PARTNER CONSULTANT - Penetration Testing

Job Title

Vulnerability Operations Analyst (VulnOps)

Role Summary

The Vulnerability Operations Analyst will support the onboarding of applications and products into the vulnerability management program, facilitate remediation activities, and manage operational workflows throughout the vulnerability testing lifecycle. This position serves as a key liaison between application owners, development teams, security teams, and testing teams to ensure efficient vulnerability assessment, tracking, remediation, and closure.

Key Responsibilities

Application & Product Onboarding

• Coordinate onboarding of new applications, platforms, APIs, and products into the vulnerability testing program.
• Gather and validate application inventory, ownership, architecture, and technical details.
• Ensure onboarding requirements are completed prior to security testing.
• Track onboarding status and communicate progress to stakeholders.
• Maintain asset inventories and onboarding documentation.

Vulnerability Remediation Support

• Coordinate vulnerability remediation activities between security teams and application owners.
• Track remediation progress and ensure timely resolution of findings.
• Assist teams in understanding vulnerability reports and remediation expectations.
• Support vulnerability validation and retesting activities.
• Escalate overdue or critical findings according to program governance requirements.

Vulnerability Testing Pipeline Operations

• Manage application movement through the vulnerability testing lifecycle.
• Coordinate testing schedules and stakeholder communications.
• Monitor testing status, remediation status, and closure activities.
• Ensure operational handoffs between onboarding, testing, remediation, validation, and production teams.
• Support vulnerability lifecycle management processes and operational reporting.

Stakeholder Coordination

• Act as a central point of contact for application teams, security testing teams, and program leadership.
• Facilitate meetings, status reviews, and operational discussions.
• Communicate risks, blockers, and remediation progress.
• Support governance reporting and executive updates.

Reporting & Metrics

• Maintain dashboards and operational tracking reports.
• Monitor onboarding, testing, remediation, and closure KPIs.
• Produce weekly and monthly status reports.
• Identify process improvement opportunities within the vulnerability management program.

Required Skills

Vulnerability Management

• Understanding of Vulnerability Management and Vulnerability Operations processes.
• Familiarity with security testing methodologies and common vulnerability types.
• Knowledge of vulnerability lifecycle management and remediation workflows.

Technical Knowledge

• Basic understanding of web applications, APIs, cloud platforms, and enterprise applications.
• Familiarity with security tools and vulnerability management platforms.
• Understanding of OWASP Top 10 and common security risks is preferred.

Program & Operations Management

• Strong stakeholder management and communication skills.
• Experience coordinating multiple workstreams and competing priorities.
• Experience with ticketing and workflow management tools.
• Strong analytical and reporting capabilities.

Preferred Qualifications

• Experience supporting Application Security, Vulnerability Management, or Security Operations programs.
• Knowledge of Agile, SDLC, and DevSecOps practices.
• Experience with ServiceNow, Jira, Azure DevOps, or similar workflow tools.
• Relevant security certifications (Security+, SSCP, GSEC, etc.) are advantageous.

Success Measures

• Successful onboarding of applications into the testing pipeline.
• Timely remediation and closure of vulnerabilities.
• Reduced operational bottlenecks across the testing lifecycle.
• Accurate reporting and governance support.
• Improved collaboration between security and application teams.