Maddisoft has the following immediate opportunity, let us know if you or someone you know would be interested. Send in your resume ASAP. - U.S. Citizens and those authorized to work in the U.S. are encouraged to apply. Send in resume along with LinkedIn profile without which applications will not be considered. Call us NOW! ***Visa sponsorship is available for this position.
Job Title: Vulnerability Management Analyst / Security Analyst
Location: Remote
Position Overview
We are seeking an experienced Vulnerability Management Analyst to support enterprise security operations by managing vulnerability identification, prioritization, remediation tracking, and reporting. The ideal candidate will have a strong background in vulnerability lifecycle management, risk assessment, and alignment with industry standards such as National Institute of Standards and Technology (NIST).
Key Responsibilities
Vulnerability Inventory & Baseline Establishment
- Review existing vulnerability data from scans, assessments, and security tools
- Establish and maintain a consolidated vulnerability baseline
- Develop and document remediation timelines based on risk posture and aging
Risk Classification & Prioritization
- Categorize and prioritize vulnerabilities based on severity, exploitability, and business impact
- Align classification and prioritization with NIST guidelines
- Ensure remediation timelines align with defined risk-based SLAs
Remediation Coordination & Communication
- Coordinate remediation efforts with system, server, and application owners
- Communicate risk context, expectations, and remediation deadlines clearly
- Track remediation progress and identify blockers or dependencies
- Escalate overdue or high-risk vulnerabilities to appropriate governance channels
Tracking, Metrics & Reporting
- Maintain accurate tracking of vulnerability remediation status
- Produce periodic reports summarizing vulnerability posture, remediation progress, and risk exposure
Validation & Closure
- Validate remediation through scan results and supporting evidence
- Confirm closure of vulnerabilities in tracking systems
- Ensure proper documentation of risk acceptance or exceptions when remediation is not feasible
Program Improvement
- Identify process gaps and control weaknesses in vulnerability management
- Recommend improvements aligned with NIST standards and organizational policies
Required Qualifications
- 8+ years of experience in vulnerability management and security operations
- Proven experience in:
- Vulnerability inventory and baseline establishment
- Risk classification and prioritization
- Tracking and managing vulnerability remediation
- Producing security and status reports
- Validating remediation using scan results and evidence
- Strong understanding of vulnerability management tools and frameworks
- Experience aligning processes with NIST standards and guidelines
- Excellent analytical, communication, and coordination skills
Preferred Qualifications
- Experience working in enterprise or government environments
- Familiarity with tools such as vulnerability scanners (e.g., Qualys, Nessus, Rapid7)
- Knowledge of security frameworks and compliance standards
- Relevant cybersecurity certifications (e.g., Security+, CISSP, CEH)
Never miss an opportunity! Create an alert based on the job you applied for.
