Vulnerability Analyst

Profile

Vulnerability Analyst
The candidate will be the primary point of contact for the Information Security team interfacing with other areas of the Information Technology organization on remediation efforts for discovered vulnerabilities. Provide insights and guidance on discovered vulnerabilities and how to effectively manage the associated risk, as well as organize and track large datasets across multiple teams. Drive improvements over time through the management, analysis and tracking of vulnerabilities discovered while building and maintaining effective relationships with technology partners to adequately report functional requirements for vulnerability remediation based on criticality and impact. Develop, communicate, and manage vulnerability scanning processes, guidelines, and standards. Configure, update, and manage scan policies to ensure 100% coverage of scanning. Coordinate patch management with IT Teams to ensure timely remediation on discovered vulnerabilities. Create and execute weekly scans, weekly reports, document vulnerabilities, and coordinate the remediation of discovered vulnerabilities with the InfoSec and IT teams. Implement, track, and drive improvements on Vulnerability scanning KPIs and SLAs. Review existing security controls to make an informed risk decision on discovered vulnerabilities. Report and track remediation status to leadership and stakeholders. Review compensating controls and ensure findings on vulnerabilities align to risk. Assist in the development and implementation of automated solutions to address daily manual tasks. Align processes and outcomes to all applicable regulations and cybersecurity frameworks. Quickly understand systems in order to identify and validate security vulnerabilities. Work analytically to solve both tactical and strategic problems within the vulnerability management program. Establish a rapport with other IT and InfoSec teams to mature the vulnerability management program and actively contribute and participate in team activities and planning that improve team skills, awareness, communication, reputation, and quality of work. Manage the detection and analysis of threat intelligence through various third-party sources and align those to the business through a threat triage process for remediation, action, or education.

Company info

Sign Up Now - EmploymentCrossing.com