IT Threat & Vulnerability Identification Consultant

• IT Security Consultant (Threat Identification)

CVSS

CVE & NVD

Vulnerability Assessment & Remediation

Powershell

Cybersecurity Fundamentals

SC-900

ISO 27001

NIST

CompTIA CySA+

OWASP

AZ-500

CIS Controls

CompTIA Security+

Stawka:

120 PLN / h

Opis projektu:

Our Client is looking for a Cyber Security Consultant with a solid understanding of vulnerability management and general cybersecurity concepts. The ideal candidate should possess practical knowledge of vulnerability assessment processes, common security terminology, and basic IT infrastructure components.

• Understanding of cybersecurity principles and common threat landscape.
• Ability to explain what a security vulnerability is and understand its business and technical impact.
• Familiarity with vulnerability severity classification and prioritization methodologies.
• Knowledge of CVSS (Common Vulnerability Scoring System) and how vulnerability scores are used for risk assessment.
• Understanding of vulnerability remediation processes and risk reduction practices.
• Experience with vulnerability scanning and assessment tools such as Qualys, Tenable Nessus, Rapid7, OpenVAS, or similar solutions.
• Understanding of how vulnerability scanners work, their capabilities, limitations, and typical use cases.
• Ability to identify, investigate, and research vulnerabilities using public sources such as CVE databases, NVD, vendor advisories, and security bulletins.
• Knowledge of vulnerability prioritization based on severity, exploitability, asset criticality, and business impact.
• Good understanding of Microsoft Windows and Linux operating systems.
• Knowledge of common Linux commands (e.g., grep, find, ps, netstat/ss, chmod, chown, journalctl, systemctl).
• Basic PowerShell knowledge, including execution of administrative and information-gathering commands.
• Ability to analyze logs and collect basic troubleshooting information from operating systems.
• Basic understanding of security risks associated with AI systems, AI agents, Large Language Models (LLMs), and AI-enabled applications.
• Awareness of AI-related vulnerabilities, including prompt injection, data leakage, excessive permissions, insecure integrations, and risks associated with autonomous AI agents.
• General understanding of computer networking concepts, including TCP/IP, DNS, DHCP, routing, firewalls, proxies, and network segmentation.
• Ability to troubleshoot basic network connectivity and communication issues.
• Familiarity with system administration fundamentals and security best practices.
• Ability to navigate and perform basic administrative tasks on both platforms.