Vulnerability Management Analyst

Weareproudtobeconsistentlyrecognizedasoneoftheworld’sbestplacestowork.WearecurrentlythetoprankedconsultingfirmonGlassdoor’sBestPlacestoWorklistandhaveearnedthe#1overallspotarecordseventimes.Extraordinaryteamsareattheheartofourbusinessstrategy,butthesedon’thappenbychance.Theyrequireintentionalfocusonbringingtogetherabroadsetofbackgrounds,cultures,experiences,perspectives,andskillsinasupportiveandinclusiveworkenvironment.Wehirepeoplewithexceptionaltalentandcreateanenvironmentinwhicheveryindividualcanthriveprofessionallyandpersonally.

WHO YOU’LL WORK WITH

You’lljoinourCyberOperationsteamwithinBain’sTechnologyServicesGroup(TSG),workingcloselywithIT,infrastructure,cloud,andengineeringteamsacrossalargeanddiverseglobalenvironment.

WHERE YOU’LL FIT WITHIN THE TEAM

You’llworkhands-onwithourcoretoolingstack,includingQualysVulnerabilityManagement,DetectionandResponse(VMDR)forhostandapplicationscanning,Wizforcloudandcontainerposture,andTaniumforendpointvisibilityandremediation.

You’llalsoleadaContinuousThreatExposureManagement(CTEM)programthatturnsfindingsfromthesetoolsintoasingle,risk-prioritizedviewofrealexposure.WorkingcloselywithIT,infrastructure,cloud,andengineeringteams,you’llsetremediationstandards,driveaccountability,guidejunioranalysts,andbriefleadershiponexposureandrisktrends.

WHAT YOU’LL DO

Operateandadministerourcoreexposuremanagementtools,QualysVMDR,Wiz,andTanium,includingdeployment,configuration,tuning,integration,andscanner,agent,andsensorhealth.

Establishandenforceremediationservice-levelagreements(SLAs),partneringwithIT,infrastructure,cloud,andengineeringteamstodriveaccountabilityandresolvehigh-riskexposures.

Collaboratewiththreatintelligenceteamstoconnectemergingthreatswithinternalvulnerabilitiesandguidetargetedremediationefforts.

Developandautomatedashboardsandreportingonvulnerabilityexposure,scancoverage,remediationprogress,vulnerabilityaging,andSLAadherenceusingnativereportingtools,Excel,andbusinessintelligencesolutions.

Mentorjunioranalysts,establishstandardsfortriageandreporting,andserveasanescalationpointforcomplexfindings.

Providerecommendationsonsecureconfigurations,systemhardening,andoverallvulnerabilitymanagementprogrammaturity,communicatingeffectivelywithbothtechnicalteamsandseniorstakeholders.

ABOUT YOU

Required Qualifications

Experience: 3–5yearsofhands-onexperienceinvulnerabilitymanagement,exposuremanagement,orcloselyrelatedsecurityoperations,includingexperienceinaleadcapacity.

Vulnerability Management: Deepunderstandingofthevulnerabilitymanagementlifecycle,risk-basedremediation,andSLAgovernanceacrosslarge,complexenvironments.

Security Tooling: Directhands-onexperienceoperatingandadministeringQualysVMDR,Wiz,andTanium,includingdeployment,configuration,tuning,integration,andreporting.Experiencewithallthreeplatformsisrequired.

CTEM: DemonstratedexperiencerunningormateriallycontributingtoaContinuousThreatExposureManagementprogram,includingscoping,discovery,prioritization,validation,andmobilization.

Data & Reporting: Strongreportingandanalyticalcapabilities,includingExcel,pivottables,andnativesecuritytoolreporting,withtheabilitytoproducetechnicalandexecutive-levelmetrics.

Technical Environment: ExperiencesecuringcomplexenvironmentsspanningWindows,Linux,networkdevices,endpoints,containers,andmulti-cloudworkloads.

Threat Intelligence: Strongunderstandingofthreatintelligencesourcesandtheabilitytocorrelateexternalthreatswithinternalfindings.

Communication & Leadership: Excellentwritten,verbal,andpresentationskills,withtheabilitytoinfluencestakeholders,communicateriskstoleadership,andmentorjunioranalysts.

English: AdvancedEnglishproficiency,withtheabilitytocommunicateeffectivelyinprofessionalandtechnicalenvironments.

Preferred Qualifications

Knowledgeofcloudsecurityposturemanagement(CSPM),cloud-nativeapplicationprotectionplatforms(CNAPP),andcontainerorKubernetessecurityconcepts,ideallyusingWizorequivalenttechnologies.

FamiliaritywithCISBenchmarks,secureconfigurationpractices,andsystemhardeningstandards.

ExperiencewithscriptingandautomationusingPython,PowerShell,toolAPIs,orPowerQuery.

ExperienceintegratingvulnerabilitymanagementtoolswithITservicemanagementplatforms,suchasServiceNow,toautomateremediationworkflows.

Preferred Certifications

Oneormoreofthefollowingcertifications,orawillingnesstoobtainthem:

QualysVMDRCertification

Wizcertificationorequivalentcloudsecurity/CNAPPcertification

GIACcertification,suchasGEVAorGCED,orCertifiedEthicalHacker(CEH)

WORKING MODEL

Thisrolefollowsahybridmodel,requiringin-officepresenceat least one day per week atourBoston,Chicago,orDallasoffice,dependingontheselectedlocation.

U.S. COMPENSATION INFORMATION

Compensationforthisroleincludesbasesalary,annualdiscretionaryperformancebonus,401(k)planwithanannualemployercontributionbasedonyearsofserviceandBain’sbestinclassbenefitspackage(detailslistedbelow).

SomelocalgovernmentsintheUnitedStatesrequireagood-faith,reasonablesalaryrangetobeincludedinjobpostingsforopenroles.Theestimatedannualizedcompensationforthisroleisasfollows:

In Boston, Massachusetts, the good-faith, reasonable annualized full-time salary range for this role is between 67k and 80k.

In Chicago, Illinois, the good-faith, reasonable annualized full-time salary range for this role is between 64k and 77k.

In Dallas, Texas, the good-faith, reasonable annualized full-time salary range for this role is between 61k and 73k.

Placementwithintheserangeswillvarybasedonseveralfactorsincluding,butnotlimitedtoexperience,education,licensure/certifications,training,andskilllevel.

Thisrolemayalsobeeligibleforotherelementsofdiscretionarycompensation

4.5%401(k)companycontribution,whichincreasesafter3yearsofserviceandis100%vesteduponstartdate

Bainpays100%individualemployeepremiumsformedical,dentalandvisionprograms,offeringoneofthemostcomprehensivemedicalplansforemployeeswithoutimpactingyourpaycheck