Perform regular vulnerability scans on servers, workstations, applications, and network devices using tools such as Qualys, Tenable Nessus, Rapid7, etc.
Analyze scan results, validate findings, assess potential impact, and prioritize vulnerabilities based on severity and exploitability (e.g., CVSS, EPSS, CISA KEV).
Work with cross-functional teams (IT, Development, Cloud, etc.) to coordinate timely remediation or mitigation of identified vulnerabilities.
Track and report on remediation progress, SLA adherence, and risk status to stakeholders and leadership.
Research emerging vulnerabilities, zero-day threats, and relevant vendor advisories (e.g., Microsoft Patch Tuesday, CVE announcements).
