251107 - Vulnerability Assessment Specialist
Performs vulnerability assessments of systems and networks. Identifies where they deviate from acceptable configurations or applicable policies. Measures effectiveness of defense-in-depth architectures against known vulnerabilities
Main Tasks:
Examine systems and networks to identify security gaps and vulnerabilities
Use the results of systems and networks examination to determine the areas of weakness according to the applicable policies, controls and standards
Perform technical and non-technical assessments of security vulnerabilities and their impact
Provide recommendations on necessary controls and measures to address known and discovered vulnerabilities
Measure the effectiveness of the defense infrastructure and measures and procedures in place to protect systems and networks from known vulnerabilities
Educational Level:
Educational Field:
Software and applications development and analysis
Database and network design and administration
Skills:
Effective communication with individuals and leaders
Technical skills:
Knowledge of methodologies and mechanisms for scanning and examining systems and networks to discover weaknesses and vulnerabilities.
Knowledge of cybersecurity related threats and vulnerabilities.
Skill in conducting vulnerability scans to systems and networks and identifying cybersecurity vulnerabilities.
Knowledge and understanding of risk assessment, mitigation and management methods, and the national cybersecurity regulations and requirements relevant to the organization.
Knowledge of an organization’s threat environment.