Cybersecurity Specialist

3 weeks ago


Foxborough, Massachusetts, United States Thrive Full time
Job Title: Security Engineer, Infosec Operations

About Thrive:

Thrive is a rapidly growing technology solutions provider that specializes in Cloud, Cyber Security, Networking, Disaster Recovery, and Managed Services. Our company culture, engineering talent, customer-centric approach, and focus on next-generation services set us apart from our peers.

Job Overview:

We are seeking a proactive and technically skilled Security Engineer to contribute to our vulnerability management program and participate in autonomous penetration testing initiatives. In this role, you will drive vulnerability assessments, including scanning and penetration testing, while effectively communicating findings and remediation strategies to diverse stakeholders.

Key Responsibilities:

  • Drive vulnerability scanning activities using industry-standard tools.
  • Assist with autonomous penetration testing initiatives.
  • Analyze scanning outputs and make informed decisions on vulnerability severity and prioritization.
  • Collaborate with internal support teams and clients to clearly articulate vulnerability remediation needs, tailoring explanations to both technical and non-technical stakeholders.
  • Distinguish between project-level remediation and issues covered by support offerings.
  • Open and track assignment tickets to ensure timely resolution.
  • Manage and configure security awareness training and phishing campaigns for our customers, proactively identifying areas for improvement and innovation to drive continuous program enhancement.
  • Customize reports to align with client reporting needs and requirements.
  • Creation and ongoing upkeep of materials documenting our security processes, procedures, and technologies, along with the generation of automated reports for relevant stakeholders.
  • Stay informed about the latest security events and techniques to proactively address emerging threats.
  • Contribute to the creation and updating of client security presentations.
  • Other duties as required.

Qualifications:

  • Bachelor's degree in Cybersecurity, Computer Science, or a related field is preferred.
  • Relevant cybersecurity certifications (e.g., CISSP, OSCP, Security+, GIAC, and Azure certifications) are a plus.
  • Proven experience in vulnerability management, including scanning, analysis, and remediation.
  • Hands-on experience with systems and network/firewall administration.
  • Experience with Active Directory administration.
  • Experience with SIEM and EDR technologies.
  • Heavy experience with TCP/IP network protocols, application layer protocols (e.g., HTTP, SMTP, DNS, etc.).
  • Ability to analyze a large amount of data from various sources and use this information to solve complex problems and make good decisions.
  • Knowledge of risk assessment tools, technologies, and methods.
  • Demonstrated understanding of cybersecurity threats and incident response procedures.
  • Proficiency in developing and automating client-facing reports.
  • Excellent written and verbal communication skills for both technical and non-technical audiences.
  • Must be able to work effectively in a team environment and collaborate within the team and other stakeholders.
  • Demonstrate comprehension of good security practices.
  • Knowledge of programming languages.
  • Passion for cybersecurity and continuous learning.

Why Thrive:

At Thrive, we offer a work-hard, play-hard environment that fosters career growth and development. We're committed to empowering our employees with the guidance, training, and experience necessary to build a lucrative career in cybersecurity.



  • Foxborough, Massachusetts, United States Thrive Full time

    Job Title: Incident Response AnalystThrive is seeking a highly skilled Incident Response Analyst to join our Security Operations Center (SOC) team. As an Incident Response Analyst, you will play a critical role in monitoring and improving our customers' security posture, preventing, detecting, analyzing, and responding to cybersecurity incidents.Key...