Vulnerability Prioritisation & Remediation Reviewer

IXO Inc.; France; Hybride; EUR 73 000 - 121 000; Temps partiel

Résumé du poste

IXO Inc. seeks a security professional to drive vulnerability management through assessment case development for operating systems, applications and network devices. You will review findings from discovery to closure, ensuring remediation guidance is practical and well-documented.

The role emphasizes patching decisions based on CVSS/EPSS and asset context, with scripting in Python or PowerShell to automate analyses and reporting. Remote, flexible 15–25 hours per week.

Qualifications

• At least 5 years of experience in vulnerability management, security auditing, or penetration testing.
• Certifications such as CySA+, PenTest+, or CISSP are valued.
• Hands-on with Nessus, Qualys, Rapid7 InsightVM.
• Understanding of CVEs, misconfigurations, and patch deployment.
• Experience with asset management and ticketing systems.
• Scripting in Python or PowerShell for automation.

Responsabilités

• Develop assessment cases for operating systems, applications and network devices using recognised scanning approaches.
• Compare patching and hardening recommendations against asset context, CVSS and EPSS, and the significance of the relevant CVE.
• Review findings from discovery through closure, checking report evidence, prioritisation and the practicality of remediation guidance.
• Record the assumptions, supporting evidence and corrections needed for another specialist to follow your review.

Connaissances

Vulnerability management

Security auditing

Penetration testing

Asset management

Ticketing systems

Python

PowerShell

CVEs & EPSS

Formation

CySA+ or PenTest+ or CISSP

Outils

Nessus

Qualys

InsightVM

Description du poste

Responsibilities

• Develop assessment cases for operating systems, applications and network devices using recognised scanning approaches.
• Compare patching and hardening recommendations against asset context, CVSS and EPSS, and the significance of the relevant CVE.
• Review findings from discovery through closure, checking report evidence, prioritisation and the practicality of remediation guidance.
• Record the assumptions, supporting evidence and corrections needed for another specialist to follow your review.

Experience and expertise

• At least 5 years of experience in vulnerability management, security auditing, or penetration testing.
• Certifications such as CySA+, PenTest+, or CISSP are valued.
• Hands-on experience with leading vulnerability scanners (e.g., Nessus, Qualys, Rapid7 InsightVM).
• Detailed understanding of common vulnerabilities and exposures (CVEs), security misconfigurations, and patch deployment processes.
• Proficiency with asset management systems and ticketing systems for tracking remediation efforts.
• Experience with scripting (Python, PowerShell) for automating vulnerability data analysis or reporting.

Working arrangements and pay

Remote work in these eligible locations: USA, UK, Australia. Planning availability: Flexible, 15-25 hours/week. IXO will confirm the actual start and schedule before acceptance. Compensation is $60 $100/hr USD. The agreed rate, delivery requirements and review criteria are confirmed before work begins.