Senior Information Security Analyst

Job Summary

As a full-time remote Senior Information Security Analyst focusing on vulnerability management, the candidate will manage the vulnerability management program, conduct scans, oversee penetration testing, and report findings while advocating for security enhancements across the enterprise.

Key responsibilities

• Conduct internal and external vulnerability scans and manage the penetration testing program
• Rank and prioritize risks, reporting findings to stakeholders and identifying areas for security improvements
• Serve as a subject matter expert in vulnerability management for enterprise projects, ensuring compliance with security requirements

Required qualifications

• A minimum of eight years of related work experience, or a bachelor's degree with at least five years of relevant experience, or a master's degree with a minimum of three years of relevant experience
• Experience using vulnerability management tools such as Qualys, Tenable, or Wiz
• Knowledge of risk-based prioritization methods and ability to interpret threat intelligence
• Experience in remediation management, ensuring SLAs are met and collaborating with technology teams
• Familiarity with penetration testing and integrating findings into the vulnerability management program