Attack Surface Management And Security Configuration Compliance Sme

• 8+ years of experience in information security, technology risk management or related field.
• Demonstrated ability configuring and managing technical security controls at an enterprise level
• with a proven record of partnering with line of business partners and implementing effective risk mitigation strategies.
• Experience with vulnerability and configuration compliance scanning tools such as Symantec, Qualys, Tanium,
• Tenable, etc.
• Familiarity with risk management frameworks and financial industry regulatory requirements.
• Familiarity as a system admin for Unix, Windows, or workstation administration.
• Familiarity with python, bash, powershell and/or regex as well as the ability to develop scripts and run code.

• Plan, develop, test and implement configuration compliance policies and technical controls in support of the
• Secure Configuration Program.
• Manage engagement and work with technology teams to validate baseline policy controls and remediate non-compliance.
• Ensure consistently accurate scans and reports are generated. Engage on multiple technology products at one time.

• CISSP, CISM or similar industry-recognized certifications are preferred.
• Key Words to search in Resume
• Vulnerability management, SAST/DAST, Qualys, Tanium, Tenable, Symantec

Qualifications

BACHELOR OF COMPUTER SCIENCE