[Hiring] Vulnerability Management Analyst @Revinate

Role Description

Revinate's security program is lean, built from the ground up, and growing, and we're looking for a Vulnerability Management Analyst to take ownership of one of its most important engines. Reporting directly to our Director of Security and based in Atlanta, you'll become the second dedicated member of the security team and the owner of our vulnerability management pipeline, from scan to ticket to fix.

Your work will directly shrink the attack surface of a cloud-based hospitality SaaS platform trusted by more than 12,500 hotels. This is a defensive role at its core: you'll use offensive know-how to confirm whether findings are truly exploitable, but your success will be measured by complete scan coverage, clean prioritization, and vulnerabilities that actually get fixed. If you love building automation that turns noise into action, you'll have no shortage of meaningful work here.

Top Three Outcomes for Year One

• Own the pipeline.
• Automate from finding to ticket.
• Make the program measurable.

What You'll Do

• Run continuous vulnerability scanning in Tenable and Crowdstrike Falcon to ensure every asset across our public cloud environment is inventoried, covered, and assessed.
• Prioritize findings by real-world risk, using exploitability, threat intelligence, and asset context rather than CVSS severity scores alone.
• Validate high-priority findings hands-on, whether by spinning up a test virtual machine in our cloud VPC or using AI-assisted tooling.
• Automate the path from finding to ticket with existing tools, push validated fixes through remediation teams via our ticketing workflow (Jira), and follow up to ensure SLAs are met.
• Help define vulnerability management standards and report on program health.
• Participate in the mandatory on-call rotation for security incident response alongside the Director of Security and our AI-driven SOC alert analyst.

Qualifications

• Hands-on, real-world experience running vulnerability management in a business environment, ideally with Tenable.
• Experience working in public cloud environments (AWS, Azure, or GCP).
• Strong scripting skills for automating scan-to-ticket workflows (Python is a plus).
• A working knowledge of offensive security techniques, at the level of PenTest+ or OSCP.
• Experience with remediation ticketing workflows (Jira) and endpoint security tooling.
• Certifications such as CompTIA CySA+ or GIAC GEVA (most valued), or Security+, GSEC, PenTest+, OSCP, or SSCP.
• A background in security compliance, security operations, or application security.

People Describe You As

• A self-starter.
• Someone who closes the loop.
• An automator at heart.
• Calm and dependable under pressure.
• A pragmatic partner.

Compensation

$95,000 - $130,000 a year. The compensation package for the Vulnerability Management Analyst position includes a base salary.

Interview Process

• Recruiter Screen - 30 min Google Meet
• Hiring Manager Interview - 45 min Google Meet - Video
• Cross Collaboration - 30 min Google Meet - Video

Important Security Alert

We have been made aware of fraudulent activities involving individuals impersonating our HR team and offering fake job opportunities. Please be vigilant and ensure your safety by verifying all job offers.

AI and Hiring

Please note that interviews at Revinate will be recorded using brighthire.ai. If you’re uncomfortable with recording your interview, please let us know. We’ll opt you out.