Vulnerability Management Analyst

ixolabs.ai; France; Sur place; EUR 60 000 - 90 000; Temps partiel

Résumé du poste

ixolabs.ai is seeking a Vulnerability Management Analyst to shape AI-driven risk reduction by identifying, prioritizing, and remediating security weaknesses across diverse IT environments.

You will develop training datasets, create realistic vulnerability assessment scenarios, and generate guidance on patch management, configuration hardening, and CVE prioritization. Collaboration with security teams is essential.

Qualifications

• 5+ years of experience in vulnerability management, security auditing, or penetration testing.
• Certifications such as CySA+, PenTest+, or CISSP are highly desirable.
• Hands-on experience with leading vulnerability scanners (Nessus, Qualys, Rapid7 InsightVM).
• Strong understanding of CVEs, security misconfigurations, and patch deployment processes.
• Experience with asset management systems and ticketing systems for remediation tracking.

Responsabilités

• Develop comprehensive training datasets covering vulnerability scanning methodologies, tools, and reporting best practices.
• Create realistic scenarios for assessing vulnerabilities in operating systems, applications, and network devices.
• Generate detailed content on patch management strategies, configuration hardening, and risk prioritization frameworks (CVSS, EPSS).
• Formulate questions and evaluate AI's ability to recommend remediation steps for identified CVEs.
• Provide expert insights into the lifecycle of a vulnerability from discovery to closure and its impact on risk posture.
• Review AI-generated vulnerability assessment reports and provide feedback on accuracy and actionable recommendations.

Connaissances

Vulnerability management

Security auditing

Penetration testing

CVSS/EPSS knowledge

Outils

Nessus

Qualys

Rapid7 InsightVM

Description du poste

Overview

Proactive security starts with understanding and mitigating vulnerabilities. As a Vulnerability Management Analyst, you will be critical in teaching AI the nuances of identifying, prioritizing, and remediating security weaknesses across diverse IT environments, transforming it into an intelligent risk reduction partner.

Key Responsibilities

• Develop comprehensive training datasets covering vulnerability scanning methodologies, tools, and reporting best practices.
• Create realistic scenarios for assessing vulnerabilities in operating systems, applications, and network devices.
• Generate detailed content on patch management strategies, configuration hardening, and risk prioritization frameworks (e.g., CVSS, EPSS).
• Formulate questions and evaluate AI's ability to recommend appropriate remediation steps for identified CVEs.
• Provide expert insights into the lifecycle of a vulnerability, from discovery to closure, and its impact on an organization's risk posture.
• Review AI-generated vulnerability assessment reports and provide feedback on accuracy, clarity, and actionable recommendations.

Ideal Qualifications

• Minimum 5 years of experience in vulnerability management, security auditing, or penetration testing.
• Certifications such as CySA+, PenTest+, or CISSP are highly desirable.
• Hands-on experience with leading vulnerability scanners (e.g., Nessus, Qualys, Rapid7 InsightVM).
• Strong understanding of common vulnerabilities and exposures (CVEs), security misconfigurations, and patch deployment processes.
• Proficiency with asset management systems and ticketing systems for tracking remediation efforts.
• Experience with scripting (Python, PowerShell) for automating vulnerability data analysis or reporting.

Project Timeline

• Start Date: Immediate
• Duration: Ongoing (Project-based)
• Commitment: Flexible, 15-25 hours/week