They are known to respect a traditional work week and often extend contracts for added job security ... scan results, track and coordinate with system owners to ensure timely remediation Maintain a ...
They are known to respect a traditional work week and often extend contracts for added job security ... scan results, track and coordinate with system owners to ensure timely remediation Maintain a ...
WI · On-site
$150 - $200/hr
SIEM, EDR, WAF, IAM, secrets management, and vulnerability scanning tools. * Conduct or manage ... Review and negotiate security requirements in partner and vendor contracts. * Partner ...
WI · On-site
$150 - $200/hr
SIEM, EDR, WAF, IAM, secrets management, and vulnerability scanning tools. * Conduct or manage ... Review and negotiate security requirements in partner and vendor contracts. * Partner ...
Certified Cloud Architect
Madison, WI · On-site
$65.50 - $83.50/hr
This initiative transitions the State from reactive, manual vulnerability management to an AI ... Embed secure builds, automated software testing, code scanning, and dependency updates natively ...
Certified Cloud Architect
Madison, WI · On-site
$65.50 - $83.50/hr
This initiative transitions the State from reactive, manual vulnerability management to an AI ... Embed secure builds, automated software testing, code scanning, and dependency updates natively ...
Contract Vulnerability Scanning information
What is contract vulnerability scanning?
Contract vulnerability scanning refers to the process of hiring third-party professionals or firms to assess and identify security weaknesses in an organization's systems, networks, or applications. The scanning is typically performed on a contractual basis, often as part of compliance requirements or routine security practices. These experts use automated tools and manual techniques to detect vulnerabilities that could be exploited by attackers, providing detailed reports and recommendations for remediation. This approach allows organizations to benefit from specialized expertise without maintaining a full-time, in-house vulnerability scanning team.
What are some common challenges faced by professionals in contract vulnerability scanning roles?
Professionals in Contract Vulnerability Scanning often encounter challenges such as managing tight deadlines, adapting to varied client environments, and ensuring clear communication of technical findings to non-technical stakeholders. They must stay updated with the latest vulnerabilities and scanning tools, as threats and technologies evolve rapidly. Additionally, balancing thoroughness with efficiency is crucial, as clients expect comprehensive reports without significant delays. Collaboration with IT, security, and management teams is also key to ensure that identified vulnerabilities are properly addressed.
What is the difference between Contract Vulnerability Scanning vs Penetration Tester?
| Aspect | Contract Vulnerability Scanning | Penetration Tester |
|---|---|---|
| Primary Focus | Automated identification of security vulnerabilities in systems | Manual and automated testing to exploit vulnerabilities and assess security |
| Tools & Techniques | Vulnerability scanners, automated tools | Custom scripts, penetration tools, manual testing |
| Work Environment | Typically performed remotely or on client sites, within security teams | Often on-site, conducting simulated attacks |
| Certifications | CompTIA Security+, CISSP, CEH | OSCP, CEH, GPEN |
Contract Vulnerability Scanning involves automated tools to identify security weaknesses, while Penetration Testers perform manual and automated testing to exploit vulnerabilities. Both roles require security certifications but differ in approach and scope, with vulnerability scanning being more automated and penetration testing more hands-on.
What are the key skills and qualifications needed to thrive as a contract vulnerability scanning specialist, and why are they important?
To thrive as a Contract Vulnerability Scanning Specialist, you need expertise in network security, vulnerability assessment methodologies, and a solid understanding of operating systems and protocols, often supported by certifications like CompTIA Security+ or CEH. Proficiency with vulnerability scanning tools such as Nessus, OpenVAS, or Qualys, and familiarity with ticketing and reporting systems are typically required. Attention to detail, analytical thinking, and clear communication are essential soft skills for identifying risks and conveying findings to non-technical stakeholders. These capabilities ensure the accurate detection of security weaknesses and effective risk mitigation for clients or organizations.
What are popular job titles related to Contract Vulnerability Scanning jobs in Wisconsin? For Contract Vulnerability Scanning jobs in Wisconsin, the most frequently searched job titles are:
What job categories do people searching Contract Vulnerability Scanning jobs in Wisconsin look for? The top searched job categories for Contract Vulnerability Scanning jobs in Wisconsin are:
What cities in Wisconsin are hiring for Contract Vulnerability Scanning jobs? Cities in Wisconsin with the most Contract Vulnerability Scanning job openings:
IT Cybersecurity Analyst - Vulnerability Management Cyber Security Engineer
Milwaukee, WI • On-site
Other
Re-posted yesterday
Job description
MARS Solutions Group is looking for an experienced IT Cybersecurity Analyst located in Milwaukee, WI. Our client is a leading electric and natural gas utility industry looking for high-quality talent to make a difference. They are known to respect a traditional work week and often extend contracts for added job security and stability.
Description:
The IT Cybersecurity Analyst is an intermediate level position with the purpose of transacting technical cybersecurity business given a competent knowledge of the work. Works on systems, deliverables and issues that are complex and applies industry best practices, as well as company policies and practices to develop solutions. Is required to effectively support the assessment of threat environment and receives general instructions on routine work and more detailed instructions on new work.
Job Responsibilities
Stay current with emerging threats, vulnerabilities, and mitigation techniques to continuously improve security posture
Collaborate with internal teams including infrastructure, applications, security operations center, cyber threat intelligence, and offensive security to validate vulnerabilities, assess risk, prioritize and recommend mitigation strategies
Identify, review and analyze vulnerability data to detect trends and patterns
Install, integrate, configure, and deploy vulnerability scanning solutions
Confirm and refine asset scope for scan activities
Analyze scan results, track and coordinate with system owners to ensure timely remediation
Maintain a vulnerability dashboard and provide executive-level reporting
Influence the development of vulnerability management standards and security policies
Executing vulnerability management processes, suggesting applicable change controls, and security exceptions
Maintaining and updating process guides and assisting with reporting to leadership and service stakeholders
Assisting and supporting incident handling/response investigations
Minimum Qualifications
Bachelor's degree in computer science, computer engineering, software engineering, information technology, computer information systems, MIS, or engineering is preferred. A combination of an associate degree, military or professional cybersecurity experience and cybersecuritycertification (CISSP, GAIC, MCSE, CEH, GICSP, CSSA, CISM) will be considered
2+ years in cybersecurity required with a strong proficiency in Vulnerability Management preferred
Excellent communication and interpersonal skills
Strong knowledge with SIEM platforms and threat intelligence tools
Preferred Qualifications
Minimum of 2 years of experience with Vulnerability Management along with strong knowledge of CVSS scoring, patch management and secure configuration practices preferred
5+ years in cyber security and a strong proficiency in Vulnerability Management
Cybersecurity certification (CISSP, CISM, OSCP, CCSP, CCNA, GAIC, MCSE, GICSP, CSSA)
Desirable skills include any of the following:
In-Depth Knowledge of Operating Systems (Windows, Unix/Linux, MacOS)
Programming and Scripting Experience (Python, PowerShell, Perl, Java, .NET (VB, C#), etc.)
Network, Identity, and Authentication Management (TCP/IP, Switch/Route, DNS, DHCP, Kerberos, PKI, RADIUS, etc.)
Cloud Platforms (Azure, AWS, Google Cloud Platform)
Job Responsibilities
Stay current with emerging threats, vulnerabilities, and mitigation techniques to continuously improve security posture
Collaborate with internal teams including infrastructure, applications, security operations center, cyber threat intelligence, and offensive security to validate vulnerabilities, assess risk, prioritize and recommend mitigation strategies
Identify, review and analyze vulnerability data to detect trends and patterns
Install, integrate, configure, and deploy vulnerability scanning solutions
Confirm and refine asset scope for scan activities
Analyze scan results, track and coordinate with system owners to ensure timely remediation
Maintain a vulnerability dashboard and provide executive-level reporting
Influence the development of vulnerability management standards and security policies
Executing vulnerability management processes, suggesting applicable change controls, and security exceptions
Maintaining and updating process guides and assisting with reporting to leadership and service stakeholders
Assisting and supporting incident handling/response investigations
Minimum Qualifications
Bachelor's degree in computer science, computer engineering, software engineering, information technology, computer information systems, MIS, or engineering is preferred. A combination of an associate degree, military or professional cybersecurity experience and cybersecuritycertification (CISSP, GAIC, MCSE, CEH, GICSP, CSSA, CISM) will be considered
2+ years in cybersecurity required with a strong proficiency in Vulnerability Management preferred
Excellent communication and interpersonal skills
Strong knowledge with SIEM platforms and threat intelligence tools
Preferred Qualifications
Minimum of 2 years of experience with Vulnerability Management along with strong knowledge of CVSS scoring, patch management and secure configuration practices preferred
5+ years in cyber security and a strong proficiency in Vulnerability Management
Cybersecurity certification (CISSP, CISM, OSCP, CCSP, CCNA, GAIC, MCSE, GICSP, CSSA)
Desirable skills include any of the following:
In-Depth Knowledge of Operating Systems (Windows, Unix/Linux, MacOS)
Programming and Scripting Experience (Python, PowerShell, Perl, Java, .NET (VB, C#), etc.)
Network, Identity, and Authentication Management (TCP/IP, Switch/Route, DNS, DHCP, Kerberos, PKI, RADIUS, etc.)
Cloud Platforms (Azure, AWS, Google Cloud Platform)
About MARS Solutions Group: MARS Solutions Group provides a range of opportunities for meaningful work by understanding that employment fit is a combination of people, process, and technology. We leverage our experienced and compassionate team to bring humanity to matching you with the right advanced technology role, and stay connected with you to help you attain your professional goals.
About MARS IT
Sourced by ZipRecruiter
Industry
Recruiting and staffing services
Company size
201 - 500 Employees
Headquarters location
Waukesha, WI, US