Associate Analyst - Vulnerability Mgt

Company Profile

Lennox (NYSE: LII) Driven by 130 years of legacy, HVAC and refrigeration success, Lennox provides our residential and commercial customers with industry-leading climate-control solutions. At Lennox, we win as a team, aiming for excellence and delivering innovative, sustainable products and services. Our culture guides us and creates a workplace where all employees feel heard and welcomed. Lennox is a global community that values each team member’s contributions and offers a supportive environment for career development. Come, stay, and grow with us.

Job Description

     1. Workstation Vulnerability Management

• Perform daily vulnerability monitoring and analysis across endpoints (Windows/Linux)
• Validate findings from scanners (Qualys/Tenable/Defender VM) and eliminate false positives
• Track patching and remediation status with IT/Infra teams
• Ensure SLA-driven closure of vulnerabilities based on severity

      2.Security Scorecard Monitoring

• Identify and monitor externally exposed assets (domains, IPs, shadow IT)
• Analyze risks such as:
• Open ports / misconfigurations
• Exposed services / outdated systems
• Track remediation with respective owners

• Monitor and track security posture metrics (scorecard trends, risk ratings)
• Identify key drivers for score changes (patch gaps, exposed assets, vulnerabilities)
• Provide regular reports and insights for improvement actions

Reporting & Tracking

• Prepare daily/weekly vulnerability status reports and dashboards
• Maintain accurate tracking of vulnerabilities, remediation progress, and backlog

Coordination

• Work with:
• IT / Endpoint / Infra teams for patching and closure
• Security teams for risk prioritization and validation

Continuous Improvement

• Identify recurring issues and remediation gaps
• Support initiatives to improve:
• Patch compliance
• Vulnerability closure timelines
• Asset visibility

Qualifications

• Basic knowledge of vulnerability management lifecycle
• Understanding of:
• CVSS scoring, patching concepts
• Endpoint security & OS fundamentals
• Familiarity with scanning tools and dashboards
• Good analytical and coordination skills