Cyber Security Analyst

Job Purpose

We are seeking an experienced Vulnerability Management Analyst to identify, assess, prioritize, and track security vulnerabilities across enterprise systems, networks, and applications.

The ideal candidate will have strong hands-on experience with vulnerability assessment tools, vulnerability analysis, risk prioritization, remediation coordination, and security reporting.

Key Responsibilities

Vulnerability Assessment & Scanning

• Conduct vulnerability assessments across systems, networks, and applications.
• Operate and manage vulnerability scanning tools such as:
• Qualys
• Tenable
• Nexpose
• Perform regular vulnerability scans and review scan results.
• Identify and document security vulnerabilities across enterprise environments.

Vulnerability Analysis & Risk Assessment

• Analyze vulnerability scan results and validate identified vulnerabilities.
• Assess the severity and business impact of vulnerabilities.
• Prioritize vulnerabilities based on risk and severity.
• Apply CVSS scoring and risk assessment methodologies.
• Identify common threat vectors and potential security impacts.
• Apply knowledge of the OWASP Top 10 when assessing application vulnerabilities.

Remediation Management

• Coordinate with IT, infrastructure, network, and application teams to address identified vulnerabilities.
• Track remediation activities and ensure vulnerabilities are mitigated within agreed timelines.
• Follow up on outstanding vulnerabilities and escalate overdue remediation activities.
• Validate remediation activities through re-scanning and vulnerability verification.

Reporting & Documentation

• Prepare vulnerability assessment reports and management dashboards.
• Develop vulnerability metrics and risk reports for management.
• Maintain accurate vulnerability records and remediation status.
• Support audit and compliance requirements through appropriate security documentation.
• Provide regular reporting on vulnerability trends, remediation progress, and outstanding risks.

Stakeholder Collaboration

• Work closely with IT and application teams to communicate identified vulnerabilities and recommended remediation actions.
• Provide technical guidance regarding vulnerability remediation.
• Coordinate remediation activities across multiple technology teams.
• Escalate critical or high-risk vulnerabilities to relevant stakeholders.

Required Technical Skills

• Vulnerability Management
• Vulnerability Assessment
• Vulnerability Scanning
• Qualys
• Tenable
• Nexpose
• CVSS
• OWASP Top 10
• Risk Assessment
• Vulnerability Validation
• Remediation Tracking
• Security Reporting
• Security Dashboards
• Enterprise Security

Required Experience

• 5+ years of relevant vulnerability management or cybersecurity experience.
• Hands-on experience with vulnerability scanning and assessment tools.
• Experience analyzing and validating vulnerability scan results.
• Experience prioritizing vulnerabilities based on risk.
• Experience coordinating vulnerability remediation with IT and application teams.
• Experience preparing security reports, dashboards, and metrics.
• Strong understanding of common enterprise security threats and vulnerabilities.

Preferred Certifications

• CEH
• CompTIA Security+
• or equivalent cybersecurity certification.

Education

Bachelor's degree in:

• Computer Science
• Information Technology
• Cybersecurity
• Information Security
• or a related discipline.