> Markdown version of [/jobs/ext/1091231-cybersecurity-vulnerability-management-specialist](https://www.wearedevelopers.com/jobs/ext/1091231-cybersecurity-vulnerability-management-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Vulnerability Management Specialist - **Company:** PamTen - **Location:** New York, NY, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Excel, Microsoft Windows, Data Analysis, Proxy Servers, Apple IOS, Public-Key Cryptography, Cisco IOS, Encodings, Cyber Security, Linux, Domain Name System (DNS), Hypertext Transfer Protocols (HTTP), Internet Protocol Security (IP SEC), Intrusion Detection Systems, Virtual Private Networks (VPN), Information Systems Security Architecture Professional, Python (Programming Language), Linux Servers, Lookup Table, Simple Mail Transfer Protocols, Microsoft Security Essentials, Pivot Tables, Microsoft PowerPoint, Windows PowerShell, Tableau (Software), Software Vulnerability Management, Scripting, Mobile Os, Juniper, Palo Alto Networks, Fortinet, Cisco, Vulnerability Analysis, Vmware - **Published:** June 2, 2026 - **Apply:** https://www.dice.com/job-detail/6342c6b2-8881-480e-8c57-7dfbf5fbc0c4 ## About the Role * At least 10 years of experience in Cybersecurity, including vulnerability management scanning tools, vulnerability assessments, attack surface management, scripting, vulnerability intel analysis, vulnerability management scan result analysis, Excel * Strong knowledge of CVE's, CVSS, Vector Strings, NVD, Mitre, attack vectors and mitigations * Experience with the design, architect and build of vulnerability management scanning infrastructure and tools specifically Rapid7; extensive hands-on experience conducting Rapid7 vulnerability scans across various networks; experience conducting Rapid7 vulnerability management analysis through reports and dashboards to accurately identify risk * Experience evaluating security vulnerabilities, assessing risk and impact, developing mitigation strategies, and implementing remediation * Experience conducting intel research around CVE's, vendor hardware/software vulnerabilities, and presenting succinct technical overviews to team members and customers * Extensive experience with scripting such as Python and PowerShell to automate vulnerability management tasks * Extensive experience with Excel, especially for performing data analysis through VLookup and Pivot Tables DESIRABLE SKILLS/EXPERIENCE: * Provide oral and written reports on vulnerability risk to the team and possibly agencies' technical stakeholders * Ability to evaluate the current threat landscape that includes tactics, techniques and procedures * Work with agencies to evangelize the OTI Cyber Command program around areas of cybersecurity posture enhancement, risk reduction, attack surface management, vulnerability management scanning tool performance, scan results, credentialed scans, triage scan performance issues, socialize risk and remediation, and other vulnerability management issues * Experience using Tableau for reporting and analysis purposes * Strong background with next generation firewall products, intrusion detection systems, DMZ, IPSec, DNS, SMTP, HTTP, VPN, proxies, etc. * Knowledge of security best practices across multiple platforms, such as Microsoft Windows, VMWare, Linux, VPN, Cisco IOS, and Mobile OS Android/Apple IOS. * Knowledge of public-key cryptography, understanding of encoding, encryption, and hashing techniques * Knowledge of security best practices: NIST, CIS, Cisco, Juniper, Palo Alto, Fortinet, Checkpoint, F5, Microsoft, Unix/Linux, etc. * Ability to analyze Cybersecurity documentation, including security policies, plans, and procedures. * Extensive experience with Windows and Linux Servers * Exceptional written and oral communication skills * Exceptional organizational and analytical skills * Certifications such as Certified Information Systems Security Professional (CISSP) Certification, Security Essentials Certification (GSEC), Certified Intrusion Analyst (GCIA), Certified Incident Handler (GCIH), Certified Ethical Hacker (CEH), Certified Penetration Tester (CWAPT) ## Description The Cyber Command Threat Management division requires a Senior Vulnerability Management Specialist to serve as a subject matter expert for vulnerability management: Tasks * Research, analyze and brief management and team members on relevant Risk, CVE's, CVSS, Vector Strings, NVD, Mitre, attack vectors and mitigations for various technologies * Design, architect and build Rapid7 vulnerability management scanning infrastructure and tools * Manage, configure and conduct Vulnerability Management scans in Rapid7 across various networks * Conduct vulnerability management analysis through industry research, deep analysis, generating of reports and dashboards in Rapid7 to accurately assess and prioritize risk * Evaluate security vulnerabilities, assess risk and impact, develop mitigation strategies, and implement remediation * Present succinct technical briefings to team members and customers for intel research, risk assessment, CVE's, vendor hardware/software, and industry trends * Create scripts utilizing Python, PowerShell and others to automate vulnerability management tasks * The ability to automate detection, reporting and tracking of vulnerabilities identified * Create deep analysis and reports around vulnerability management utilizing Rapid7 dashboards and reports, scripts, Excel and PowerPoint * Travel within NYC for various projects when necessary ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [Generating code with Angular schematics](https://www.wearedevelopers.com/videos/129-generating-code-with-angular-schematics) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)