Vulnerability Management Analyst

Job Title: Vulnerability Management Analyst

Duration: 12 months

Location: Remote

Position Overview:

The Vulnerability Management Analyst will support vulnerability triage and risk assessment activities for customer’s enterprise applications and technology asset. This role will evaluate newly disclosed vulnerabilities, determine potential exposure and exploitability, assign appropriate severity and risk ratings, and maintain clear, audit-ready documentation. The position requires a strong operational mindset and the ability to support business-as-usual activities as well as urgent vulnerability escalations.

Responsibilities:

• Triage newly disclosed vulnerabilities and determine their relevance and potential impact to enterprise applications and assets.
• Assess vulnerability exploitability using threat intelligence, exploit and proof-of-concept information, and likely attack paths.
• Clearly document potential exposure, impact, and risk.
• Assign firm-aligned severity and risk ratings mapped to recognized industry standards, including Common Vulnerabilities and Exposures (CVE), Common Platform Enumeration (CPE), and Common Vulnerability Scoring System (CVSS), with clear supporting rationale.
• Maintain high-quality, audit-ready case notes and supporting documentation.
• Support follow-the-sun business-as-usual vulnerability management operations and urgent escalations.
• Prioritize multiple vulnerabilities and operational activities based on risk and urgency.

Qualifications:

• Strong, hands-on experience with vulnerability triage and risk assessment across the end-to-end vulnerability management lifecycle.
• Strong working knowledge of CVE, CPE, and CVSS.
• Demonstrated ability to interpret vulnerability disclosures, security advisories, threat intelligence, and exploit information to assess real-world risk.
• Strong technical writing and communication skills, with the ability to clearly document impact, recommended actions, priorities, and risk rationale.
• Broad familiarity with enterprise technology platforms and associated patch and release lifecycle considerations.
• Experience working with cloud environments and large-scale open-source technology usage within enterprise environments.
• Strong prioritization and multitasking skills with an operations-focused mindset.

Tools and Technologies:

• CVE, CPE, and CVSS vulnerability standards
• Vulnerability management and risk assessment processes
• Threat intelligence and exploit/proof-of-concept analysis
• Microsoft technologies
• VMware
• Oracle and Java
• Citrix
• F5
• Cloud environments
• Enterprise open-source technologies