US|Cybersecurity Vulnerability Analyst II

Information Risk Strategy Management Vulnerability Management Role This position supports the Information Risk Strategy Management (IRSM) Vulnerability Management (VM) program reporting to the Vulnerability Management Team Lead. Responsibilities include managing the vulnerability remediation process to ensure weaknesses identified through vulnerability scanning and assessments / penetration tests along with any emergency concerns are assigned to owners and tracked to resolution. Responsible for analyzing information/data collected from vulnerability assessments and scans; and in conjunction with the IRSM risk managers, helps recommend mitigations in the form of policies, standards, and controls as they apply to the major risk domains. This person will also support project initiatives to assess vulnerability of Chevrons IT assets. In this role, you will have the opportunity to: Support project initiatives to assess vulnerabilities in Chevrons IT assets and perform validation testing of remediated vulnerabilities from business vulnerability assessments, as needed. Gain foundational knowledge in cybersecurity and apply that knowledge toward remediation initiatives. Build foundational skills in cybersecurity toolsets including infrastructure and application scanning, phishing campaigns, cloud access security broker, and other cross functional security tools. Engage leaders across the enterprise to share results and gain commitment. This role can be located in either Houston, remote, or hybrid. Candidates do not have to be in Houston, but are preferred to be in Houston. Bachelors degree in Information Technology (IT), Computer Science, Engineering or equivalent experience. Strong desire to grow capability to effectively analyze the results of vulnerability scans and assessment results. Experience will include interpreting results and providing remediation guidance. The ideal candidate should have a fundamental understanding of the current tactics, techniques, and procedures relating to cybersecurity. Software Technology Inc