Network Security Analyst 1

Roles/Responsibilities:

• Vulnerability Remediation Coordination
  • Review, triage, and manage vulnerability remediation assignments within ServiceNow IT Remediation Workspace.
  • Coordinate remediation efforts for vulnerabilities that cannot be addressed through normal patch cycles (e.g., emergency, high-risk CVEs, exceptions, or special remediation scenarios).
  • Serve as the central point of coordination between Server Operations, Security (CSOC), and other impacted teams throughout the remediation lifecycle.
  • Track remediation status, dependencies, and outstanding actions to ensure vulnerabilities progress to closure in accordance with policy and risk priorities.
  • Ensure remediation activities align with the Vulnerability Remediation Process and supporting work instructions.
• ServiceNow & IT Remediation Workspace
  • Create, manage, and update:
  • Vulnerability Remediation Tasks (VUL)
  • Associated Change Requests
  • Related Configuration Items (CIs)
  • Ensure accurate documentation of remediation plans, implementation steps, validation outcomes, and rollback plans within ServiceNow records.
  • Validate that vulnerability remediation tasks meet ServiceNow process requirements and audit expectations before change submission.
  • Coordinate remediation sequencing across multiple server platforms and support teams using ServiceNow workflows and assignment rules.
• Change Management & CAB Presentation
  • Prepare and submit Normal and Standard Change Requests for vulnerability remediation activities.
  • Present vulnerability remediation changes to CAB, clearly articulating:
  • Security risk and urgency
  • Scope and impacted systems
  • Remediation approach
  • Testing and validation plans
  • Rollback and risk mitigation measures
  • Address CAB questions and coordinate follow up actions as needed to secure approval.
  • Ensure approved changes are scheduled, communicated, and implemented in alignment with change windows and operational constraints.
• Cross Platform Server Support
  • Coordinate vulnerability remediation across:
  • Windows Server environments
  • Linux Server environments (RHEL)
  • Citrix server platforms
  • Work with platform SMEs to understand remediation requirements and constraints without directly executing patching activities.
  • Ensure consistent remediation tracking and reporting across heterogeneous server platforms.
• Organization, Tracking & Reporting
  • Maintain detailed tracking of:
  • Outstanding vulnerabilities
  • Change approvals
  • Implementation status
  • Validation and closure evidence
  • Support audit, compliance, and leadership reporting with accurate, up to date remediation metrics and status summaries.
  • Identify process gaps, bottlenecks, or recurring issues and recommend improvements to remediation and change workflows.

Mandatory Skills:

1. 3 years- Proven experience coordinating server vulnerability remediation in an enterprise environment.
2. 3 years- Strong hands on experience with ServiceNow, including Change Management and IT Remediation Workspace.
3. 3 years- Solid understanding of change management processes and presenting changes to a CAB.
4. 3 years- Practical knowledge of server platforms: Windows Server, Linux Server, Citrix Infrastructure
5. 3 years- Exceptional organizational skills with the ability to manage multiple parallel remediation efforts.
6. 3 years- Strong written and verbal communication skills, especially for CAB and cross team coordination.

Desirable Skills:

1. 1 year- Experience supporting vulnerability remediation in a government, regulated, or large enterprise environment.
2. 1 year- Familiarity with vulnerability management workflows involving CSOC, Infrastructure, and Application teams.
3. 1 year- Experience coordinating remediation outside of standard patching schedules (emergency or out of band remediation).
4. 1 year- Prior exposure to audit, compliance, or security evidence collection related to vulnerability remediation.
5. 1 year- Timely remediation of high risk and exception-based vulnerabilities.
6. 1 year- High quality, CAB approved change records with complete and accurate documentation.
7. 1 year- Clear, auditable tracking of vulnerability remediation status from assignment through closure.
8. 1 year- Improved coordination and reduced remediation delays across server platforms.