SOC + VM (vulnerability mgmt.) - L3

Inabia Software & Consulting - Phoenix, AZ

Full-time - Mid Level

Phoenix, AZ

Professional, Scientific, and Technical Services

About the position

The SOC + VM (Vulnerability Management) L3 role is focused on providing technical leadership in incident resolution and vulnerability management within a Security Operations Center (SOC). The position requires hands-on experience with various vulnerability assessment tools and a strong understanding of security best practices, threat analysis, and incident response. The individual will coordinate SOC efforts, drive automation initiatives, and ensure compliance with operational objectives while communicating effectively with both technical and non-technical stakeholders.

Responsibilities

• Provide technical leadership for the delivery team, responsible for L3 incident resolution.
• Hands-on experience in 2 or more of the Vulnerability Assessment tools and Vulnerability Lifecycle management.
• Coordinate SOC efforts across multiple business units during response.
• Contribute towards Technology Transformation and drive automation initiatives.
• Develop, implement, and execute standard procedures for SIEM/Log Management platforms.
• Perform hunting exercises using threat intelligence and anomalous log data analysis.
• Conduct proof-of-concept reviews for new security products.
• Prepare reports and summaries for internal and client-facing communication.
• Ensure compliance to SLA and process adherence for operational objectives.
• Work/guide on scripting like Python, Perl, Bash, and/or Shell scripting.
• Evaluate Email Security solutions for policies like SPF and DKIM.
• Author postmortem reports following an intrusion or red team engagement.
• Advocate protection and mitigation strategies based on lessons learned exercises.
• Collaborate with stakeholders for remediation and provide updates to customers.

Requirements

• Minimum 8+ years of experience in cybersecurity and vulnerability management.
• Hands-on experience with Qualys, Tenable, Rapid7, and MS Defender for VM and policy compliance scanning.
• Exposure to Mitre framework and experience with EDR platforms.
• Experience in threat analysis, threat hunting, and incident response.
• Strong knowledge in handling vulnerability assessments on cloud-based architecture using tools like Prisma Cloud and Wiz.io.
• Experience in defining and implementing a vulnerability management framework based on enterprise security.

Nice-to-haves

• Knowledge of CSPM and ASM tools.
• Experience with SNOW and risk-based vulnerability assessment integration platforms.

Benefits

• Relocation assistance available.