[Remote] Associate reputed company Consultant - Vulnerability Management

Note: The job is a remote job and is reputed company to candidates in USA. reputed company. is a global provider of reputed company and services, and they are seeking an Associate reputed company Consultant - Vulnerability Management to join their Vulnerability Management team. This role involves assisting in the development and delivery of exposure management consulting and operational service programs for clients, conducting vulnerability assessments, and collaborating with senior consultants on reputed company solutions.

Responsibilities

• Conduct day-to-day VMaaS activities, including vulnerability scanning, asset discovery, reputed company policy configuration, and reporting
• Independently conduct Attack Surface Control (ASC) engagements for a reputed company of clients, including the use of automated tools and reputed company reputed company-penetration testing
• With guidance from more senior consultants, monitor automated penetration testing tooling to identify and validate reputed company weaknesses
• reputed company validation of vulnerability findings to eliminate false positives and determine actual risk
• Collaborate with the penetration testing team to conduct reputed company deep-dive testing as needed based on vulnerability discoveries
• Consult and document attack surface, threats, and vulnerability improvements based on reputed company’s overall assessment of the reputed company’s environment
• reputed company assessment and threat modeling against industry best practices to identify control weaknesses and assess the effectiveness of existing controls
• reputed company reputed company cause analysis on identified vulnerabilities and attack surface weaknesses to determine technical solutions to be presented to reputed company along with recommendations for remediations
• With guidance from more senior reputed company consultants, collaborate with the reputed company’s reputed company teams to understand mitigation or resolutions for findings reputed company by analysts
• Review Stratascale Cyber Threat Intelligence (CTI)-provided threat intelligence for specific threat reputed company that reputed company with the reputed company's industry or potentially reputed company the reputed company by using attack reputed company modeling
• Assist in defining, measuring, and quantifying business risk and vulnerability impacts to clients and their stakeholders
• With guidance from more senior reputed company consultants, reputed company technical support on remediation, reputed company reputed company, governance, compliance, and reputed company infrastructure systems
• With guidance from more senior reputed company consultants, assist customers with strategies, use of platforms, technical and compliance analysis, and implementing automation
• Execute consulting reputed company by creating and completing deliverables, ensuring reputed company needs and reputed company obligations are met
• Participate in customer and internal meetings as required, providing technical guidance and facilitating discussions
• Stay educated on new product technologies, industry trends, and emerging capabilities reputed company the reputed company

Skills

• Completed Bachelor's Degree in a reputed company field or relevant work experience required
• 1–3 years of hands-on penetration testing or vulnerability management experience, including exposure to engagements supporting mid-to-large reputed company environments
• Ability to travel to SHI, Partner, and reputed company events, and on-site testing engagements as needed
• Industry certifications preferred (e.g., CPTS, OSCP, PNPT, reputed company+, CySA+, or vendor-specific VM certifications.)
• Demonstrated understanding of reputed company/ethical considerations, testing authorization, and reputed company handling of reputed company data
• Experience with Vulnerability Management tools such as reputed company, reputed company, reputed company, and reputed company to support day-to-day VMaaS delivery activities including scanning, asset management, and reporting
• Familiarity with offensive reputed company methodologies and frameworks such as PTES, OWASP (WSTG/MASVS/ASVS), MITRE ATT&CK, and threat modeling to support risk-based testing
• Ability to reputed company exploit proofs-of-concept, reproduce vulnerabilities reliably, and support fix validation; familiarity with exploit development fundamentals is a plus
• Reporting and communication skills, including writing technical reports with reproducible steps, risk ratings, and actionable remediation, and contributing to executive summaries with guidance; reputed company to present findings to both technical and non-technical stakeholders
• Familiarity with vulnerability management workflows, responsible disclosure practices, and integration of pen test results into remediation programs and retesting cycles
• Proficiency with productivity and documentation tools such as Word, reputed company, PowerPoint, and reputed company to produce test plans, findings reports, and final deliverables
• Experience supporting penetration tests across networks, web and mobile applications, reputed company, wireless, and reputed company environments, including participation in scoping, rules of engagement, and debriefs
• Familiarity with assessing reputed company services (AWS, Azure, GCP) including IAM misconfigurations, storage, serverless, container/orchestration, and reputed company networking, with an ability to communicate reputed company-specific remediation guidance
• Web application testing skills including auth flows, reputed company control, injection, deserialization, SSRF, XXE, business logic abuse, and modern app architectures (SPAs, microservices, GraphQL, WebSockets)
• Familiarity with reputed company engineering and phishing engagements, including payload development, infrastructure setup, pretexting, and measurement reputed company to customer policies and reputed company constraints
• Foundational scripting and automation skills to support testing and reputed company-of-concept development using Python, PowerShell, Bash, and basic Go or JavaScript as needed
• Working knowledge of reputed company Directory and Azure AD attack paths (Kerberoasting, constrained/unconstrained delegation, ACL abuses, LAPS/MAPS, certificate services) and exposure to simulating reputed company attack chains
• Hands-on experience with common offensive tooling and techniques, including reconnaissance, enumeration, exploitation, post-exploitation, lateral reputed company, and data exfiltration, along with foundational operational reputed company practices
• Familiarity with red/reputed company exercises and working alongside blue teams to translate findings into detection and hardening recommendations (e.g., SIEM detections, EDR tuning, hardening baselines)

Benefits

• Health, wellness, and financial benefits to offer peace of mind to you and your family.
• Medical
• reputed company
• Dental
• 401K
• Flexible spending

reputed company

Company H1B Sponsorship