VULNERABILITY/THREAT MANAGEMENT ANALYST

JOB DESCRIPTION

• Performs vulnerability assessments to identify weaknesses and countermeasures and providing timely assessment reports to key stakeholders.
• Conducts manual and automated code and configuration reviews to identify application and infrastructure vulnerabilities with integration to Continuous Integration / Continuous Deployment (CI/CD) pipelines.
• Manages the end-to-end vulnerability life-cycle from discovery to closure including scanning, reviewing vulnerabilities, and prioritizing vulnerabilities based on threat intelligence and attack surface of assets. Supports compliance and Security Assessment and Authorization (SA&A) processes activities, recommending security controls and corrective actions to mitigate vulnerability risks.

Required:

2+ years of experience designing, implementing, and tuning security solutions for development, applications, platforms, environments

2+ years of experience integrating and optimizing existing and new security tools and using the suite of tools to continuously improve the security posture

2+ years of experience performing vulnerability assessments and reporting

2+ years of experience implementing and validating security controls in support of SA&A

Strong critical thinking skills

Bachelor’s degree required

Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future

Preferred:

Security+ / CISSP / or Similar Security certification

Cloud security certification (AWS/Azure)