Vulnerability Management Analyst

Job Overview:

We are seeking a motivated Vulnerability Management Analyst with experience in enterprise vulnerability assessment and management. This role will utilize expertise with information security to discover, analyze and characterize risks to our network, applications, databases and other components of our information system. The ideal applicant should be passionate about security, stay-up-to-date on the latest technology and industry best practices, and work well in a collaborative team environment.

Key Responsibilities:

• Oversee the coordination of security incident response
• Perform recurring and on-demand scanning of organization systems and could environments
• Resolve information security incidents, including targeted threats and internal incidents
• Maintain documentation regarding threat management, including policies and procedures
• Assist technology teams to develop, implement, and automate security solutions
• Improve and automate existing vulnerability management systems
• Monitor intrusion detection systems to identify potential threats
• Research and assess emerging security threats and vulnerabilities
• Provide technical support for vulnerability management projects
• Communicate the risks of identifies vulnerabilities and recommend security control to mitigate them

Skills and Qualifications:

• Experience in vulnerability scanning, penetration testing, network admission control,
• and/or SIEM
• Knowledge of IT controls used in monitoring for regulatory and compliance requirements
• In-depth knowledge of information security best practices
• Knowledge of technical concepts such as cloud computing, automation, networking, and application development
• Knowledge of vulnerability data management and reporting process
• Knowledge of OWASP tools and methodologies

Preferences:

• Security+ or similar level certification (GSEC, CEH, etc.)
• 3+ years of experience in vulnerability management or compliance monitoring
• Experience leading in a cybersecurity environment
• Experience in design and implementation of security technologies
• Knowledge of scripting languages such as Perl or Python