Cyber Security Consultant - Threat Identification & Prioritization f m

We are looking for a Cyber Security Consultant to join a team responsible for identifying, assessing, and prioritizing security vulnerabilities. The ideal candidate has hands-on knowledge of Vulnerability Management, cybersecurity fundamentals, and IT infrastructure. Responsibilities Identify, investigate, and assess security vulnerabilities. Analyze vulnerabilities using sources such as CVE databases, NVD, vendor advisories, and security bulletins. Prioritize vulnerabilities based on CVSS scores, exploitability, asset criticality, and business impact. Support Vulnerability Management processes, including remediation and risk reduction activities. Work with vulnerability scanning and assessment tools. Analyze scan results and understand the capabilities and limitations of vulnerability scanning solutions. Analyze system logs and perform basic troubleshooting of operating systems and network connectivity. Support the identification of security risks related to AI systems, LLMs, and AI agents. Requirements Solid understanding of cybersecurity principles and the common threat landscape. Practical knowledge of Vulnerability Management and vulnerability assessment processes. Good understanding of CVSS (Common Vulnerability Scoring System) and vulnerability severity classification and prioritization. Experience with vulnerability scanning tools such as Qualys, Tenable Nessus, Rapid7, OpenVAS, or similar solutions. Ability to research and investigate vulnerabilities using CVE, NVD, vendor advisories, and security bulletins. Understanding of vulnerability remediation processes and risk reduction practices. Good knowledge of networking fundamentals, including TCP/IP, DNS, DHCP, routing, firewalls, proxies, and network segmentation. Good understanding of Microsoft Windows and Linux, including system administration fundamentals and security best practices. Knowledge of common Linux commands, including grep, find, ps, netstat/ss, chmod, chown, journalctl, and systemctl. Basic knowledge of PowerShell, including administrative and information-gathering commands. Ability to analyze logs and collect information required for basic troubleshooting. Nice to Have Basic understanding of security risks related to AI systems, AI agents, Large Language Models (LLMs), and AI-enabled applications. Awareness of AI-related vulnerabilities such as prompt injection, data leakage, excessive permissions, insecure integrations, and autonomous AI agent risks. Ability to assess vulnerabilities from both a technical and business impact perspective.