Information Security Analyst

Location: San Antonio, TX or Plano, TX (Hybrid)

About the role

Assist in the responsibility for reviewing vulnerabilities' data from multiple sources (i.e., external / internal penetration testing, internal / external vulnerability scanning, PCI Issuer/Merchant/Hybrid Vulnerability scanning etc.) across multiple technologies and a changing environment including infrastructure and applications. Assist in improving and automating existing vulnerability management routing and remediation. Including but not limited, data ingestion & normalization, compliance metrics and detections on assets. Assist in partnering with tools and technology teams to troubleshoot, develop, select, implement and automate appropriate security solutions to keep system data protected from internal and external threats. Assist in providing support and resolution for vulnerability remediation reporting issues. Provide technical support for vulnerability management tools and Tickets. Provides analysis and validation post remediation, opportunities for improvements and out of the box thinking for optimizations and solving roadblocks. Assist in ensuring Vulnerability Tickets are presented in appropriate dashboards, reports, and forwarded to remediators as necessary. When provided with an objective to improve Vulnerability management tools and process in their area(s) of technology; develops and implements action plans. Monitoring and tracking of Penetration Test findings, Evidence collection, retest, reporting and Exception handling. Manages the analysis of the performance of installed vulnerability management tools and functionalities. Proposes and implements any required changes to improve current functionalities, including identifying and planning for any resulting impacts on other technologies. Ensures Vulnerability management teams collaborate with threat intelligence and monitoring team(s) to engineer solutions that will monitor the performance of the security infrastructure supporting various technologies. Act as primary contact for communicating with Business users during any ServiceNow or Tableau related dashboards development in IT Vulnerability & Patch Management Area. Responsible to maintain, refine and support existing dashboard & Reports, automating and providing for self-service whenever possible.

Responsibilities

• Review vulnerability data from multiple sources (external/internal penetration testing, internal/external vulnerability scanning, PCI Issuer/Merchant/Hybrid scanning) across technologies and environments.
• Improve and automate vulnerability management routing and remediation, including data ingestion & normalization, compliance metrics, and detections on assets.
• Partner with tools and technology teams to troubleshoot, develop, select, implement, and automate security solutions.
• Provide support and resolution for vulnerability remediation reporting issues.
• Provide technical support for vulnerability management tools and tickets.
• Analyze and validate post‑remediation, identify improvement opportunities, and devise optimizations.
• Ensure vulnerability tickets are presented in dashboards/reports and forwarded to remediators.
• Develop and implement action plans to improve vulnerability management tools and processes.
• Monitor and track penetration test findings, evidence collection, retest, reporting, and exception handling.
• Manage analysis of installed vulnerability management tool performance and propose/implement changes.
• Collaborate with threat intelligence and monitoring teams to engineer solutions that monitor security infrastructure performance.
• Act as primary contact for business users during ServiceNow or Tableau dashboard development in IT Vulnerability & Patch Management.
• Maintain, refine, and support existing dashboards and reports; automate and enable self‑service.

Qualifications

• 4+ years of Vulnerability/Secure Configuration Management, Analysis, Reporting with strong understanding of security baselines, policies, and scanner configurations.
• Hands‑on experience maintaining, supporting, and resolving issues with vulnerability management tools (e.g., Qualys, Apiiro, Wiz).
• Direct experience working with remediation teams and working knowledge of vulnerability management tools; preferred experience with ServiceNow, JIRA, Microsoft Office.
• Experience performing root cause analysis, risk identification, and risk mitigation.
• Contemporary experience managing system and vulnerability management and security configuration management for on‑premise and cloud environments.
• Interpersonal skills: collaborate effectively, manage challenging relationships, assist junior staff development, excellent written and oral communication.
• Experience automating maintenance and support functions to support continuous improvement of quality and consistency.
• Proficient knowledge of software delivery life cycles (Waterfall and Agile) and strong project‑management skills.