Devoteam Cyber Trust |Vulnerability Manager | Fintech Sector at Devoteam

About the Role

The Vulnerability Manager will join the Security team and will be responsible for supporting the management of the vulnerability lifecycle, with a particular focus on the operation and improvement of the scanning process.

Key Responsibilities

• →Perform vulnerability scans using Nessus, including preparing network files to be scanned and validating scan status.
• →Diagnose and resolve issues when scans fail, including network diagnostics and diagnosing issues in Nessus and the Operating System.
• →Analyze and improve Python scripts responsible for scanning processes.
• →Develop, modify, and maintain scripts to automate vulnerability management tasks using Python, Bash, and SQL.
• →Participate in converting Python 2 scripts to Python 3.
• →Retrieve and correlate asset lists with scan database information using SQL.
• →Process, correlate, and prepare scan results using tools such as Regex, Excel (Pivot Tables), and Bash.
• →Support automation for folder creation in Nessus and asset list processing.
• →Analyze scan results and improve scripts to prevent known false positives.
• →Use Burp (or develop alternative Python scripts) to automate batch closure of resolved vulnerabilities.
• →Assess vulnerabilities to determine if they are false positives.
• →Perform basic security validations to confirm vulnerability resolution.
• →Apply basic risk management knowledge to evaluate and propose vulnerability parking timeframes.
• →Map networks and schedule scans, considering average execution times and restrictions.
• →Reinstall the operating system and configure Nessus on dedicated laptops.
• →Correlate new CMDB assets with the networks configured in planned scans using SQL, Bash, and Python.