Vulnerability Management Specialist - CyberArk

Role Overview

We are seeking an experienced Vulnerability Management Specialist - CyberArk to support and enhance enterprise vulnerability management and privileged access security initiatives within a highly regulated banking environment.

This role will be responsible for identifying, assessing, prioritizing, and remediating security vulnerabilities across critical systems, applications, infrastructure, and privileged access environments. The successful candidate will play a key role in strengthening the organization's cyber resilience through effective vulnerability governance, risk reduction strategies, and CyberArk platform administration.

The ideal candidate will possess strong expertise in Vulnerability Management, Privileged Access Management (PAM), CyberArk, Security Operations, Risk Management, and Compliance, with experience operating in complex enterprise environments.

Key Responsibilities

• Manage the end-to-end vulnerability management lifecycle, including identification, assessment, prioritization, remediation tracking, and reporting.
• Perform vulnerability assessments across servers, databases, applications, cloud platforms, and network infrastructure.
• Administer, maintain, and optimize the CyberArk Privileged Access Management (PAM) platform.
• Manage privileged accounts, credential vaulting, session monitoring, and privileged access governance processes.
• Collaborate with infrastructure, cloud, application, and security teams to drive timely remediation of identified vulnerabilities.
• Define and enforce vulnerability remediation SLAs based on risk severity and business impact.
• Perform regular risk assessments and provide recommendations to strengthen security posture.
• Monitor emerging threats, vulnerabilities, and security advisories to assess organizational impact.
• Develop and maintain vulnerability dashboards, reports, and executive-level metrics.
• Support security audits, compliance reviews, and cyber risk assessments.
• Ensure privileged access controls align with organizational security policies and regulatory requirements.
• Assist with security incident investigations involving privileged accounts or exploited vulnerabilities.
• Support continuous improvement of vulnerability management processes, controls, and reporting capabilities.
• Contribute to security awareness initiatives and vulnerability remediation best practices across technology teams.

Required Skills & Qualifications

• 5+ years of experience in Cybersecurity, Vulnerability Management, Security Operations, or Infrastructure Security.

• Strong expertise in:

  • Vulnerability Management
  • CyberArk PAM Administration
  • Security Risk Management
  • Identity & Access Management
  • Security Operations

• Hands-on experience with CyberArk solutions, including:

  • Privileged Access Security (PAS)
  • Password Vault Web Access (PVWA)
  • Central Policy Manager (CPM)
  • Privileged Session Manager (PSM)
  • Privileged Threat Analytics (PTA)

• Experience working with vulnerability management platforms such as:

  • Tenable Nessus
  • Tenable Security Center
  • Qualys
  • Rapid7 InsightVM

• Strong understanding of:

  • CVSS Scoring
  • Vulnerability Prioritization
  • Security Hardening
  • Risk-Based Remediation

• Experience managing vulnerability remediation across enterprise environments.

• Strong understanding of Windows, Linux, Active Directory, databases, and network technologies.

• Experience with cloud security environments including Azure and AWS.

• Knowledge of security frameworks and standards such as:

  • NIST
  • ISO 27001
  • CIS Controls

• Strong analytical, troubleshooting, and problem-solving skills.

• Excellent stakeholder management and communication skills.

Preferred Skills & Experience

• Banking, financial services, or other regulated industry experience.

• Experience with privileged identity management and Zero Trust security architectures.

• Exposure to Security Operations Centers (SOC) and Security Incident Response processes.

• Experience integrating CyberArk with SIEM, IAM, and ticketing platforms.

• Knowledge of attack techniques, threat intelligence, and cyber threat management.

• Experience with automation and scripting using:

  • PowerShell
  • Python
  • REST APIs

• Familiarity with cloud-native privileged access controls.

• Experience supporting compliance and regulatory audits.

Certifications

Preferred

• CyberArk Defender (formerly Trustee)
• CyberArk Sentry
• CyberArk PAM Administration Certification
• CISSP
• CISM
• CEH
• CompTIA Security+
• GIAC Certifications

Education & Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline.
• Relevant cybersecurity and CyberArk certifications are highly desirable.
• Additional certifications in cloud security, vulnerability management, or governance frameworks would be advantageous.

Halian Group

With over 28 years of experience, we have come to understand that innovation is the only way to provide agile, practical solutions that transform businesses and careers. Our resourcing and smart services help you to realise tomorrow's potential. Discover the amazing things possible when you bring the right people and the right technologies together.

At Halian, we recognise that diversity, equity, and inclusion (DEI) are essential to building high-performing teams for our clients. We are committed to connecting organisations with top talent from all backgrounds, ensuring that every individual feels valued, respected, and empowered to contribute their unique perspectives.

We encourage applications from all qualified candidates, regardless of race, gender, disability, or any other characteristic that makes them unique.

#LI-CC1