Vulnerability Management Analyst

Job Summary

We are seeking a detail-oriented Vulnerability Management Analyst to join our Cybersecurity team. The successful candidate will be responsible for identifying, assessing, prioritizing, and tracking security vulnerabilities across enterprise infrastructure, cloud environments, applications, and endpoints.

This role works closely with Security Operations, Infrastructure, Cloud Engineering, Application Development, and Risk Management teams to reduce cyber risk through proactive vulnerability management and remediation efforts.

Key Responsibilities

• Perform vulnerability assessments across networks, servers, cloud environments, applications, databases, and endpoints.
• Analyze vulnerability scan results and determine business impact and risk severity.
• Prioritize vulnerabilities based on CVSS scores, exploitability, threat intelligence, and organizational risk.
• Coordinate remediation efforts with IT, Infrastructure, Cloud, and Application teams.
• Track remediation activities and verify successful resolution of vulnerabilities.
• Conduct vulnerability trend analysis and reporting.
• Monitor emerging threats, vulnerabilities, and security advisories.
• Support patch management and remediation programs.
• Maintain vulnerability management policies, procedures, and documentation.
• Assist with cybersecurity audits, risk assessments, and compliance initiatives.
• Generate executive and operational vulnerability reports.
• Improve vulnerability management processes and automation capabilities.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Security, or a related field.
• 3–5 years of experience in Vulnerability Management, Security Operations, Cyber Risk, or Information Security.
• Experience conducting vulnerability assessments in enterprise environments.
• Knowledge of security frameworks and industry best practices.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.

Preferred Qualifications

• Experience with cloud security environments (AWS, Azure, or Google Cloud).
• Understanding of vulnerability scoring methodologies such as CVSS.
• Experience supporting compliance programs and security audits.
• Industry certifications such as:
  • CompTIA Security+
  • Certified Ethical Hacker (CEH)
  • GIAC Vulnerability Assessment (GVA)
  • CISSP
  • GSEC

Technical Skills

• Vulnerability Management
• Risk Assessment
• Patch Management
• Threat Intelligence
• Network Security
• Operating System Security
• Cloud Security
• Security Reporting
• Vulnerability Prioritization
• Security Compliance
• Security Operations

Tools & Technologies

• Tenable Nessus
• Tenable.io
• Qualys VMDR
• Rapid7 InsightVM
• Microsoft Defender Vulnerability Management
• Splunk
• Microsoft Sentinel
• Jira
• ServiceNow
• CrowdStrike Falcon
• AWS Security Hub
• Azure Security Center

Preferred Knowledge Areas

• Common Vulnerabilities and Exposures (CVE)
• Common Vulnerability Scoring System (CVSS)
• MITRE ATT&CK Framework
• NIST Cybersecurity Framework
• CIS Controls
• OWASP Top 10
• Patch and Configuration Management
• Security Risk Management

Benefits

• Competitive salary and annual performance bonus
• Medical, dental, and vision insurance
• 401(k) with company matching
• Paid time off and holidays
• Remote and hybrid work opportunities
• Professional certification reimbursement
• Career growth and training opportunities