Urgent Need: Vulnerability Risk Analyst - Malvern, PA (Hybrid)

Hi,
Hope you are doing well.
 
This is Tahir from Drevol LLC. Please find below the job description for your reference and please let me know if you are interested in this position.
 
Job Title: Vulnerability Risk Analyst
Location: Malvern, PA (Hybrid)
Duration: 12 Months

Qualifications
Microsoft 365 and Copilot: Robust understanding of Microsoft 365 and Copilot functionalities, including integration and customization.
Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or equivalent practical experience.
Security certification(s) preferred (e.g., Security+, SSCP, CISSP or equivalent), especially if the role will independently assess risk treatment quality.
Demonstrated foundation in cybersecurity principles (vulnerability lifecycle, risk concepts, remediation approaches) and the ability to apply them in an enterprise environment.
Proven security expertise across infrastructure products and services. 
Working knowledge of vulnerability management outcomes: identifying, assessing, prioritizing, and enabling workflows that help drive vulnerabilities to closure or approved treatment
Experience supporting or governing vulnerability scanning/assessment programs for enterprise assets (on prem and/or cloud workloads), including compliance to remediation SLAs.
Ability to perform a structured investigation of a suspected false positive and document the outcome and decision path.
Ability to explain a vulnerability’s impact in plain business terms and produce a concise risk treatment summary that is approver‑ready.
Ability to support downgrade/override decisions with written rationale that is auditable and explicitly scope

Skills Required
Proficiency in creating, structuring, and analyzing datasets using automation, development frameworks, and AI‑driven tools.
Robust writing skills to produce audit‑ready rationales and summaries (risk acceptances, downgrade rationale, false positive outcomes).
Comfortable facilitating discussions with technical and non‑technical stakeholders to clarify facts, confirm remediation options, and drive decisions.
Robust attention to detail for data accuracy
Familiarity with vulnerability and posture tooling across on‑prem and cloud contexts
Experience with reporting ecosystems