Medical
Dental
Vision
... vulnerability scanning, container supply-chain controls, patch cadence and version lifecycle ... Remote from the start, we believe in a flexible employee experience Compensation * Competitive base ...
Medical
Dental
Vision
... vulnerability scanning, container supply-chain controls, patch cadence and version lifecycle ... Remote from the start, we believe in a flexible employee experience Compensation * Competitive base ...
Remote Vulnerability Scanning information
What is remote vulnerability scanning?
Remote vulnerability scanning is the process of evaluating a computer system, network, or application from a remote location to identify security weaknesses and potential vulnerabilities that could be exploited by attackers. This type of scanning is performed over a network, without needing physical access to the target environment. It helps organizations detect security flaws, misconfigurations, and outdated software remotely, allowing them to address risks proactively. Remote vulnerability scanning is a crucial part of maintaining a strong cybersecurity posture, especially for businesses with distributed or cloud-based assets.
What are the key skills and qualifications needed to thrive as a remote vulnerability scanning specialist, and why are they important?
To thrive as a Remote Vulnerability Scanning Specialist, you need a solid understanding of networking, cybersecurity principles, and vulnerability management, often supported by a degree in computer science or a related field. Familiarity with tools like Nessus, OpenVAS, Qualys, and relevant certifications such as CompTIA Security+ or CEH are commonly required. Strong analytical thinking, attention to detail, and effective communication are key soft skills for identifying issues and reporting findings to technical and non-technical stakeholders. These skills and qualifications are critical to proactively identifying security weaknesses and helping organizations mitigate cyber risks.
What are the typical challenges faced when performing remote vulnerability scanning, and how can they be addressed?
One common challenge in remote vulnerability scanning is accurately identifying vulnerabilities without causing disruptions to the target systems, as aggressive scans can sometimes impact network performance or trigger security defenses. Additionally, remote scanners may face difficulties in detecting vulnerabilities behind firewalls or in segmented networks. To address these issues, it is important to coordinate scans with IT teams, schedule scans during low-traffic periods, and use authenticated scanning methods when possible. Effective communication and thorough documentation also help ensure that findings are actionable and that scanning activities align with organizational security policies.
What is the difference between Remote Vulnerability Scanning vs Network Security Analyst?
| Aspect | Remote Vulnerability Scanning | Network Security Analyst |
|---|---|---|
| Primary Role | Identify security weaknesses through automated scans | Monitor, analyze, and respond to security threats |
| Tools & Certifications | Vulnerability scanners, certifications like CompTIA Security+ | SIEM tools, certifications like CISSP or CEH |
| Work Environment | Remote or on-site, focused on scanning tools | Typically on-site or hybrid, involving analysis and incident response |
Remote Vulnerability Scanning focuses on automated detection of security flaws, while Network Security Analysts interpret these findings and handle security incidents. Both roles require cybersecurity knowledge and certifications, but their daily tasks and responsibilities differ significantly.
What are popular job titles related to Remote Vulnerability Scanning jobs in New Mexico?
For Remote Vulnerability Scanning jobs in New Mexico, the most frequently searched job titles are:
What job categories do people searching Remote Vulnerability Scanning jobs in New Mexico look for?
The top searched job categories for Remote Vulnerability Scanning jobs in New Mexico are:
Full-time
Medical, Dental, Vision
Re-posted 11 days ago
Job description
Medable's mission is to get effective therapies to patients faster. We provide an end-to-end, agentic clinical trial platform with a flexible suite of tools that allows patients, healthcare providers, clinical research organizations and pharmaceutical sponsors to work together as a team in clinical trials. Our solutions enable more efficient clinical research, more effective healthcare delivery, and more accurate precision and predictive medicine. Our target audiences are patients, providers, principal investigators, and innovators who work in healthcare and life sciences.
Our vision is to accelerate the path to human discovery and medical cures. We are passionate about driving innovation and empowering consumers. We are proactive, collaborative, self-motivated learners, committed, bold and tenacious. We are dedicated to making this world a healthier place.
1. Responsibilities- Work cross-functionally with Information Security Operations and Infrastructure/DevOps teams, to administer and optimize security posture across multi-cloud (GCP/AWS) infrastructure, including native security services, IAM, logging, and threat detection.
- Triage and respond to cloud security alerts and vulnerabilities; implement timely mitigations, configuration changes, and patches.
- Own configuration and hygiene for cloud security consoles (examples: GCP Security Command Center, Cloud Logging, Cloud Armor, KMS, IAM,etc.).
- Partner with DevOps to implement secure baseline configurations and guardrails (network segmentation, least privilege, encryption, key management, secrets handling, egress controls), in alignment with industry standard frameworks such as CIS, NIST 800-53, OWASP Top 10, etc.
- Run day-to-day vulnerability workflows: detection, prioritization, remediation, and validation across cloud services, hosts, containers, and third-party dependencies.
- Manage and harden security configurations for Kubernetes Engine environments, including:
- Cluster and node security settings, RBAC, pod security controls, network policies, admission controls, and runtime security, Image vulnerability scanning, container supply-chain controls, patch cadence and version lifecycle management for clusters/nodes and supporting components.
- Support secure implementations/integrations of AI within cloud infrastructure, including:
- Data protection controls (PII/PHI handling, encryption, retention, audit logging).
- Network controls (private connectivity where feasible, egress restrictions, proxying, allowlists).
- Usage monitoring, abuse prevention, and security reviews for AI-driven features/workflows.
- Contributing to internal AI security standards (prompt/data handling guidance, logging strategy, third-party risk considerations).
- Work cross-functionally with IS Risk and Compliance team to produce evidence and reporting to support internal security requirements and external compliance obligations (e.g., SOC 2 / ISO-aligned controls, healthcare and privacy expectations).
- Participate in security incident response for cloud-related events, including containment and recovery actions.
- Other duties as assigned.
- 4+ years of hands-on experience in cloud security, DevSecOps, cloud engineering with security focus, or security operations in cloud environments or a combination of education and experience.
- Experience in healthcare technology and/or regulated environments (privacy, audit evidence, security control documentation).
- Practical experience administering security controls in GCP and AWS (IAM, logging, encryption/KMS, network security, cloud security services).
- Experience securing Kubernetes environments, including RBAC, cluster hardening, workload controls, and patch/version management.
- Strong vulnerability management experience (triage, remediation coordination, patching workflows, validation).
- Experience supporting secure integrations of LLM/AI services (e.g., ChatGPT/Grok) in production systems, including data governance and key management.
- Ability to work cross-functionally between InfoSec and Infrastructure/DevOps, and translate security requirements into implementable controls.
- Comfort working from tickets/alerts through to implemented changes in production cloud environments.
- Comfortable writing code in any one programming language: Javascript/Python/Bash.
- Familiarity with Infrastructure-as-Code and automation concepts (Terraform/CloudFormation, CI/CD pipelines, scripting).
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science or a related field preferred.
- Security certifications (one or more): GCP Professional Cloud Security Engineer, CISSP, CCSP, Security+.
As required.
At Medable, we believe that our team of Medaballers is our greatest asset. That is why we are committed to your personal and professional well-being. Our rewards are more than just benefits - they demonstrate our commitment to providing an inclusive, healthy and rewarding experience for all our team members.
Flexible Work
Remote from the start, we believe in a flexible employee experience
Compensation
Competitive base salaries
Annual performance-based bonus
Stock options for employees, aligning personal achievements to Medable's success
Health and Wellness
Comprehensive medical, dental, and vision insurance coverage
Carrot Fertility Program
Health Saving Accounts (HSA) and Flexible Spending Accounts (FSA)
Wellness program (Mental, Physical and Financial)
Recognition
Peer-to-peer recognition program, celebrating achievements and milestones
Community Involvement
Volunteer time off to support causes you care about
Medable is committed to providing reasonable accommodations for qualified individuals with disabilities in our job application procedures. If you need assistance or would like to request an accommodation due to a disability, please contact us athr@medable.com.
About Medable
Sourced by ZipRecruiter
Industry
Software development
Company size
501 - 1,000 Employees
Headquarters location
Palo Alto, CA, US
Year founded
2016