Vulnerability Management Analyst

Our client is seeking an experienced Vulnerability Management Analyst to validate, triage, and prioritize vulnerability findings across multiple security sources. This role focuses on risk assessment, stakeholder engagement, and process improvement within a dynamic enterprise security environment.

Responsibilities & Qualifications

• Validate and triage vulnerability findings from internal scans, external scans, attack surface management sources, and threat intelligence feeds
• Assess severity, exploitability, exposure, business impact, compensating controls, and residual risk for risk-based prioritization and remediation planning
• Engage technology stakeholders and remediation owners throughout the vulnerability lifecycle to drive timely resolution
• Support rapid response for vulnerability threat intelligence escalations and critical patch events
• Operate vulnerability management, scanning, reporting, and risk prioritization tools; validate data quality and investigate discrepancies
• Identify recurring risk patterns, workflow inefficiencies, and data quality issues; recommend and help implement process and tooling improvements
• Communicate technical findings and risk assessments clearly to both technical and non-technical stakeholders
• Analyze vulnerability trends and metrics to support informed decision-making and strategy refinement

Requirements

• 8–10 years of experience in vulnerability management, enterprise security operations, or related security roles
• Demonstrated expertise with Qualys, Tenable, Nessus, and similar vulnerability scanning platforms
• Strong knowledge of cloud and container security assessment and remediation
• Proven ability to perform risk assessment and vulnerability triage in complex environments
• Proficiency in data analysis and identifying patterns in security metrics and vulnerability data
• Excellent technical communication and stakeholder management skills
• Ability to work independently and manage priorities in a remote environment