Sr Cyber Security Analyst- Vulnerability Management

Role overview

Vulnerability management

• Administer and optimize vulnerability and exposure-management platforms, including Wiz, CrowdStrike, Rapid7, and Nagomi.
• Assess vulnerabilities across servers, workstations, network devices, cloud assets, applications, and other technology environments.
• Validate findings and prioritize using severity, known exploitation, internet accessibility, asset criticality, business impact, threat intelligence, exploitability, and exposure paths.
• Coordinate remediation, track issues through closure, and technically validate patches, mitigations, and other corrective actions.
• Develop procedures, runbooks, dashboards, reporting, trend analysis, and metrics for exposure reduction and remediation progress.
• Analyze vulnerability, asset, threat, and control data in Nagomi; identify control gaps and exposure-reduction opportunities.

Mergers and acquisitions

• Perform cybersecurity discovery and vulnerability assessments in acquired environments and establish an initial exposure baseline.
• Identify cybersecurity gaps, unmanaged assets, unsupported technologies, configuration weaknesses, vulnerabilities, and technical debt.
• Onboard acquired assets into enterprise vulnerability-management tools and processes; conduct scans, validation, and follow-up testing.
• Recommend remediation, validate corrective actions, track assigned findings, and help transition environments into established Cyber Operations practices.
• Collaborate with infrastructure, network, cloud, application, identity, GRC, and other technology teams; support workflow automation and integrations.

Minimum qualifications

• Bachelor’s degree in a related technical field or equivalent combination of education and professional experience.
• At least 5 years of progressive experience in cybersecurity, vulnerability management, security engineering, cyber operations, or a related discipline.
• Hands-on enterprise vulnerability-management experience with platforms such as Wiz, CrowdStrike, Rapid7, Nagomi, or comparable tools.
• Knowledge of CVE, CVSS, CISA Known Exploited Vulnerabilities, EPSS, threat intelligence, exploitability, and risk-based prioritization.
• Experience assessing Windows, Linux, network, cloud-hosted, application, and enterprise infrastructure environments.
• Experience with remediation coordination, vulnerability reporting, dashboards, metrics, procedures, standards, and technical documentation.
• Strong analytical, problem-solving, communication, and independent prioritization skills.

Preferred qualifications

• Experience supporting cybersecurity activities for mergers, acquisitions, divestitures, or large technology integrations.
• Experience assessing acquired environments, establishing exposure baselines, and onboarding assets into enterprise vulnerability-management processes.
• Advanced experience with exposure management, attack-surface analysis, security-control validation, or risk-based prioritization.
• Experience using APIs, scripting, or automation to integrate security tools and improve workflows or reporting.
• Experience with distributed enterprises, multiple business units, technology platforms, and acquired organizations.

Work environment

• The role is designed for a hybrid work environment combining in-office and remote work.
• Occasional travel may be required to acquired organizations, branches, data centers, offices, or other facilities for assessments and integration work.
• Work takes place in a fast-paced security operations environment with changing priorities and multiple technical workstreams.

Compensation

• Structured salary range is USD 88,200–116,700 yearly.