Job Title: Information Security Analysts
Location: Yonkers, NY
Employer: 4Consulting, Inc
Position Type: Full Time
Worksite: Onsite
Position Summary
4Consulting, Inc is seeking a qualified Information Security Analysts to support technology consulting, application development, systems analysis, testing, data management, cybersecurity, infrastructure, or project delivery services for client projects. The selected candidate will perform duties consistent with the client’s project requirements and company delivery standards.
Essential Duties and Responsibilities
The candidate will be responsible for:
Review and triage vulnerabilities, assess criticality and exploitability, and conduct manual investigations to prioritize high-risk findings and support timely security reviews.
Investigate internal exposure using SQL queries, asset tracking, and vulnerability management tools to identify affected systems, validate exposure, and determine potential business and technical impacts.
Validate remediation attestations and supporting evidence, track vulnerability resolution, and coordinate with technical teams to confirm that identified risks have been appropriately addressed.
Prepare technical risk assessments and stakeholder reports, document investigation findings, and communicate vulnerability status, remediation priorities, and outstanding risks to support security decision-making.
Minimum Qualifications
The position requires:
Education:
Bachelor’s degree in Computer Science, Information Technology, Engineering, Business, or related field, or equivalent combination of education and experience.
Experience:
Experience in vulnerability management, cybersecurity operations, threat analysis, security triage, and remediation validation. The source lists an Intermediate (3–5 years) skill level but does not specify a separate minimum experience requirement.
Technical Skills:
Vulnerability Management, Threat Analysis, Vulnerability Triage, Exploitability Assessment, SQL, Python, Qualys, Snyk, Asset Tracking, Technical Risk Reporting
Business / Domain Skills:
Experience supporting enterprise vulnerability management programs, including risk prioritization, exposure assessment, threat analysis, and remediation tracking.
Experience validating business rules, application workflows, interfaces, data, batch processes, and end-to-end transactions through functional, integration, regression, UAT, and end-to-end testing.
Experience investigating internal asset exposure, evaluating critical vulnerabilities, conducting manual security reviews, and validating remediation evidence and risk attestations.
Experience communicating technical risk findings, vulnerability status, and remediation priorities to infrastructure, application, cybersecurity, and business stakeholders.
Communication:
Ability to communicate with technical and business stakeholders.
Documentation:
Ability to prepare project documentation, status updates, and deliverables.
Work Authorization:
Must be legally authorized to work in the United States. Sponsorship may be considered where permitted by company policy and project requirements.
Certification Required
None
Travel Required
None
Supervisory Role
No
Preferred Qualifications
Experience evaluating vulnerability severity, exploitability, and potential impact, with the ability to prioritize critical findings for rapid investigation and remediation.
Experience using vulnerability management platforms such as Qualys and Snyk, querying SQL databases, tracking affected assets, and applying Python scripting to support security analysis.
Strong analytical, investigative, documentation, and communication skills, with the ability to manage multiple vulnerability reviews and produce clear technical risk assessments.
Equal Employment Opportunity Statement
4Consulting, Inc is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, citizenship status, immigration status where protected by law, or any other legally protected status. All candidates will be evaluated based on job-related qualifications, experience, skills, availability, and ability to perform the essential duties of the position.
