Vulnerability Management Analyst

Job Title: Vulnerability Management Analyst

Location: Remote

Duration:  12 Months

Position Overview:

The Vulnerability Management Analyst will support vulnerability triage and risk assessment activities for a Client customer’s enterprise applications and technology assets. This role will evaluate newly disclosed vulnerabilities, determine potential exposure and exploitability, assign appropriate severity and risk ratings, and maintain clear, audit-ready documentation. The position requires a strong operational mindset and the ability to support business-as-usual activities as well as urgent vulnerability escalations.

Responsibilities:

·        Triage newly disclosed vulnerabilities and determine their relevance and potential impact to enterprise applications and assets.

·        Assess vulnerability exploitability using threat intelligence, exploit and proof-of-concept information, and likely attack paths.

·        Clearly document potential exposure, impact, and risk.

·        Assign firm-aligned severity and risk ratings mapped to recognized industry standards, including Common Vulnerabilities and Exposures (CVE), Common Platform Enumeration (CPE), and Common Vulnerability Scoring System (CVSS), with clear supporting rationale.

·        Maintain high-quality, audit-ready case notes and supporting documentation.

·        Support follow-the-sun business-as-usual vulnerability management operations and urgent escalations.

·        Prioritize multiple vulnerabilities and operational activities based on risk and urgency.

Qualifications:

·        Strong, hands-on experience with vulnerability triage and risk assessment across the end-to-end vulnerability management lifecycle.

·        Strong working knowledge of CVE, CPE, and CVSS.

·        Demonstrated ability to interpret vulnerability disclosures, security advisories, threat intelligence, and exploit information to assess real-world risk.

·        Strong technical writing and communication skills, with the ability to clearly document impact, recommended actions, priorities, and risk rationale.

·        Broad familiarity with enterprise technology platforms and associated patch and release lifecycle considerations.

·        Experience working with cloud environments and large-scale open-source technology usage within enterprise environments.

·        Strong prioritization and multitasking skills with an operations-focused mindset.

Tools and Technologies:

·        CVE, CPE, and CVSS vulnerability standards

·        Vulnerability management and risk assessment processes

·        Threat intelligence and exploit/proof-of-concept analysis

·        Microsoft technologies

·        VMware

·        Oracle and Java

·        Citrix

·        F5

·        Cloud environments

·        Enterprise open-source technologies