Vulnerability Engineer at Babel Street
Reston, Virginia, USA -
Full Time


Start Date

Immediate

Expiry Date

08 Jul, 25

Salary

0.0

Posted On

08 Apr, 25

Experience

0 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

No

Skills

Good communication skills

Industry

Information Technology/IT

Description

Babel Street is the trusted technology partner for the world’s most advanced identity intelligence and risk operations. We deliver advanced AI and data analytics solutions providing unmatched, analysis-ready data regardless of language, proactive risk identification, 360-degree insights, high-speed automation, and seamless integration into existing systems. Babel Street empowers government and commercial organizations to transform high-stakes identity and risk operations into a strategic advantage. The actionable insights we deliver safeguard lives and protect critical assets around the world. Babel Street is headquartered in Reston, Virginia, with regional offices in Boston, MA and Cleveland, OH, and international offices in Australia, Canada, Israel, Japan, and the U.K. For more information, visit www.babelstreet.com.

Responsibilities

ABOUT THE ROLE:

We are actively seeking a skilled Vulnerability and Remediation Engineer to enhance our cybersecurity efforts. This position is focused on identifying, assessing, and mitigating vulnerabilities across our IT infrastructure. The chosen candidate will leverage platforms like Qualys VMDR for vulnerability scanning, validate these findings through system reviews or direct interactions, and implement or recommend remediations using specialized patching and management tools such as Manage Engine Desktop and Kandji. Essential to this role is a comprehensive understanding of various operating systems (Unix, MacOS, Windows) and their command lines (Bash, PowerShell, Command Shell), as well as proficiency in patching tools, to effectively verify and resolve vulnerabilities.

WHAT YOU WILL DO:

Vulnerability Analysis:

  • Conduct regular scans and review alerts and vulnerabilities across a range of platforms, with an emphasis on Qualys VMDR.
  • Evaluate and prioritize vulnerabilities based on severity, impact, and potential risk to the organization, using an in-depth knowledge of diverse operating systems and command lines.
  • Validate the existence of vulnerabilities by leveraging expertise in operating systems (Unix, MacOS, Windows) and command-line interfaces (Bash, PowerShell, Command Shell).

Remediation Strategy and Patch Management:

  • Develop and implement strategic remediation for identified vulnerabilities, ensuring timely and effective resolution.
  • Collaborate with IT and Development teams to streamline patch management processes, utilizing tools like Manage Engine Desktop, Kandji, etc. to reduce vulnerability exposure time.
  • Document and maintain records of remediation efforts, including patch applications, affected systems, and results of post-remediation evaluations.

Threat Intelligence and Analysis:

  • Stay abreast of emerging threats and vulnerabilities relevant to the organization’s environment.
  • Utilize threat intelligence feeds and analysis to enhance detection capabilities and improve incident response processes.
  • Collaborate with internal and external stakeholders to share threat intelligence and coordinate response efforts.

Continuous Improvement:

  • Stay informed about emerging security threats, vulnerabilities, and advanced mitigation techniques to continuously improve security posture.
  • Recommend and integrate enhancements to the vulnerability management process, including automation and improved integration with existing security tools.

Compliance and Reporting:

  • Ensure that vulnerability management practices align with established security policies, standards, and regulatory requirements.
  • Prepare detailed reports on the vulnerability landscape, remediation efforts, and residual risks, and present these findings to senior management and relevant stakeholders.
  • Assist in security audits and assessments by providing comprehensive documentation of vulnerability management and remediation activities.
Loading...