Vulnerability Management Analyst

People Drive Our Success Are you enthusiastic, highly motivated, and have a strong work ethic? If yes, come join our team! At Cathay Bank – we strive to provide a caring culture that supports your aspirations and success. We believe people are our most valuable asset, and we proudly foster growth and development empowering you to achieve your professional goals. We have thrived for 60 years and persevered through many economic cycles due to our team members’ drive and optimism. Together we can make a difference in the financial future of our communities. Apply today! What Our Team Members Are Saying Video Clip 1 Video Clip 2 Video Clip 3 Learn more about us at cathaybank.com General Summary The Vulnerability Management Analyst supports the Bank’s enterprise vulnerability management program, with primary responsibility for operating and optimizing the Tenable platform. This role maintains accurate asset visibility, configures and monitors vulnerability and discovery scans, manages Tenable agents and scan infrastructure, analyzes and prioritizes findings, coordinates remediation with technology owners, validates closure, and produces risk-based reporting. The position also maintains evidence, exceptions, procedures, and metrics required for governance, audit, regulatory, and management oversight. DIRECT REPORTS None Essential Functions Tenable Platform Administration and Asset Coverage Administer and optimize Tenable.io or Tenable Vulnerability Management, including scan policies, schedules, repositories, permissions, dashboards, tags, and reporting.Configure and maintain authenticated vulnerability scans, discovery scans, Tenable agents, scanners, and related scan infrastructure.Monitor scanner and agent health, scan completion, credential failures, plugin currency, performance, and platform capacity; troubleshoot issues through resolution.Develop and maintain dynamic asset tags, scan targeting, network ranges, exclusions, and ownership mappings to support accurate segmentation and reporting.Reconcile Tenable asset inventory with authoritative sources such as Active Directory, SCCM, ServiceNow CMDB, and network inventories; investigate coverage gaps and duplicate or stale records. Vulnerability Identification, Analysis, and Prioritization Review vulnerability scan results for accuracy, severity, exploitability, asset criticality, exposure, and business impact.Identify false positives, accepted risks, compensating controls, recurring findings, and vulnerabilities requiring urgent escalation.Prioritize remediation using CVSS, Tenable Vulnerability Priority Rating and Asset Criticality Rating, known-exploited vulnerability information, threat intelligence, and internal risk criteria.Perform targeted analysis of operating systems, applications, databases, network devices, cloud assets, and other in-scope technologies.Track vulnerability aging, remediation service levels, overdue findings, recurring issues, and risk trends across the enterprise. Remediation Coordination and Validation Assign and communicate actionable vulnerability findings to infrastructure, application, cloud, database, network, and endpoint owners.Coordinate remediation plans, target dates, dependencies, and escalation of overdue or high-risk vulnerabilities.Partner with patch management and system owners to confirm that corrective actions address identified vulnerabilities without creating unacceptable operational risk.Perform rescans or other validation to confirm remediation effectiveness and document closure evidence.Maintain documented exceptions and risk acceptances with defined scope, business justification, compensating controls, approvals, and expiration dates. Governance, Reporting, and Continuous Improvement Produce recurring vulnerability dashboards and reports that clearly communicate coverage, critical findings, aging, remediation performance, exceptions, and emerging risk to management and technical stakeholders.Maintain vulnerability management procedures, scan standards, asset coverage documentation, operating runbooks, ownership records, and evidence repositories.Support audits, regulatory reviews, risk assessments, and control testing with complete and traceable evidence of scanning, analysis, remediation, validation, and exception handling.Monitor adherence to vulnerability remediation service levels and escalate material risks in accordance with governance and issue-management requirements.Recommend improvements to Tenable configuration, scan coverage, automation, reporting, integrations, and vulnerability management processes. Qualifications Education Bachelor’s degree in information technology, Computer Science, Information Systems, Cybersecurity, or a related field preferred.Relevant certifications are a plus, particularly Tenable certifications, Security+, CySA+, CISSP, or comparable vulnerability management, cybersecurity, or systems administration credentials. Experience Minimum 5 years of experience in vulnerability management, cybersecurity operations, security engineering, infrastructure security, or a related role.At least 3 years of hands-on experience with vulnerability management tools with focus on Tenable.io or Tenable Vulnerability Management, including scan configuration, agent and scanner administration, asset tagging, dashboards, reporting, and troubleshooting.Experience conducting authenticated and unauthenticated vulnerability scans across Windows, Linux, network, database, application, cloud, and endpoint environments.Experience analyzing vulnerabilities, prioritizing risk, coordinating remediation, validating closure, and managing exceptions or risk acceptances.Experience integrating or reconciling vulnerability data with technologies such as ServiceNow, CMDB, Active Directory, SCCM, Intune, APIs, or other enterprise asset sources.Experience producing vulnerability metrics and executive reporting in a formal IT governance, audit, regulatory, or compliance environment; banking or financial-services experience preferred. Skills/Ability Advanced working knowledge of Tenable.io or Tenable Vulnerability Management, including scan policies, credentials, agents, scanners, asset tags, access groups, dashboards, reports, plugins, and troubleshooting.Strong knowledge of Tenable is important; familiarity with other vulnerability management, security scanning, and remediation tools is also valued.Strong understanding of vulnerability management lifecycle practices, CVSS, Tenable Vulnerability Priority Rating, Asset Criticality Rating, known-exploited vulnerabilities, threat intelligence, and risk-based prioritization.Knowledge of authenticated scanning, network discovery, agent-based assessment, credential management, scan tuning, and methods for improving asset and vulnerability coverage.Knowledge of configuring and using Tenable compliance scans to assess security control implementation and measure cybersecurity maturity against the CIS Critical Security Controls framework and applicable CIS Benchmarks.Ability to analyze findings, identify likely false positives, determine remediation options, communicate technical risk, and validate corrective action.Knowledge of Windows, Linux, network devices, databases, cloud platforms, enterprise applications, and endpoint management technologies.Ability to reconcile and normalize asset data across Tenable, ServiceNow CMDB, Active Directory, SCCM, Intune, and other inventory sources.Strong data-analysis and reporting skills, including development of operational dashboards, vulnerability aging metrics, service-level reporting, risk trends, and executive summaries.Familiarity with ServiceNow Vulnerability Response or similar remediation workflow and issue-tracking platforms is preferred.Understanding of change management, exception management, risk acceptance, audit evidence, and regulated-environment control requirements.Strong organizational, documentation, analytical, and problem-solving skills with close attention to data quality and follow-through.Effective written and verbal communication skills and the ability to coordinate remediation across technical teams, business owners, vendors, and management. Other Details Pay Range: $99,000 to $104,000/year Pay determined based on job-related knowledge, skills, experience, and location. This position may be eligible for a discretionary bonus. Cathay Bank offers its full-time employees a competitive benefits package which is a significant part of their total compensation. It is our goal to provide employees with a comprehensive benefits package to fit their needs which includes, coverage for medical insurance, dental insurance, vision insurance, life insurance, long-term disability insurance, and flexible spending accounts (FSAs), health saving account (HSA) with company contributions, voluntary coverages, and 401(k). Cathay Bank may collect personal information from potential job candidates and applicants. For more information on how we handle personal information and your applicable rights, please review our California Job Applicant Privacy Policy. Cathay Bank is an Equal Opportunity and Affirmative Action Employer. We welcome applications for employment from all qualified candidates, regardless of race, color, ethnicity, ancestry, citizenship, gender, national origin, religion, age, sex (including pregnancy and related medical conditions, childbirth and breastfeeding), reproductive health decision-making, sexual orientation, gender identity and expression, genetic information or characteristics, disability or medical condition, military status or status as a protected veteran, or any other status protected by applicable law. Click here to view the “Know Your Rights: Workplace Discrimination is Illegal” Poster: Poster- English Poster- Spanish Poster- Chinese Traditional Poster- Chinese Simplified Cathay Bank endeavors to make www.CathayBank.comaccessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact, Mickey Hsu, FVP, Employee Relations Manager, at (626) 582-7370 or mickey.hsu@cathaybank.com. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.