|
Описание: |
We are looking for a motivated and detail-oriented cybersecurity professional to join our team as a Threat Intelligence and Vulnerability Management Engineer. This role focuses on supporting the identification and mitigation of threats and vulnerabilities using Microsoft Defender Vulnerability Management and Nexpose Rapid7. You’ll work closely with senior engineers and SOC analysts to help protect our environment and grow your expertise in threat analysis and risk reduction.
Responsibilities:
* Threat Intelligence Support:
* Monitor and organize threat intelligence feeds and alerts from external sources.
* Assist in collecting and maintaining indicators of compromise (IOCs) and threat actor profiles.
* Support analysis of threat trends using frameworks like MITRE ATT&CK.
* Help enrich incident investigations with relevant threat context.
* Vulnerability Management Assistance:
* Perform regular vulnerability scans using Microsoft Defender Vulnerability Management and Nexpose Rapid7.
* Review scan results, assist in prioritizing vulnerabilities based on severity and exploitability.
* Coordinate with IT and application teams to track and verify remediation efforts.
* Maintain documentation of vulnerabilities, remediation status, and risk levels.
* Reporting & Documentation:
* Help prepare reports and dashboards on threat intelligence and vulnerability metrics.
* Document findings, remediation actions, and process improvements.
* Collaboration & Learning:
* Work with SOC and incident response teams to support investigations and response efforts.
* Participate in team knowledge-sharing sessions and cybersecurity training.
* Stay updated on emerging threats, vulnerabilities, and security technologies.
Required Skills & Qualifications:
* Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience).
* 1–3 years of experience in cybersecurity, preferably in threat intelligence or vulnerability management.
* Familiarity with Microsoft Defender Vulnerability Management and Nexpose Rapid7.
* Basic understanding of threat intelligence concepts and vulnerability lifecycle.
* Exposure to SIEM platforms like Microsoft Sentinel is a plus.
* Strong attention to detail and eagerness to learn.
* Good communication skills and ability to work in a team.
* Intermediate level of English is a minimum.
*
The following Certifications would be an advantage:
* CompTIA Security+
* Microsoft Certified: Security Operations Analyst Associate (SC-200)
* GIAC Cyber Threat Intelligence (GCTI)
* CompTIA CySA+
* Microsoft Certified: Azure Fundamentals
Відгукнутись на вакансію |
