[Hiring] Vulnerability Management Analyst @EVOCS

Role Description

As a Vulnerability Management Analyst, you will support targeted vulnerability scanning and patching coordination that keeps our clients' environments secure without taking over their remediation ownership. You will be responsible for giving operational and executive stakeholders the clear, risk-prioritized reporting they need to make timely, informed decisions.

What You Will Do

• Perform vulnerability scanning support within approved scope and toolsets
• Support patching coordination, prioritization, and tracking with responsible infrastructure, application, cloud, and regional teams
• Develop recurring vulnerability and patching reports for operational and executive stakeholders
• Create, route, and track tickets for identified vulnerabilities through the applicable ITSM or remediation workflow
• Support risk-based decision making by helping prioritize vulnerabilities based on severity, exploitability, asset criticality, exposure, and business impact
• Document remediation actions, exceptions, risk decisions, and closure evidence
• Coordinate with client stakeholders while preserving client ownership of remediation decisions and operational accountability

Qualifications

• 5+ years' experience in vulnerability management and patch governance
• Experience with Tenable; Rapid7; Qualys; Zafran; Vulnerability scanning and reporting; Patch governance and remediation tracking; ITSM ticket creation and workflow coordination; Risk-based prioritization and exception documentation
• A passion for helping clients reduce risk through disciplined, well-documented remediation tracking
• Ability to build reporting that helps non-technical stakeholders understand risk and urgency
• An undying concern about unresolved vulnerabilities slipping through the cracks
• A willingness to coordinate across infrastructure, application, cloud, and regional teams
• Strong interpersonal and communication skills -- this is a client-facing role that involves frequent interaction via email, calls, and meetings

Requirements

• Ideally you have a degree in Cybersecurity, Information Technology, or a related field
• Ability to support multiple regional teams and scanning toolsets concurrently

Key Deliverables

• Vulnerability scanning support
• Patching coordination and tracking
• Operational and executive vulnerability reports
• Ticket creation and remediation workflow tracking
• Risk-based prioritization support
• Risk decision and exception documentation
• Closure evidence and remediation status documentation

Benefits

• Pay Range: $55 - $75 USD

Our Values

• Customer-centric Solutions
• Innovation & Excellence
• Integrity & Transparency
• Data-driven Decision Making

Need to Know

• The posting will be active for a minimum of 3 days. The active posting will continue to extend by 3 days until the position is filled.
• All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.