System Engineer

NANOSOFT CONSULTING TALENT PAGE; United States; Vor Ort; USD 80.000 - 110.000; Vollzeit

Zusammenfassung

NANOSOFT CONSULTING TALENT PAGE is seeking a contract cybersecurity analyst to support onboarding of a SaaS External Attack Surface Management tool. You will ingest targets, review workloads, administer asset data, and build integrations with related platforms.

You will also communicate findings to stakeholders and coordinate with GIS security teams. Typical duties include reviewing the previous day's discoveries, attributing workloads, determining ownership, and triaging vulnerabilities while

Qualifikationen

• Experience with vulnerability management tools and workflows.
• Understanding of DNS, ASN, and SSL certificates fundamentals.
• Strong networking knowledge (IP, subnets, ports, TCP/UDP).
• Familiarity with CVE and CVSS terminology and scoring.
• Ability to review discovered workloads and triage findings.

Aufgaben

• Assist onboarding of a new SaaS External Attack Surface Management tool.
• Ingest targets, review discovered workloads, and manage asset data.
• Develop and support integrations with related platforms.
• Communicate important findings to stakeholders and security teams.
• Review previous day discoveries and determine workload ownership.

Kenntnisse

Vulnerability management tools

DNS concepts

ASN concepts

SSL Certificates basics

Networking fundamentals

CVE & CVSS basics

Threat discovery reviews

Ausbildung

B.S. or B.A. in IT or related field

2-4 years cybersecurity experience

No degree with 4+ years experience

Tools

Qualys

Tenable

ZAP

Rapid7

Jobbeschreibung

• This is a 6 month contract Job Description: This person will be responsible for assisting with the onboarding of a new SaaS External Attack Surface Management tool for Cybersecurity. This will include ingestion of targets, review of discovered workloads, administration of asset data, development and support of integrations to other related platforms. Communicates important findings to relevant stakeholders.


• Typical Day -Review previous day''s discovered workloads, identify attribution parameters to determine if they belong to the enterprise, determine workload ownership, and communicate findings.


• Other duties may include triaging discovered vulnerabilities and coordination with stakeholders related to security incident response.

Education Requirement

• B.S. or B.A. in Information Technology or a related field plus 2-4 years exp in Cybersecurity.


• No degree acceptable with 4+ years exp in this field.

Technical Skills Required

• 2+ years experience with Qualys, Tenable, ZAP, Rapid7 or other vulnerability management tools


• Must understand DNS and its purpose, must understand ASN (Autonomous System Number) and its purpose, basic understanding of SSL Certificates.


• Must understand fundamental networking concepts: IP addressing, subnet masking, TCP/IP/UDP ports and services.


• Basic familiarity with the CVE program and CVSS framework

Desired Skills

• Exp with Microsoft Defender

Soft Skills Required

• Must be able to engage with and communicate effectively with security professionals within GIS and partner business units.


• Must be able to prepare content and present it to stakeholders with confidence and professionalism.


• Effectively tracks activities and application performance for inclusion in department metrics and progress reports.


• Translates technical topics for non-technical stakeholders.