Track Lead - NESSUS, Compliance Remediation

Job Summary

The Operating Systems Vulnerability Manager will be responsible for identifying, assessing, and mitigating vulnerabilities within operating systems across the organization. This role requires a deep understanding of operating system architecture, security principles, and risk management. The ideal candidate will collaborate with IT, security teams, and other stakeholders to ensure the integrity and security of operating systems

Key Responsibilities

- **Vulnerability Assessment:**
- Conduct regular vulnerability assessments and scans of operating systems.
- Analyze results and prioritize vulnerabilities based on risk and potential impact.

- **Remediation Management:**
- Develop and implement remediation plans for identified vulnerabilities.
- Collaborate with system administrators and IT teams to ensure timely and effective patching and updates.

- **Policy Development:**
- Establish and enforce security policies related to operating systems.
- Develop best practices and guidelines for secure operating system configurations.

- **Threat Intelligence:**
- Stay up-to-date with the latest vulnerabilities, exploits, and security trends affecting operating systems.
- Utilize threat intelligence feeds to enhance vulnerability management processes.

- **Reporting & Documentation:**
- Create and maintain documentation related to vulnerability assessments, remediation efforts, and security policies.
- Prepare regular reports for management on the status of vulnerabilities and remediation efforts.

- **Training & Awareness:**
- Provide training and awareness programs for staff on operating system security best practices.
- Serve as a point of contact for inquiries regarding operating system vulnerabilities.

Skill Requirements

- Strong knowledge of operating systems (Windows) and their security features.

- Application assesments
- Experience with vulnerability scanning tools (e.g., Nessus, Qualys, Rapid7).
- Familiarity with configuration management and monitoring tools.

Other Requirements

1. Optional But Valuable Certifications: Certified Ethical Hacker (Ceh), Offensive Security Certified Professional (Oscp)