Demo
Job Description: Vulnerability Assessment (VA) Engineer - MDR Team
Position Title: Vulnerability Assessment (VA) Engineer Department: Managed Detection and Response (MDR)
About the Role: We are looking for a skilled Vulnerability Assessment (VA) Engineer to join our MDR team. The VA Engineer will be responsible for identifying, analyzing, and reporting security vulnerabilities across client environments, supporting risk mitigation strategies, and enhancing overall security posture.
Key Responsibilities:
•
Conduct regular vulnerability assessments using automated tools and manual techniques.
•
Analyze scan results to identify false positives and validate findings.
•
Provide detailed vulnerability reports with risk ratings and remediation recommendations.
•
Collaborate with MDR analysts to correlate vulnerabilities with threat intelligence and security incidents.
•
Work with clients to understand their environments, prioritize vulnerabilities, and support remediation efforts.
•
Maintain and optimize vulnerability management tools and processes.
•
Stay updated on the latest vulnerabilities, exploits, and security advisories.
•
Assist in compliance assessments and audits related to vulnerability management.
•
Contribute to continuous improvement initiatives within the MDR team.
Required Qualifications:
•
Bachelor’s degree in Cybersecurity, Information Technology, or a related field, or equivalent experience.
•
2 years of experience in vulnerability assessment, penetration testing, or related security roles.
•
Proficiency with vulnerability scanning tools (e.g., Nessus, Qualys, Rapid7).
•
Strong knowledge of network protocols, operating systems, and application security.
•
Understanding of CVSS scoring, vulnerability lifecycle management, and risk assessment methodologies.
•
Experience with scripting languages (Python, Bash, PowerShell) for automation.
•
Strong analytical and problem-solving skills.
•
Excellent communication and report-writing skills.
Preferred Qualifications:
•
Security certifications such as CEH, CompTIA Security , or equivalent.
•
Experience in Managed Security Services or MDR environments.
•
Familiarity with SIEM tools, EDR solutions, and threat intelligence platforms.
•
Knowledge of regulatory frameworks (e.g., ISO 27001, NIST, GDPR).
Key Competencies:
•
Attention to detail and critical thinking.
•
Strong teamwork and collaboration abilities.
•
Adaptability to dynamic security landscapes and evolving threats.
•
Commitment to continuous learning and professional development.