Security Analyst / Engineer Vulnerability Management

Job Title: Security Analyst / Engineer Vulnerability Management
Location: Houston, TX

Overview
We are looking for a skilled Security Analyst/Engineer specializing in Vulnerability Management to strengthen our organization's cybersecurity by identifying, assessing, prioritizing, and driving remediation of security vulnerabilities across systems, networks, and applications.

You will work closely with IT, cloud, and application teams to reduce risk exposure and support a proactive security program aligned with industry Cybersecurity Framework and ISO/IEC 27001.

Key Responsibilities

Vulnerability Assessment

Conduct regular vulnerability scans across infrastructure, networks, cloud environments, and applications

Utilize automated tools and manual techniques to identify security weaknesses

Validate scan results to eliminate false positives and ensure accuracy

Risk Analysis & Prioritization

Assess the potential impact and exploitability of identified vulnerabilities

Prioritize remediation based on severity, business impact, and threat intelligence

Align findings with risk management frameworks and organizational priorities

Remediation Planning & Execution

Develop actionable remediation plans in collaboration with system owners and engineering teams

Recommend solutions such as patching, configuration changes, or compensating controls

Track remediation progress and ensure timely closure of vulnerabilities

Required Qualifications

7+ years of experience in cybersecurity, with a focus on vulnerability management

Hands-on experience with vulnerability scanning tools (e.g., Tenable Nessus, Qualys, or similar)

Strong understanding of:
o Common vulnerabilities and exposures (CVEs)
o Patch management processes
o Network and system security fundamentals

Familiarity with risk scoring methodologies such as CVSS

Ability to analyze and interpret scan results and security data

Preferred Qualifications

Experience with cloud environments (especially Microsoft Azure or AWS)

Knowledge of container and application security

Security certifications such as CEH, Security+, or CISSP

Experience supporting compliance and audit activities

Key Skills

Strong analytical and problem-solving abilities

Effective communication and stakeholder engagement

Attention to detail with a risk-based mindset

Ability to manage multiple priorities in a fast-paced environment