Vulnerability risk analyst

job summary:
1. Prepare detailed reporting on vulnerabilities and related risks, integrating risk concepts such as impact and likelihood to ensure proper prioritization. Reporting will outline security posture, vulnerability trends, and mitigation results.

2. Conducts independent analysis of vulnerabilities to identify thematic issues, and impact on systems. Support risk scoring.

3. Leads scrums and huddles to support the tracking of vulnerability management efforts. Maintain Kanban boards that track remediation efforts.

4. Supports the documentation of process & controls gaps that contribute to vulnerability risk.

5. Coordinates with Technical Security Advisors to ensure remediation plans and status are up-to-date and accurate.

6. Maintaining vulnerability management procedures.

7. Participates in special projects and performs other duties as assigned.

location: Malvern, Pennsylvania
job type: Contract
salary: $40.26 - 45.26 per hour
work hours: 8am to 5pm
education: Bachelors


responsibilities:

• 1. Prepare detailed reporting on vulnerabilities and related risks, integrating risk concepts such as impact and likelihood to ensure proper prioritization. Reporting will outline security posture, vulnerability trends, and mitigation results.
• 2. Conducts independent analysis of vulnerabilities to identify thematic issues, and impact on systems. Support risk scoring.
• 3. Leads scrums and huddles to support the tracking of vulnerability management efforts. Maintain Kanban boards that track remediation efforts.
• 4. Supports the documentation of process & controls gaps that contribute to vulnerability risk.
• 5. Coordinates with Technical Security Advisors to ensure remediation plans and status are up-to-date and accurate.
• 6. Maintaining vulnerability management procedures.
• 7. Participates in special projects and performs other duties as assigned.

qualifications:
Microsoft 365 and Copilot: Robust understanding of Microsoft 365 and Copilot functionalities, including integration and customization.

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or equivalent practical experience.

Security certification(s) preferred (e.g., Security+, SSCP, CISSP or equivalent), especially if the role will independently assess risk treatment quality.

Demonstrated foundation in cybersecurity principles (vulnerability lifecycle, risk concepts, remediation approaches) and the ability to apply them in an enterprise environment.

Proven security expertise across infrastructure products and services.

Working knowledge of vulnerability management outcomes: identifying, assessing, prioritizing, and enabling workflows that help drive vulnerabilities to closure or approved treatment

Experience supporting or governing vulnerability scanning/assessment programs for enterprise assets (on prem and/or cloud workloads), including compliance to remediation SLAs.

Ability to perform a structured investigation of a suspected false positive and document the outcome and decision path.

Ability to explain a vulnerability's impact in plain business terms and produce a concise risk treatment summary that is approver-ready.

Ability to support downgrade/override decisions with written rationale that is auditable and explicitly scope

Skills Required

Proficiency in creating, structuring, and analyzing datasets using automation, development frameworks, and AI-driven tools.

Robust writing skills to produce audit-ready rationales and summaries (risk acceptances, downgrade rationale, false positive outcomes).

Comfortable facilitating discussions with technical and non-technical stakeholders to clarify facts, confirm remediation options, and drive decisions.

Robust attention to detail for data accuracy

Familiarity with vulnerability and posture tooling across on-prem and cloud contexts

Experience with reporting ecosystems

Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.

At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact View email address on click.appcast.io.


Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).


This posting is open for thirty (30) days.

Any consideration of a background check would be an individualized assessment based on the applicant or employee's specific record and the duties and requirements of the specific job.