Vulnerability Security Analyst

What you'll do

• Manage the full vulnerability lifecycle by collecting, reporting, and assessing impact from internal and external sources.
• Analyze security events to identify trends, anomalies, and potential threats for stakeholder reporting.
• Provide strategic leadership to mature and optimize vulnerability management programs focused on web application protection.
• Collect data from security tools like firewalls and intrusion detection systems to improve visibility.
• Serve as a liaison between cybersecurity teams and business partners to provide remediation assistance and guidance.
• Collaborate with engineering and SOC teams to implement detection logic and enhance threat visibility.
• Monitor the vulnerability threat landscape and industry trends to assess risks specific to the corporate environment.
• Participate in rotational shift work, including nights and weekends, for 24/7 monitoring coverage.

What we're looking for

• A relevant degree or certification in a computer-related field, or 2–4 years of IT experience in security compliance, infrastructure, security analytics, or metrics-focused roles.
• Experience with ServiceNow and ServiceNow integrations.
• Experience with policy exception risk management, balancing security risk against business requirements.
• Experience with security vulnerability remediation and enterprise security log collection and management.
• Strong analytical, problem-solving, and communication skills to explain complex data to non-technical stakeholders.
• Understanding of current cyberattacks, evolving TTPs, and the MITRE ATT&CK framework.
• Proficiency with data visualization tools like Tableau or Power BI (preferred).
• Knowledge of scripting languages such as Python or SQL for data manipulation (preferred).