Vulnerability Management Analyst

Job Description

• Perform vulnerability scanning across systems, networks, and applications using tools such as Qualys, Tenable, Nexpose, or equivalent platforms.
  
• Analyze and validate scan results, assess vulnerability severity, and prioritize remediation based on risk and business impact.
  
• Coordinate with IT, infrastructure, and application teams to support timely remediation and mitigation of identified vulnerabilities.
  
• Track vulnerability status, remediation progress, exceptions, and overdue findings to ensure proper closure and accountability.
  
• Prepare vulnerability dashboards, reports, metrics, and supporting documentation for management review, audits, and compliance purposes.
  

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
  
• Minimum 5 years of relevant experience in vulnerability management, information security, or cybersecurity operations.
  
• Hands-on experience with vulnerability scanning tools such as Qualys, Tenable, Nexpose, or equivalent.
  
• Strong understanding of CVSS, OWASP Top 10, vulnerability prioritization, and common enterprise threat vectors.
  
• Experience analyzing scan results, validating findings, identifying false positives, and recommending appropriate remediation actions.
  
• Strong reporting and documentation skills, including experience preparing dashboards, vulnerability metrics, and management reports.
  
• CEH, CompTIA Security+, or an equivalent industry-recognized cybersecurity certification is preferred.
  

Benefits

Longterm Position
Competitive Salary

Requirements
Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field. Minimum 5 years of relevant experience in vulnerability management, information security, or cybersecurity operations. Hands-on experience with vulnerability scanning tools such as Qualys, Tenable, Nexpose, or equivalent. Strong understanding of CVSS, OWASP Top 10, vulnerability prioritization, and common enterprise threat vectors. Experience analyzing scan results, validating findings, identifying false positives, and recommending appropriate remediation actions. Strong reporting and documentation skills, including experience preparing dashboards, vulnerability metrics, and management reports. CEH, CompTIA Security+, or an equivalent industry-recognized cybersecurity certification is preferred.