About Us

Since 1989, SHI International Corp. has helped organizations change the world through technology. We’ve grown every year since, and today we’re proud to be a $16 billion global provider of IT solutions and services.

 

Over 17,000 organizations worldwide rely on SHI’s concierge approach to help them solve what’s next. But the heartbeat of SHI is our employees – all 7,000 of them. If you join our team, you’ll enjoy:

• Our commitment to diversity, as the largest minority- and woman-owned enterprise in the U.S.

• Continuous professional growth and leadership opportunities.

• Health, wellness, and financial benefits to offer peace of mind to you and your family.

• World-class facilities and the technology you need to thrive – in our offices or yours. 

Job Summary

The Associate Security Consultant - Vulnerability Management is a critical role within Stratascale’s Adversarial Operations Group, assigned to the Vulnerability Management team. This individual will assist in leading and supporting the development and delivery of a diverse range of exposure management consulting, Vulnerability Management as a Service (VMaaS), and operational service programs to a portfolio of our clients.

This position prefers candidates to be located on the West Coast.

Role Description​​

• Conduct day-to-day VMaaS activities, including vulnerability scanning, asset discovery, scan policy configuration, and reporting.

• Independently conduct Attack Surface Control (ASC) engagements for a variety of clients, including the use of automated tools and manual micro-penetration testing.

• With guidance from more senior consultants, monitor automated penetration testing tooling to identify and validate security weaknesses.

• Perform validation of vulnerability findings to eliminate false positives and determine actual risk.

• Collaborate with the penetration testing team to conduct further deep-dive testing as needed based on vulnerability discoveries.

• Consult and document attack surface, threats, and vulnerability improvements based on the team’s overall assessment of the client’s environment.

• Perform assessment and threat modeling against industry best practices to identify control weaknesses and assess the effectiveness of existing controls.

• Perform root cause analysis on identified vulnerabilities and attack surface weaknesses to determine technical solutions to be presented to client along with recommendations for remediations.

• With guidance from more senior security consultants, collaborate with the client’s security teams to understand mitigation or resolutions for findings discovered by analysts.

• Review Stratascale Cyber Threat Intelligence (CTI)-provided threat intelligence for specific threat vectors that align with the client's industry or potentially impact the client by using attack path modeling.

• Assist in defining, measuring, and quantifying business risk and vulnerability impacts to clients and their stakeholders.

• With guidance from more senior security consultants, provide technical support on remediation, cloud security, governance, compliance, and core infrastructure systems.

• With guidance from more senior security consultants, assist customers with strategies, use of platforms, technical and compliance analysis, and implementing automation.

• Execute consulting projects by creating and completing deliverables, ensuring client needs and practice obligations are met.

• Participate in customer and internal meetings as required, providing technical guidance and facilitating discussions.

• Stay educated on new product technologies, industry trends, and emerging capabilities within the practice.

Behaviors and Competencies

• Communication: Can effectively communicate technical ideas and information to diverse audiences and collaborate with team members in client communications.

• Relationship Building: Can contribute to team initiatives, collaborate with diverse groups, and support effective relationship management.

• Self-Motivation: Can take ownership of personal and professional initiatives, collaborate with others when necessary, and drive results through self-motivation.

• Negotiation: