Remote Attack Surface Management Operationalization Consultant

Summary

Join Cloud Security Services in a 12-week remote project opportunity to develop and enhance the client’s Attack Surface Management (ASM) operational framework.

Requirements

• 3-5 Years Experience in ASM
• 5 – 10 Years Experience in vulnerability management, IT service management and IT GRC
• Experience with the Axonius platform
• Familiarity with vulnerability detection platforms and the connectors used to ingest vulnerability data
• Cybersecurity vulnerability Identification
• Cybersecurity Vulnerability Assessment for Remediation and Prioritization
• Continuous Control Monitoring
• Cyber Asset Management
• Vulnerability Management Automation
• IT Infrastructure Library (ITIL) and IT Service Management experience
• Experience operationalizing vulnerability and asset management platforms
• Diagramming operational workflows
• Ability to develop report requirements
• Ability to develop metric requirements
• Understanding of NIST and equivalent risk management frameworks
• Excellent analytical skills
• Ability to leverage existing documentation
• Collaborative team worker – both in person and virtually using MS Teams or similar
• Excellent documentation skills; demonstrated proficiency in Microsoft Office including Word, Excel and PowerPoint
• Ability to work as liaison between business and information security / information technology
• Flexibility to accommodate working across different time zones
• Excellent interpersonal communication skills with strong spoken and written English
• Business outcomes mindset
• Solid balance of strategic thinking with detail orientation
• Self-starter, ability to take initiative
• Project management and organizational skills with attention to detail

Responsibilities

Develop and enhance an ASM operational framework including but not limited to: Roles and Responsibilities (RACI), Vulnerability Severity Rating Definition and Prioritization, Metric Requirements, ASM Operational Workflows, ASM Configuration Standards, ASM Report Development

Preferred Qualifications

• Red Team, Blue Team, Purple Team or Penetration Testing Experience
• ServiceNow, Jira or equivalent service management platform experience