Senior IT Vulnerability Consultant (Hybrid)

Corporacion Sidif Del Caribe; San Juan (PR); Hybrid; USD 90,000 - 125,000; Full time

Job summary

Corporacion Sidif Del Caribe is seeking a Sr. IT Vulnerability Consultant to work under a service contract, hybrid in Puerto Rico. You will apply deep cybersecurity expertise to assess and manage IT vulnerabilities across complex environments.

The role demands strong communication to present findings to stakeholders, lead remediation efforts, and align with ISO 27001, NIST, and PCI-DSS standards. A collaborative, detail‑oriented professional will thrive here.

Qualifications

• Strong expertise in vulnerability assessment and management.
• Knowledge of network/infrastructure security (firewalls, OS, endpoints, servers, cloud).
• Experience with application and web security, secure coding, and OWASP Top 10.
• Familiarity with ISO 27001, NIST, PCI-DSS, or similar frameworks.
• Proficiency in documenting findings and presenting executive-level reports and recommendations.
• Ability to collaborate with cross-functional teams and manage multiple assessments.

Responsibilities

• Lead vulnerability assessments across IT environments.
• Prioritize remediation and track closure with stakeholders.
• Prepare executive-level reports and recommendations.
• Collaborate with cross-functional teams to remediate findings.
• Adhere to cybersecurity standards and regulatory requirements.

Skills

Vulnerability assessment

Infrastructure security

Security reporting

Stakeholder communication

Cross-functional collaboration

Bilingual English/Spanish

Education

Bachelor’s degree in Computer Science / Information Security / Engineering

Tools

Vulnerability scanning tools

Job description

Corporacion Sidif Del Caribe is seeking a Sr. IT Vulnerability Consultant to work under a service contract, hybrid in Puerto Rico. You will apply deep cybersecurity expertise to assess and manage IT vulnerabilities across complex environments.

The role demands strong communication to present findings to stakeholders, lead remediation efforts, and align with ISO 27001, NIST, and PCI-DSS standards. A collaborative, detail‑oriented professional will thrive here.