Vulnerability Analyst
The Coca-Cola Company
Dice Job Match Score™
🔢 Crunching numbers...
Job Details
Skills
- Management
- Reporting
- Vulnerability Management
- Software Security
- System On A Chip
- Security Operations
- Web Applications
- OWASP
- Workflow
- Communication
- Oracle ASM
- Application Service Management
Summary
The Vulnerability Analyst is responsible for reviewing, validating, and coordinating the resolution of security vulnerabilities across The Coca-Cola Company's systems and digital assets. The role supports the company's Vulnerability Disclosure Program (VDP, Bug Bounty Program (BBP) and Attack Surface Management (ASM) operations - assessing incoming reports, confirming they are valid and in scope, assigning the right owners, and tracking each issue through to a verified fix. Working closely with researchers, asset owners, and remediation teams, the Vulnerability Analyst helps ensure vulnerabilities are prioritized, addressed within established SLAs, and resolved effectively.
Function Related Activities/Key Responsibilities:
- Review and validate incoming vulnerability reports across the VDP, BBP, and ASM programs, confirming scope and severity.
- Coordinate remediation with asset owners and internal teams, and verify that fixes are effective before closing each report.
- Track and prioritize vulnerabilities to ensure they are resolved within established SLAs.
- Serve as the primary point of contact for external security researchers throughout the disclosure and resolution process.
- Maintain accurate vulnerability records and reporting in the team's tracking platforms.
Qualifications & Experience requirements:
- 2+ years in vulnerability management, application security, SOC, or a related security operations role.
- Working knowledge of common web/application vulnerability classes (e.g., OWASP Top 10) and the ability to read and reproduce a proof-of-concept.
- Demonstrated ability to validate findings, judge scope, and assess severity accurately.
- Familiarity with vulnerability tracking / disclosure platforms and ticketing workflows.
- Strong written communication - able to correspond with external researchers and internal owners clearly and diplomatically.
- Preferred experience - experience running or supporting a VDP, bug bounty program or ASM function; hands-on experience with platforms such as Intigriti, HackerOne, Bugcrowd or an ASM vendor; understanding of enterprise remediation and risk-exception governance process.
- Dice Id: coke
- Position Id: R-145657
- Posted 2 days ago
Company Info
On May 8, 1886, Dr. John Pemberton brought his perfected syrup to Jacobs' Pharmacy in downtown Atlanta, where the first glass of Coca‑Cola was poured. In its first year, about nine Coca-Cola drinks were served per day.
Today, The Coca-Cola Company, with numerous brands sold across more than 200 countries and territories, serves 2.2 billion drinks per day. We own 32 billion-dollar brands across several beverage categories worldwide. Our global portfolio of beverage brands includes the following:
• Sparkling Soft Drinks: Coca-Cola, Diet Coke/Coca-Cola Light, Coca-Cola Zero Sugar, Fanta, Fresca, Schweppes (owned by The Coca-Cola Company in certain countries other than the United States), Sprite and Thums Up
• Water, Sports, Coffee and Tea: Aquarius, Ayataka, BODYARMOR, Ciel, Costa, Crystal, Dasani, Fuze Tea, Georgia, glacéau smartwater, glacéau vitaminwater, Gold Peak, I LOHAS, Powerade and Topo Chico
• Juice, Value-Added Dairy and Plant-Based Beverages: Core Power, Del Valle, fairlife, innocent, Maaza, Minute Maid, Minute Maid Pulpy, Santa Clara and Simply
Our strong and stable bottling and distribution system helps us capture growth by manufacturing, distributing and selling existing, enhanced and new innovative products to consumers throughout the world.
Never miss an opportunity! Create an alert based on the job you applied for.Similar Jobs
It looks like there aren't any Similar Jobs for this job yet.
Search all similar jobs