Security Consultant Application and Vulnerabili...

@ Google

Minimum Qualifications

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related technical field, or equivalent practical experience required. Minimum 5 years of experience in delivering cyber outcomes, identifying mission risks, and devising solutions.

Experience in evaluating infrastructure and web application security vulnerabilities, assessing risk and impact, developing mitigation strategies, and implementing remediation is essential. Familiarity with vulnerability management and web application security assessment tools such as Nessus, Rapid7, InsightAppSec, Burp Suite, and OWASP ZAP is required.

Preferred Qualifications

Experience in implementing industry-leading practices around cyber risks and cloud security, cloud governance including CNAPP, and familiarity with cloud technologies like containers, functions, Kubernetes, and app services.

Proficiency in programming and scripting frameworks such as Python and PowerShell for automating vulnerability tasks, as well as strong skills with spreadsheets for data analysis.

About The Job

In this role as a Security Consultant Application and Vulnerability Management, you will support the Vulnerability Management program for a large municipality. You will manage threats posed by software and infrastructure vulnerabilities focusing on risk prioritization of remediation. Responsibilities include researching, analyzing, and briefing management with reports on CVEs, CVSS ratings, vector strings, and various attack vectors.

You will also design, architect, and build scanning infrastructure and tools, as well as conduct and manage scans across systems and networks. Technical briefings and written reports will be shared with team members and agency stakeholders.

Responsibilities

• Conduct analysis to assess vulnerability impact and risk based on industry research.
• Present technical briefings and written vulnerability reports including risk assessments and mitigation plans.
• Apply cybersecurity standards and best practices to develop remediation plans.
• Collaborate with agencies to advocate for program enhancements and risk reduction.
• Manage vulnerability scanning tool configurations, performance, and scan analyses.

Salary & Benefits

The US base salary range for this full-time position is $132,000-$194,000 plus bonus, equity, and benefits. Compensation is based on work location, experience, education, and job-related skills.

Equal Opportunity Employer

Google is proud to be an equal opportunity workplace. We value diversity and encourage candidates from all backgrounds to apply. If you require accommodations, please complete our Accommodations for Applicants form.

Key skills/competency

• Cybersecurity
• Vulnerability Management
• Risk Assessment
• Application Security
• Cloud Security
• Nessus
• Rapid7
• OWASP
• Python
• Project Management