Vulnerability Analyst
Core
Conduct vulnerability assessments, analyze scan results, and drive remediation across on-premises, cloud, network, endpoint, and application environments to reduce cyber risk.
Role type
Senior IC vulnerability analyst
Builds
Vulnerability management program and risk reduction
Domain
Cybersecurity / Vulnerability Management
Required skills
Vulnerability management frameworks, CVSS scoring, risk-based prioritization, remediation workflows, enterprise vulnerability management platforms, operating systems, networking concepts, cloud technologies, security architectures, log analysis, security event investigation, threat intelligence, asset discovery, patching coordination
Preferred skills
AWS, Azure, GCP, threat intelligence platforms, scripting/automation (PowerShell, Python, Bash), asset management/CMDB platforms, NIST, CIS Controls, ISO 27001, PCI-DSS
Technologies
Tenable, Qualys, Wiz, SentinelOne, Tanium, Kenna, AWS, Azure, GCP, Bash, PowerShell, Python
Responsibilities
Conduct vulnerability assessments across diverse environments; analyze and validate scan results to assess business risk; monitor emerging threats and advisories; collaborate with teams to drive timely remediation; track remediation and report on trends, risk reduction, and SLAs; identify and decommission end-of-life systems; configure and optimize scanning platforms; analyze logs and threat data for exposures; support exception reviews and risk acceptance; assist incident response with vulnerability context; develop management documentation and runbooks; lead cross-functional remediation meetings to drive findings to closure.
