Vulnerability Management Analyst

Job Summary

As the first dedicated Vulnerability Management Analyst in a full-time remote position, the successful candidate will manage the vulnerability lifecycle, prioritize risks based on a risk model, and build a reliable asset inventory while driving remediation efforts across engineering teams.

Key responsibilities

• Run the vulnerability lifecycle including discovery, validation, prioritization, remediation tracking, and reporting across various environments
• Prioritize vulnerabilities using a risk-based model and maintain a reliable asset inventory with named ownership
• Drive remediation efforts by collaborating with engineering, IT, and platform teams, ensuring fixes are implemented and verified

Required qualifications

• 3 to 6 years of experience in security, particularly in vulnerability management or cloud security posture management
• Hands-on experience with vulnerability scanning or CNAPP platforms, with a focus on risk prioritization
• Familiarity with cloud security fundamentals in major providers (GCP or AWS preferred) and experience with container vulnerabilities
• Proficiency in scripting (Python, PowerShell, etc.) for API querying and reporting automation
• Regular use of AI tools in security work, demonstrating how they enhance efficiency and quality