CrowdStrike
• Experience with GRC frameworks, risk management, and compliance requirements.
• Hands-on expertise with IAM systems and security controls for user access management.
• Strong understanding of Vulnerability Scanning and remediation techniques
• Familiarity with Compromise Remediation and incident response procedures.
• Knowledge of security frameworks such as NIST, PCI, SOX, or other industry best practices.
• Ability to collaborate with multiple teams and translate security findings into actionable remediation steps.
• Excellent communication skills, both verbal and written.
• Experience with scripting or automation tools for vulnerability management (e.g., PowerShell).
• Familiarity with cloud security and cloud platforms (AWS, Azure, etc.).
• Experience with SIEM tools.

Estimated pay low: $55hr
Estimated pay high:$60hr

NOTICE: Any pay ranges displayed are estimations. Actual pay is determined by an applicant's experience, technical expertise, and other qualifications as listed in the job description. All qualified applicants are welcome to apply.
 
Yoh, a Day & Zimmermann company, is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
Visit https://www.yoh.com/applicants-with-disabilities to contact us if you are an individual with a disability and require accommodation in the application process.
For California applicants, qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. All of the material job duties described in this posting are job duties for which a criminal history may have a direct, adverse, and negative relationship potentially resulting in the withdrawal of a conditional offer of employment.

Note: Any pay ranges displayed are estimations.  Actual pay is determined by an applicant's experience, technical expertise, and other qualifications as listed in the job description.  All qualified applicants are welcome to apply.

Yoh, a Day & Zimmermann company, is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Visit https://www.yoh.com/applicants-with-disabilities to contact us if you are an individual with a disability and require accommodation in the application process.

For California applicants, qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.  All of the material job duties described in this posting are job duties for which a criminal history may have a direct, adverse, and negative relationship potentially resulting in the withdrawal of a conditional offer of employment.