Senior Vulnerability Management Security Analyst

Key Responsibilities

• Lead and oversee the enterprise threat and vulnerability management program, ensuring effective risk reduction across environments.
• Evaluate and interpret threat data to assess risk and communicate recommended actions to stakeholders.
• Drive remediation efforts by collaborating with IT teams, developers, and system owners.
• Perform vulnerability scanning across on-prem and cloud environments and validate remediation outcomes.
• Collaborate with incident response, vendors, and stakeholders to identify and address emerging threats and vulnerabilities.

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Engineering, Business, Education, or a closely related field.
• Minimum of 2-4 years of relevant experience configuring and administering enterprise security vulnerability management tools and conducting cyber threat intelligence.
• Experience deploying, integrating, and managing Rapid7 InsightVM.
• Advanced degree in Computer Science, Information Security, or related field preferred.
• CISSP, GIAC (GSEC, GCIH, GCIA, GPEN) or other technical security certifications preferred.
• Experience in IT controls monitoring for regulatory and compliance requirements like NIST, CIS, SOX, HIPAA, HITRUST, SSAE 16 - SOC 1 & SOC 2, PCI compliance - PCI DSS / PA-DSS, and NIST preferred.
• Penetration testing experience preferred.