Vulnerability Management Analyst

As the first dedicated Vulnerability Management Analyst in a full-time remote position, the successful candidate will manage the vulnerability lifecycle, prioritize risks based on a risk model, and build a reliable asset inventory while driving remediation efforts across engineering teams. Key responsibilities Run the vulnerability lifecycle including discovery, validation, prioritization, remediation tracking, and reporting across various environments Prioritize vulnerabilities using a risk-based model and maintain a reliable asset inventory with named ownership Drive remediation efforts by collaborating with engineering, IT, and platform teams, ensuring fixes are implemented and verified Required qualifications 3 to 6 years of experience in security, particularly in vulnerability management or cloud security posture management Hands-on experience with vulnerability scanning or CNAPP platforms, with a focus on risk prioritization Familiarity with cloud security fundamentals in major providers (GCP or AWS preferred) and experience with container vulnerabilities Proficiency in scripting (Python, PowerShell, etc.) for API querying and reporting automation Regular use of AI tools in security work, demonstrating how they enhance efficiency and quality