Vulnerability Research Analyst
Responsibilities:
- Research and analyze newly published security vulnerabilities to assess their severity and potential impact on the organization's systems and infrastructure.
- Conduct proof of concept testing for identified vulnerabilities to validate their existence and understand their exploitation potential.
- Utilize knowledge and experience with OWASP Top 10 vulnerabilities to identify, detect, exploit, and remediate security weaknesses.
- Perform vulnerability scanning using tools such as Tenable, Qualys, and others to identify security flaws in systems and networks.
- Demonstrate a excellent understanding of IPv4 and IPv6 networks and their associated vulnerabilities.
- Utilize Linux operating systems for vulnerability research and analysis purposes.
- Collaborate with cross-functional teams to prioritize and address identified vulnerabilities in a timely manner.
- Stay informed about emerging security threats, vulnerabilities, and mitigation techniques to enhance the organization's security posture.
Requirements:
- Bachelor's degree in Computer Science, Information Security, or related field.
- 3+ years of experience in vulnerability research and analysis, preferably in a cybersecurity or information security role.
- Familiarity with common security vulnerabilities and the ability to assess their severity and impact on business operations.
- Hands-on experience with running proof of concept testing for known vulnerabilities.
- In-depth knowledge and practical experience with OWASP Top 10 vulnerabilities, including detection, exploitation, and remediation.
- Proficiency in using vulnerability scanning tools such as Tenable, Qualys, and others.
- Good understanding of IPv4 and IPv6 networks and their associated vulnerabilities.
- Experience working with Linux operating systems.
- Excellent analytical and problem-solving skills.
- Effective communication and collaboration abilities to work with cross-functional teams.
- Relevant certifications such as CEH (Certified Ethical Hacker), OSCP (Offensive Security Certified Professional), or similar are a plus.
