Vulnerability Management Specialist
Core
Identify, analyze, prioritize, and mitigate vulnerabilities in applications, dependencies, and software components while integrating security best practices into the SDLC.
Role type
Vulnerability Management Specialist (AppSec/DevSecOps)
Builds
Secure software delivery pipelines and dependency ecosystems
Domain
Cybersecurity / Software Development
Required skills
SAST/DAST/SCA tools, dependency management (npm/Maven/pip/NuGet/Go), Python/Bash scripting, CI/CD security integration, container orchestration (OpenShift/Docker), OWASP Top 10/CWE, CVSS scoring, Git/GitHub
Preferred skills
Cloud security (AWS/Azure/GCP), container security, vulnerability management platforms (Tenable/Qualys/Rapid7), compliance frameworks (ISO 27001/NIST/GDPR/SOC 2), security certifications (CISSP/OSCP/CEH/CCSP)
Technologies
SonarQube, Checkmarx, OWASP ZAP, Dependabot, Python, Bash, OpenShift, Docker, npm, Maven, pip, NuGet, Go Modules, Git, GitHub, Tenable, Qualys, Rapid7
Responsibilities
Scan and analyze applications and dependencies for vulnerabilities, prioritize risks using CVSS, collaborate with DevOps and development teams, automate security processes in CI/CD pipelines, manage security in containerized environments
Seniority
Mid-level, hands-on IC