Remote Vulnerability Review & Remediation Specialist

IXO Inc.; France; Hybride; EUR 73 000 - 121 000; Temps partiel

Résumé du poste

IXO Inc. seeks a security professional to drive vulnerability management through assessment case development for operating systems, applications and network devices. You will review findings from discovery to closure, ensuring remediation guidance is practical and well-documented.

The role emphasizes patching decisions based on CVSS/EPSS and asset context, with scripting in Python or PowerShell to automate analyses and reporting. Remote, flexible 15–25 hours per week.

Qualifications

• At least 5 years of experience in vulnerability management, security auditing, or penetration testing.
• Certifications such as CySA+, PenTest+, or CISSP are valued.
• Hands-on with Nessus, Qualys, Rapid7 InsightVM.
• Understanding of CVEs, misconfigurations, and patch deployment.
• Experience with asset management and ticketing systems.
• Scripting in Python or PowerShell for automation.

Responsabilités

• Develop assessment cases for operating systems, applications and network devices using recognised scanning approaches.
• Compare patching and hardening recommendations against asset context, CVSS and EPSS, and the significance of the relevant CVE.
• Review findings from discovery through closure, checking report evidence, prioritisation and the practicality of remediation guidance.
• Record the assumptions, supporting evidence and corrections needed for another specialist to follow your review.

Connaissances

Vulnerability management

Security auditing

Penetration testing

Asset management

Ticketing systems

Python

PowerShell

CVEs & EPSS

Formation

CySA+ or PenTest+ or CISSP

Outils

Nessus

Qualys

InsightVM

Description du poste

IXO Inc. seeks a security professional to drive vulnerability management through assessment case development for operating systems, applications and network devices. You will review findings from discovery to closure, ensuring remediation guidance is practical and well-documented.

The role emphasizes patching decisions based on CVSS/EPSS and asset context, with scripting in Python or PowerShell to automate analyses and reporting. Remote, flexible 15–25 hours per week.