Vulnerability Management Analyst

Vulnerability Management Analyst

The Vulnerability Management Analyst supports enterprise vulnerability operations by validating findings, assessing risk, coordinating remediation, and helping drive timely reduction of security exposure and risk across infrastructure, cloud, container, application, endpoint, and externally facing environments. This role requires strong analytical judgment, operational follow-through, and the ability to translate large volumes of vulnerability data into clear, actionable guidance for technical and non-technical stakeholders.

Key Responsibilities

• Validate and triage vulnerability findings from internal scans, external scans, attack surface management sources, and threat intelligence, including scope validation, ownership attribution, and exposure assessment.
• Assess severity, exploitability, exposure, business impact, compensating controls, and residual risk to support risk-based prioritization across infrastructure, cloud, container, endpoint, network, and externally exposed environments.
• Engage technology stakeholders and remediation owners throughout the vulnerability lifecycle, from identification and owner routing through remediation treatment, progress tracking, closure validation, and risk-based escalation.
• Support rapid response for vulnerability threat intelligence escalations and PatchNow Critical events through scope analysis, owner routing, remediation treatment, tracking, and closure verification.
• Work with vulnerability management, scanning, reporting, external exposure, and risk prioritization tools to validate data, investigate discrepancies, confirm asset context, and compress operational response times.
• Identify recurring risk patterns, workflow friction, and data quality issues; recommend practical improvements to processes, tooling, automation, and reporting that improve remediation outcomes and operational consistency.