Vulnerability Management Analyst

About The Role

We're partnering with leading AI research labs to build the next generation of security-aware AI systems — and we need practitioners who know what vulnerability management actually looks like in the real world. This isn't a theoretical role. You'll bring your hands-on experience with CVEs, exposure analysis, and remediation workflows to help train and evaluate AI models that reason about security risk. Your expertise will directly shape how AI understands and responds to the challenges security teams face every day.

What You'll Do

• Analyze vulnerability reports, CVEs, and exposure scenarios across infrastructure and application environments
• Classify severity, exploitability, business impact, and appropriate remediation strategies
• Review and evaluate patching, mitigation, and risk prioritization decision-making scenarios
• Generate, label, and validate realistic security-reasoning data used to train and benchmark AI systems
• Help AI understand the difference between theoretical risk scores and what actually matters in production

Who You Are

• 2+ years of experience in vulnerability management, security operations, or infrastructure security
• Familiar with CVE databases, vulnerability scanners, patching workflows, and risk prioritization frameworks (e.g., CVSS, EPSS, or similar)
• You understand the real-world tradeoffs between risk severity and operational impact
• An analytical, structured thinker who can communicate complex security decisions clearly
• Self-motivated and comfortable working independently on task-based assignments

Nice to Have

• Experience with tools like Tenable, Qualys, Rapid7, or Wiz
• Familiarity with cloud or container security environments
• Background in threat intelligence or red/blue team operations
• Prior experience contributing to AI training or data labeling projects