Vulnerability Management Assessment SME (Hands-On) - Remote - GA - W2/own corp
Vulnerability Management Assessment SME (Hands-On) Contract: 2 months Location: Atlanta, GA - Remote Rate: 55/hr C2C Summary: We are looking for a hands-on, technical Vulnerability Management SME who has personally delivered enterprise VM assessments. This is not a governance-only or project-management role. The consultant will work directly in VM tools, analyze scan data, and deliver a risk-based assessment and roadmap within 8Weeks. Mandatory Requirements: At least 2 end-to-end vulnerability management program assessments personally delivered for enterprise clients, with the ability to explain the scope, methodology, findings, and outcome of each. 7+ years of hands-on technical vulnerability management experience. Deep hands-on administration of at least one of Tenable (SC/IO), Qualys VMDR, Rapid7 InsightVM, or Microsoft Defender VM, including scan configuration, credentials, policies, agents, tuning, and reporting. Can validate findings technically and identify false positives, scan coverage gaps, and authentication gaps. Strong technical knowledge of Windows, Linux, network devices, and cloud (AWS/Azure). Has built risk-based prioritization models using CVSS, EPSS, CISA KEV, and asset criticality. Responsibilities Review scan configurations, coverage, credentialed scan success rates, and asset inventory accuracydirectly in the tools. Analyze vulnerability data: aging, recurrence, SLA compliance, and remediation trends. Assess program maturity against NIST CSF and CIS Controls. Design the prioritization model, remediation SLA matrix, and exception process. Deliver the technical assessment report, a 12-month roadmap, and an executive readout. Preferred: Scripting in Python or PowerShell for scan data analysis or API automation Experience integrating with ServiceNow or SCCM/Intune Certifications: OSCP, GIAC (GEVA/GPEN), CISSP, or Tenable/Qualys certifications Local to the Atlanta area Regards, Vinay Ram [email protected] 770-838-3839 (Direct) Suwanee, GA - 30024 www.cysphere.net An MBE & eVerify Company Connect with me for exciting career opportunities: https://www.linkedin.com/in/vinay-kumar-76b4b2104/ Open Jobs (For Recruiters): https://www.dice.com/company/91081414