About the role
hiring for a large financial services client. You will build the automation behind a vulnerability assessment team in cyber threat intelligence. The goal is simple. Assess more vulnerabilities, faster, without adding people at the same rate that volume grows.
What you will do
- Automatically pull in vulnerability disclosures and vendor advisories
- Match them to the organization's technology, including products, versions, configurations, and internet exposure
- Apply the team's risk scoring method consistently
- Flag vulnerabilities that need an emergency response
- Generate summaries and leadership reports
What you bring
- 8+ years in engineering, with 3+ years in security automation
- Strong Python (or similar) and API integration skills
- Experience ingesting CVE and NVD data, vendor advisories, and CISA KEV feeds, and mapping them to an asset inventory or CMDB
- Risk scoring logic, including CVSS, EPSS, exposure, and asset criticality
- Experience generating reports and summaries
Nice to have
- SOAR tools such as Cortex XSOAR, Splunk SOAR, Tines, or Torq
- LLM or GenAI assisted summarization
- ServiceNow integrations
- Attack surface management
- Cloud asset context in AWS or Azure
Preferred certifications: Optional: GCTI, other GIAC certifications, and cloud security certifications
Technology and frameworks
Python, CVE and NVD data, vendor advisories, CISA KEV feeds, asset inventory or CMDB, SOAR (Cortex XSOAR, Splunk SOAR, Tines, Torq), ServiceNow, and AWS or Azure asset context.
Rate:
Not specified
Location:
Remote
IR35 Status:
Not specified
Remote Status:
Remote
Industry:
Cybersecurity
Seniority Level:
Senior