Locuz
Website:
locuz.com
Job details:
Job Description
Job Title: Security Analyst- Vulnerability Management
Department: IT
Should be Open for 24/7 Support
Job Description Summary
The Associate Vulnerability Management Analyst supports the organization’s Threat and Vulnerability Management (TVM) program by assisting with the identification, analysis, tracking, and remediation of security vulnerabilities across enterprise assets. This role supports vulnerability assessments, remediation coordination, reporting, compliance activities, and threat intelligence monitoring to help reduce organizational cyber risk.
This position reports to the Sr. Manager – InfoSec and may be performed remotely with a home office setup.
Role Description
- Perform vulnerability assessments using enterprise vulnerability management platforms.
- Review and analyze vulnerability scan results to identify security risks affecting servers, endpoints, network devices, cloud resources, applications, and databases.
- Assist in validating vulnerabilities and determining applicability, severity, and business impact.
- Research published CVEs, vendor advisories, and emerging threats to determine potential organizational impact.
- Support identification of assets affected by newly disclosed critical and high-risk vulnerabilities.
- Create, assign, and track remediation tickets to asset owners and support teams.
- Monitor remediation progress and follow up with stakeholders to support SLA compliance.
- Track program performance indicators and identify opportunities for remediation process improvement.
- Help maintain vulnerability management procedures, standards, documentation, and operating processes.
- Assist in improving vulnerability management workflows, automation opportunities, and reporting capabilities.
- Participate in recurring vulnerability review meetings with stakeholders.
- Stay informed on emerging threats, vulnerability trends, and industry best practices.
Behaviors And Competencies
- Problem Solving: Identifies vulnerabilities, remediation blockers, and process gaps while recommending practical solutions.
- Analytical Thinking: Evaluates technical data, vulnerability trends, threat intelligence, and remediation metrics to support risk-based decision-making.
- Communication: Communicates vulnerability findings, remediation requirements, and risk information clearly to both technical and non-technical audiences.
- Collaboration: Works effectively with cross-functional teams to drive vulnerability remediation and compliance efforts.
- Initiative: Proactively identifies opportunities to improve vulnerability management processes, reporting, and operational efficiency.
- Attention to Detail: Ensures vulnerability data, remediation status, asset information, and compliance documentation are accurate and complete.
- Organization: Manages multiple remediation initiatives simultaneously while maintaining established priorities and deadlines.
- Accountability: Takes ownership of assigned vulnerabilities and remediation tracking through resolution.
- Continuous Learning: Maintains awareness of emerging threats, CVEs, technologies, and cybersecurity best practices.
- Follow-Up: Consistently tracks remediation activities and escalates unresolved vulnerabilities when appropriate.
Requirements
Job Requirements
Skill Level Requirements:
- Understanding of vulnerability management concepts, risk assessment methodologies, and remediation processes.
- Familiarity with CVSS scoring, CVEs, vulnerability prioritization, and threat intelligence.
- Ability to analyze vulnerability scan results and identify remediation recommendations.
- Experience with Windows Server, Linux, cloud platforms, and enterprise infrastructure technologies.
- Ability to create clear technical documentation and remediation guidance.
- Ability to communicate technical findings to various stakeholder groups.
- Experience using reporting and data analysis tools.
- Familiarity with compliance standards, including PCI DSS, CIS Controls, and security best practices.
External Qualifications
- Bachelor’s degree in Cybersecurity, Information Technology, Information Security, or a related field.
- Foundational knowledge of vulnerability management, threat management, cybersecurity principles, and risk management practices.
- Relevant certifications such as CompTIA Security+, CompTIA CySA+, GIAC foundational certifications, or equivalent are a plus.
Internal Qualifications
- Strong analytical and troubleshooting abilities.
- Ability to manage multiple priorities in a fast-paced environment.
- Strong verbal and written communication skills.
- A team player with the ability to collaborate effectively with cross-functional teams.
- Strong organizational and time management skills.
- Excellent attention to detail with a focus on data accuracy and reporting quality.
Other Requirements
- Experience with vulnerability management platforms.
- Familiarity with vulnerability scanning methodologies and remediation workflows.
- Understanding of operating systems, including Windows and Linux.
- Basic understanding of networking concepts, cloud environments, and security architecture.
- Ability to interpret vendor security advisories, vulnerability bulletins, and remediation guidance.
- Experience creating reports, dashboards, and performance metrics.
- Ability to participate in incident response or critical vulnerability response activities when required.
Preferred
- Hands-on experience with a vulnerability management platform.
- Experience using data analysis tools for vulnerability reporting and trend analysis.
- Familiarity with automation and scripting tools such as PowerShell, Python, or REST APIs.
- Experience supporting PCI DSS vulnerability management requirements.
- Knowledge of Microsoft security updates, Linux patching, and third-party application remediation.
- Understanding of risk-based vulnerability prioritization methodologies.
- Experience with vulnerability validation, remediation verification, and exception management processes.
- Exposure to cloud security concepts within Azure and AWS environments.
- Knowledge of CIS Benchmarks, NIST Cybersecurity Framework, and industry security best practices.
Click on Apply to know more.
