Atos is seeking a professional for Vulnerability Management Operations.
Atos is the Atos Group brand dedicated to AI-powered, secure, end-to-end digital services. Atos designs, develops, and operates critical digital environments that drive performance, resilience, and sovereignty for public and private organizations worldwide.
Responsibilities
- Manage and operate Rapid7 InsightVM for vulnerability scanning, reporting, and risk prioritization.
- Perform regular vulnerability scans across infrastructure, servers, and network devices.
- Analyze scan results, eliminate false positives, and prioritize vulnerabilities based on CVSS, asset criticality, and threat context.
- Drive the end-to-end vulnerability management lifecycle.
- Work with infrastructure, application, and business teams to ensure timely remediation and risk closure.
- Track remediation progress and conduct periodic stakeholder follow-ups.
- Generate management dashboards and reports using Rapid7 and other reporting tools.
- Conduct firewall rule reviews and ensure adherence to network security best practices.
- Provide security risk advisory to business and application teams.
- Support application and system risk assessments and recommend mitigation strategies.
- Participate in security architecture reviews for new server and VLAN setups.
- Contribute to security policy, standards, and guideline development.
- Ensure compliance with regulatory and industry standards.
- Support security awareness initiatives across the organization.
Required Skills & Qualifications
- Hands-on experience with Rapid7 InsightVM.
- Strong understanding of vulnerability management processes and tools.
- Knowledge of CVSS scoring, risk-based prioritization, and remediation tracking.
- Good understanding of network architecture and firewall rule management.
- Familiarity with cybersecurity and network security principles.
- Working knowledge of Microsoft and Red Hat operating systems and databases.
- Understanding of secure SDLC and application security basics.
- Knowledge of industry standards such as OWASP, NIST, and SANS.
- Experience in risk assessment, compliance, and security advisory.
- Strong communication, stakeholder management, and reporting skills.
Preferred Certifications and Experience
- Certifications such as CEH, Security+, or equivalent are preferred but not mandatory.
- Experience in a banking or financial services environment is preferred.
Atos is committed to diversity and inclusion and supports a fair work environment.