Application Security Engineer

Job title: Senior Vulnerability Management - Tenable
Location: The Woodlands, TX

Job description:
2-4 years of hands-on experience with the design, architect and build of vulnerability management scanning infrastructure and tools specifically Tenable.io and Tenable.cs
Strong knowledge of CVE's, CVSS, Vector Strings, NVD, Mitre, attack vectors and mitigations
Experience in scripting in Powershell, Python and in automation tools such as Power Automate.
Experience in integrating Tenable.io with ITSM tools, SIEM, CMDB, Endpoint Security, etc.
Establish vulnerability management program for an organization
Knowledge of application, network and operating system security
Good understanding of Windows and Linux OS, UNIX, patching, hardening etc.
Maintain knowledge of the threat landscape
Provide vulnerability analysis and produce reports and dashboards for management
Work with associated teams to explain vulnerabilities and remediation steps as required.
Analyze scan reports and suggest remediation / mitigation plan
Compile and track vulnerabilities and mitigation results to quantify program effectiveness
Track trends and configure systems as required to reduce false positives from true events.
VM Solution implementation & roll out.
Vulnerability Triage Services & Vulnerability Tracking
Validating of quantity and placement of scanners
Integration, configuration, testing, deployment and release of Tenable scanner as applicable
Finetune and validate firewall rule, system level access restriction with respect to Tenable solution
Suggest best strategies to infrastructure team to Install & maintain tool, scanner, agent
Troubleshooting of escalated issue regarding authentication rule configuration, any other issue related to Tenable solution
Support root cause analysis and supporting remediation for Tenable solution
Excellent writing and presentation skills are required in order to communicate findings and status
Cleary communicate priorities and escalation points/procedures to other team members
Daily assessment of vulnerabilities identified by infrastructure VM scan
Evaluate, rate and perform risk assessments on assets
Prioritizing vulnerabilities discovered along with remediation timeline(s)
Interaction with multiple global teams (security architecture, penetration testing, application development, Risk Officers, etc)
Experience with vulnerability and patch assessment
Good understanding of Windows and Linux patching
Ability to learn new technologies
Excellent writing and presentation skills are required in order to communicate findings and status
Detail oriented, organized, methodical, follow up skills with an analytical thought process

Minimum Qualifications:
Demonstrated experience leading cybersecurity vulnerability management and analysis.
Strong working understanding of the Tenable.io, Tenable.cs product line required.
Understanding of a variety of technical concepts with focus on cloud computing, automation, networking, systems administration, application development, and information security best practices.
Understanding of client ethics for a great service attitude.

Educational Requirement:
Bachelor's Degree, or equivalent work experience, in Computer Science or related field preferred.
Tenable certifications in the VM Solution area