Archived listing. The details below describe a past opening.
Required Skills & Experience
- Bachelor’s Degree
- Minimum of 2 years of cybersecurity experience in vulnerability management, vulnerability assessment, penetration testing, network security, or a related function.
- Experience reviewing, interpreting, validating, and prioritizing vulnerability-scanning results.
- Understanding of external attack surfaces and internet-facing technologies, including websites, servers, open ports, services, and digital certificates.
- Working knowledge of penetration-testing concepts and the ability to determine whether a vulnerability is legitimate and potentially exploitable.
- Experience documenting vulnerabilities and coordinating with cybersecurity teams to support further testing, remediation, mitigation, or escalation.
Nice to Have Skills & Experience
- Hands-on penetration-testing or web-application security-testing experience.
- Experience with Rapid7 or comparable vulnerability-scanning technologies.
- Familiarity with Python or another scripting language and the ability to understand existing security automation.
- Experience using threat intelligence to prioritize vulnerabilities.
- Experience working with a Security Operations Center, incident response, threat-hunting, red team, penetration-testing, or Cyber Defense teams.
- Experience creating vulnerability metrics, maintaining trackers, and preparing weekly leadership reports.
- Experience with cloud environments.
Job Description
Insight Global is seeking an External Vulnerability Validation Analyst to support an enterprise Cyber Assurance team in support for of one of our large clients. This individual will review vulnerability findings affecting the organization’s public-facing systems, confirm whether the findings involve company assets, validate their legitimacy, and prioritize them based on technical severity, threat intelligence, exploitability, and potential business impact. The analyst will perform technical validation or lightweight penetration testing when appropriate, document findings in the applicable vulnerability tracker, and coordinate with Cyber Defense teams to support deeper testing, remediation, mitigation, or incident-response activities. Their day to day will include and is not limited to:
- Review new vulnerability findings identified across the company's external/public-facing technology environment.
- Analyze scanner results, including findings coming from Rapid7 and application-security scanning tools.
- Confirm that identified systems are company assets and determine whether reported vulnerabilities represent legitimate security concerns.
- Evaluate public-facing systems, including websites, web servers, servers, open ports, services, certificates, and other externally exposed technologies.
- Validate and prioritize vulnerabilities based on risk, severity, exposure, and available threat information.
- Perform technical validation/lightweight penetration testing to better understand whether an identified vulnerability presents a real risk.
- Document and maintain findings in the appropriate vulnerability/technical-assessment tracker.
- Coordinate with Cyber Defense teams, such as SOC, penetration testing, threat intelligence, hunt, and incident response, when additional investigation or action is required.
- Escalate higher-risk findings when deeper penetration testing, incident investigation, remediation, or mitigation is needed.
- Follow findings through the process, validating results and keeping statuses updated as the appropriate teams address them.
- Maintain vulnerability metrics and weekly leadership reporting to communicate current findings, risk, and status.
- Work with the team's existing automation, including understanding Python-based processes that have been built to handle portions of the team's workload.