Vulnerability Management

Understands basic Vulnerability Management concepts. Follows security guidelines. Recognizes common vulnerabilities in code.

Works with vulnerability management: creates and tracks vulnerability reports, understands CVSS scoring, monitors remediation status. Uses Jira/DefectDojo.

Understands basic Vulnerability Management concepts. Follows security guidelines. Recognizes common code vulnerabilities.

Discovers and validates vulnerabilities through penetration testing and exploitation. Assesses vulnerability severity using CVSS scoring and real-world exploitability analysis. Uses vulnerability management platforms to track findings and verify remediation effectiveness across tested systems.

Manages vulnerability lifecycle: triage, prioritization (CVSS + context), SLA tracking, verification of fixes. Configures DefectDojo/vulnerability tracker. Generates reports.

Triages and prioritizes vulnerabilities based on risk scoring, asset criticality, and threat context. Monitors vulnerability feeds and correlates with organizational exposure. Uses vulnerability management platforms to generate remediation reports and track SLA compliance across teams.

Designs vulnerability assessment methodologies combining automated scanning with manual exploitation. Conducts threat modeling to prioritize vulnerability discovery in high-risk areas. Integrates penetration testing results into vulnerability management workflows. Mentors team on vulnerability validation techniques.

Designs vulnerability management program: risk-based prioritization (EPSS, threat intelligence), automated scanning pipeline, metrics (mean time to remediate). Integrates with SIEM.

Designs comprehensive vulnerability management programs with risk-based prioritization frameworks. Conducts threat modeling to map vulnerability exposure across organizational assets. Integrates vulnerability data into security operations for proactive risk mitigation. Mentors analysts on advanced triage and remediation tracking.

Defines vulnerability discovery strategy integrating penetration testing with continuous scanning programs. Establishes severity classification policies and validation standards for reported vulnerabilities. Coordinates red team assessments feeding into vulnerability management processes. Trains pentest engineers on systematic vulnerability analysis.

Defines vulnerability management standards: SLA per severity, triage process, escalation policy. Coordinates vulnerability response. Implements vulnerability metrics and reporting.

Defines vulnerability management program strategy with risk-based metrics and executive reporting. Establishes vulnerability triage policies, remediation SLAs, and exception management processes. Coordinates organization-wide vulnerability response during zero-day events. Trains security analysts on vulnerability intelligence and prioritization.

Defines enterprise offensive security strategy feeding vulnerability management across all systems and platforms. Shapes vulnerability assessment architecture combining internal red team and external testing at scale. Coordinates responsible disclosure programs with vendors and CERTs. Represents the organization in vulnerability research community.

Designs organizational vulnerability management: unified vulnerability platform, risk-based prioritization, automated remediation. Defines vulnerability governance and continuous improvement.

Defines enterprise vulnerability governance strategy with board-level risk reporting and compliance alignment. Shapes vulnerability intelligence architecture integrating internal and external threat data at scale. Coordinates with regulators and industry consortiums on vulnerability management frameworks. Drives organizational resilience through proactive vulnerability programs.