Security Vulnerability Analyst
Core
Assess and maintain vulnerability reporting efficacy, prioritize remediation efforts, and coordinate fixes across infrastructure, application, and cloud teams.
Role type
Mid-level security vulnerability analyst
Builds
Vulnerability management processes, risk reports, and dashboards
Domain
Cybersecurity / Vulnerability Management
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure | physical/clinical work
Required skills
CVSS scoring, EPSS, risk prioritization, vulnerability management tools (Tenable Nessus, Qualys, Rapid7, Microsoft Defender, Wiz.IO, Axonius, Panaseer), patch management, compliance frameworks (PCI DSS, ISO 27001, SOC 2, NIST, HIPAA, CIS), incident response analysis, technical data analysis
Preferred skills
PowerShell, Python, Bash scripting, SIEM, EDR, SOAR platforms, Agile/DevSecOps, threat intelligence integration
Technologies
Tenable Nessus, Qualys VMDR, Rapid7 InsightVM, Microsoft Defender Vulnerability Management, Wiz.IO, Axonius, Panaseer, AWS, Azure, GCP, Windows, Linux, macOS
Responsibilities
Coordinate vulnerability remediation and verify fixes, produce reports and dashboards on vulnerability trends and risk metrics, assist with vulnerability exception reviews and risk acceptance documentation, monitor emerging vulnerabilities and zero-day threats, participate in incident response by providing analysis and recommendations, advise on remediation feasibility within SLAs
Seniority
Mid-level, hands-on IC