Job Description

Our client is seeking an Information Security Analyst – Vulnerability Remediation to support vulnerability management, remediation, reporting, and continuous improvement across enterprise infrastructure and applications. This role will analyze vulnerability data from multiple sources, partner with remediation and technology teams, and help improve and automate vulnerability management processes.

Key Responsibilities

• Review and analyze vulnerability data from penetration testing, vulnerability scanning, PCI assessments, and other security sources across infrastructure and applications.
• Support improvements and automation of vulnerability management processes, including data ingestion, normalization, compliance metrics, and asset detection.
• Provide technical support for vulnerability management tools, tickets, reporting, and remediation activities.
• Partner with technology and security teams to troubleshoot issues and implement effective security solutions.
• Validate remediation activities, perform post-remediation analysis, identify improvement opportunities, and help resolve roadblocks.
• Monitor penetration testing findings, coordinate evidence collection and retesting, and support reporting and exception management.
• Maintain and enhance vulnerability dashboards and reports, including ServiceNow and Tableau, with an emphasis on automation and self-service capabilities.

Required Qualifications

• 4+ years of experience in vulnerability management, secure configuration management, security analysis, or vulnerability reporting.
• Strong understanding of security baselines, policies, scanner configurations, and vulnerability remediation.
• Hands-on experience supporting vulnerability management tools such as Qualys, Apiiro, Wiz, or similar technologies.
• Experience partnering directly with remediation teams and working with tools such as ServiceNow, Jira, and Microsoft Office.
• Strong knowledge of root cause analysis, risk identification, and risk mitigation.
• Experience supporting vulnerability and security configuration management across on-premises and cloud environments.