VAPT & Red Teaming Analyst

The Vulnerability Assessment Engineer is responsible for identifying, analyzing, and reporting security vulnerabilities across the organization's IT infrastructure, with a specific focus on integrating and securing new servers during their onboarding and commissioning phases using industry-leading tools like Qualys or Tenable.The Vulnerability Assessment Engineer is responsible for identifying, analyzing, and reporting security vulnerabilities across the organization's IT infrastructure, with a specific focus on integrating and securing new servers during their onboarding and commissioning phases using industry-leading tools like Qualys or Tenable.
Must-Have:
Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field.
Up to 4-7 years of experience in cybersecurity, with a strong focus on vulnerability management or security operations.
Demonstrable hands-on experience with either Qualys (VMDR, Cloud Agent) or Tenable (Nessus, Tenable.io, Security Center) platforms.
Solid understanding of network protocols, operating systems (Windows, Linux), and common enterprise applications.
Familiarity with security frameworks and standards (e.g., NIST, ISO 27001, CIS Benchmarks).
Nice-to-Have:
Strong analytical and problem-solving skills, with attention to detail.
Excellent written and verbal communication skills, capable of explaining complex technical issues to both technical and non-technical audiences.
Ability to prioritize tasks, manage multiple projects, and work effectively in a fast-paced environment.
Scripting skills (e.g., Python, PowerShell) for automation and data analysis are a plus.
Execute regular and ad-hoc vulnerability scans across the enterprise network, applications, and systems using Qualys Vulnerability Management (VMDR) or Tenable.io/Nessus.
Analyze scan results, prioritize vulnerabilities based on risk, and provide detailed reports to relevant stakeholders.
Actively participate in the server commissioning process, ensuring all new servers are integrated into the vulnerability management program from day one.
Perform initial baseline vulnerability assessments on newly provisioned servers before they enter production, identifying and reporting critical security gaps.
Collaborate with server administrators and project teams to ensure identified vulnerabilities on new servers are remediated or mitigated according to security policies and timelines.
Verify the secure configuration of new servers against established security baselines and compliance requirements.
Work closely with IT operations, development, and system owners to facilitate the remediation of identified vulnerabilities.
Track remediation efforts and re-scan systems to confirm the effectiveness of applied patches and configuration changes.
Maintain, configure, and optimize vulnerability scanning platforms (Qualys or Tenable) to ensure accurate and comprehensive coverage.
Develop and refine scanning policies, profiles, and reporting templates.
Generate comprehensive vulnerability reports, dashboards, and metrics for various audiences, including technical teams and management.
Maintain accurate documentation of vulnerability assessment processes, findings, and remediation activities.

Skills
Python, Linux, Data Analysis, Onboarding, Documentation

Work arrangement
No