Vulnerability Management Analyst (Information Security)

About the role

We are looking for a cyber security resource with end-to-end experience in vulnerability management. This role is 4 days a week onsite with 1 remote day.

Job Duties

• Works independently to scope vulnerable bodies of technologies, identify weaknesses, severity, and impact, and recommend paths to remediation.
• Support treatment and remediation activities with identified points of contact and system owners.
• Learns advanced Cybersecurity concepts including new and modern threat exploitation techniques of inside and outside bad actors.
• Contributes to actionable intelligence in the form of reports, notifications, alerts, and briefings.
• Collaborates with cross-functional teams throughout the system lifecycle.
• Highly motivated to gain knowledge of security techniques through formal and informal cybersecurity training opportunities (such as on-the-job training, mentorship, training courses, knowledge assessments).
• Contributes to development of relevant applications and systems.

Qualifications

• 2+ Years experience doing direct vulnerability management is required.
• Security certifications preferred: CEH, Security+, PenTest+, GSEC, etc.
• Microsoft certifications desired: Microsoft Certified: Azure Fundamentals, Microsoft Certified: Azure Security Engineer Associate.
• Hands-on experience with Vulnerability Management platforms such as Rapid7 InsightVM (preferred), Tenable Nessus, or Qualys in an enterprise environment is required.
• Experience with multiple operating systems (Windows, macOS, Linux).
• Working knowledge/experience with Python, PowerShell, and REST APIs.
• Advanced knowledge and understanding of vulnerability scoring systems (e.g., CVSSv3, CVSSv4, EPSS).
• Knowledge of endpoint security tools such as EDR solutions like CrowdStrike or Microsoft Defender for Endpoint.
• SIEM Tools such as Microsoft Sentinel and other Advanced security capabilities (Defender for Office, Defender for Cloud Apps, SASE).
• Familiarity with Entra ID sign-in logs and audit logs as it relates to Incident Response.
• MISP or similar threat intelligence sharing platform.
• Strong understanding and knowledge of Cybersecurity principles and frameworks, such as NIST CSF and ISO27001.
• Experience with Third Party Risk Management a plus.
• Detail oriented, organized, follow up skills with an analytical thought process.

Job Type & Location

This is a Contract position based out of Carlsbad, CA.

Pay And Benefits

The pay range for this position is $60.00 - $60.00/hr. Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following:

• Medical, dental & vision
• Critical Illness, Accident, and Hospital
• 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available
• Life Insurance (Voluntary Life & AD&D for the employee and dependents)
• Short and long-term disability
• Health Spending Account (HSA)
• Transportation benefits
• Employee Assistance Program
• Time Off/Leave (PTO, Vacation or Sick Leave)

Workplace Type

This is a hybrid position in Carlsbad, CA.

Application Deadline

This position is anticipated to close on Jul 30, 2026.