IT & Data Vulnerability Analyst

We are seeking a Vulnerability Management Analyst to support the organization's vulnerability management program by identifying, assessing, prioritizing, and tracking security vulnerabilities across infrastructure, applications, cloud environments, databases, networks, and endpoints. The role requires close collaboration with technology and security teams to drive remediation efforts, reduce cyber risk exposure, maintain security compliance, and provide actionable risk insights through reporting and analytics. The ideal candidate will have hands-on experience with vulnerability assessment tools, risk-based prioritization methodologies, remediation tracking, and stakeholder engagement within an enterprise environment.

Key Responsibilities

• Perform vulnerability scans across infrastructure, applications, cloud environments, and endpoints.
• Analyze vulnerabilities and assess risk using CVSS scoring, threat intelligence, and business impact.
• Coordinate and track remediation activities with internal stakeholders.
• Validate vulnerability fixes and closure.
• Maintain dashboards, reports, and remediation SLA metrics.
• Support risk acceptance and exception management processes.

Required Skills

• Vulnerability Management and Assessment.
• CVSS scoring and risk prioritization.
• Knowledge of operating systems, networks, databases, and cloud environments.
• Understanding of cyber risk and threat intelligence.
• Reporting, analytics, and dashboard management.

Good to Have

• Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management.
• Patch Management and Vulnerability Remediation.
• Attack Surface Management (ASM).
• Exposure Management platforms.
• PowerShell or Python scripting.

Behavioral Competencies

• Strong stakeholder management and project coordination.
• Analytical and problem-solving skills.
• Process improvement mindset.
• Effective communication skills.