Vulnerability and Configuration Consultant

Job summary

Build and expand the configuration management and compliance program to cover on-premises network devices, using Qualys to assess configurations against customized CIS-based security baselines. Document hardening standards and measurable compliance requirements, and collaborate with Network Infrastructure teams on implementation and remediation.

Job details

Required Skills & Experience - 5+ years of experience in configuration management, vulnerability management, security compliance, or infrastructure hardening. - Hands-on experience with Qualys, specifically Qualys Policy Compliance/Policy Audit (PA). - Strong understanding of CIS Benchmarks and experience using CIS standards to develop and customize security configuration baselines for an organization's environment. - Experience developing baseline playbooks and measurable compliance standards that can be implemented by infrastructure/network teams. - Strong initiative and ability to take ownership of a program. - Excellent collaboration and communication skills, with the ability to work closely with Network Infrastructure teams responsible for implementing remediation and hardening changes. Nice to Have Skills & Experience - Previous experience specifically creating security/configuration baselines for network devices. Job Description Insight Global is looking for a Vulnerability and Configuration Consultant to join one of our largest banking clients on a 12-month remote contract to start. The successful candidate will be responsible for the following activities: - Help create and implement an expanded configuration management program, building on the organization's existing vulnerability management capabilities. - Extend configuration management and compliance practices beyond traditional server environments to include on-premises network devices and assets. - Use Qualys to establish compliance checks and measure network-device configurations against defined security standards. - Develop configuration and hardening baselines for network assets using CIS Benchmarks as the starting point, then customize those standards to align with the organization's environment. - Build the organization's baseline playbook, documenting the configuration and hardening standards that network infrastructure teams will follow. - Partner closely with the Network Infrastructure team to understand technical requirements, tooling constraints, and implementation considerations. - Define measurable compliance standards that allow the organization to assess network devices against established baselines. - Provide the standards, baselines, and compliance framework while working with the appropriate infrastructure teams to implement the required hardening changes. *We may use artificial intelligence tools to assist with the screening, assessment, or selection of potential applicants for this position. *Pay range for this role is between $67/hr - 75/hr CAD. *This role is an existing vacancy.

What you’ll do

Build and expand the configuration management and compliance program to cover on-premises network devices, using Qualys to assess configurations against customized CIS-based security baselines. Document hardening standards and measurable compliance requirements, and collaborate with Network Infrastructure teams on implementation and remediation.

Requirements

Requires 5+ years of experience in configuration management, vulnerability management, security compliance, or infrastructure hardening, along with hands-on Qualys Policy Compliance/Policy Audit experience and strong knowledge of CIS Benchmarks. Candidates should be able to develop baselines and playbooks, take ownership, and communicate effectively with infrastructure teams; network-device baseline experience is preferred.

Listed skills

• Technical · Preferred
• assessment · Preferred
• Organization · Preferred
• Collaboration · Preferred
• Teams · Preferred
• Compliance · Preferred
• management · Preferred
• Communication · Preferred
• Audit · Preferred
• Communication Skills · Preferred
• Consultant · Preferred
• Configuration · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Configuration Management
• Vulnerability Management
• Security Compliance
• Infrastructure Hardening
• Qualys Policy Compliance
• Qualys Policy Audit
• CIS Benchmarks
• Security Configuration Baselines
• Baseline Playbooks
• Network Device Configuration
• Compliance Measurement
• Network Infrastructure Collaboration
• Remediation Planning
• Program Ownership

Job areas

• Technology
• Security & Safety
• Consulting
• Finance & Accounting

More jobs from Insight Global