Feel like I'm sinking

I work as a cyber security engineer for a large company, we have hundreds of sites and tens of thousands of assets, with MASSIVE legacy debt. Recently I’ve been taking over some of the responsibility for vulnerability management. Our company are a very small Skelton staff team and outsource practically everything including soc and vm. However, the mssp we outsource for vm is useless. We still have eternalblue/meltdown/log4j/proxyshell/pritnightmare vulnerabilities across the estate and it seems that over a period of …

assets back cyber cyber security cybersecurity debt deployment engineer eternalblue large legacy log4j management meltdown mssp party patch period proxyshell responsibility security security engineer soc staff team third third-party vulnerabilities vulnerability vulnerability management work