Vulnerability Management Systems Analyst
Role details
Job location
Tech stack
Job description
The State of South Carolina is seeking a Data/Information Architect Consultant to support and enhance the statewide vulnerability management program. The consultant will be responsible for managing vulnerability platforms, coordinating with agencies, and ensuring effective risk mitigation across enterprise systems. Responsibilities: Support statewide vulnerability management program initiatives Administer and configure vulnerability management platforms (Qualys, Tenable, Rapid7) Analyze vulnerabilities, prioritize remediation, and document risks Develop and manage POA&M tracking for remediation efforts Provide training and guidance to agencies on vulnerability management Perform system criticality validation and risk exposure assessments Generate reports and communicate risks to stakeholders Support procurement and implementation of security tools Collaborate with agencies to ensure patching and remediation compliance, V Group Inc. is a NJ-based IT Services and Products Company with its business strategically categorized in various Business Units including Public Sector, Enterprise Solutions, Professional Services, Ecommerce, Projects, and Products. Within Public Sector business unit, we cater IT Professional Services to Federal, State and Local. We have multiple awards/ contracts with 30+ states, including but not limited to NY, CA, FL, GA, MD, MI, NC, OH, OR, CO, CT, TN, PA, TX, VA, NM, VT, and WA. If you are considering applying for a position with V Group, or in partnering with us on a position, please feel free to contact me for any questions you may have regarding our services and the advantages we can offer you as a consultant. Please share my contact information with others working in Information Technology. Website: LinkedIn: Facebook: Twitter
Requirements
5+ years experience with vulnerability management tools (Qualys, Tenable, Rapid7) 5+ years experience architecting and managing vulnerability platforms 5+ years experience with Windows and Linux systems Strong understanding of CVSS, risk mitigation, and POA&M tracking Familiarity with PCI DSS, NIST, ITIL, MITRE ATT&CK Experience with scripting (Python, PowerShell, Bash) Prior experience in enterprise or statewide security programs Certifications preferred: CISSP, CISA, CISO, CEH, OSCP, GPEN Bachelor's Degree or equivalent experience