Senior Vulnerability Management Analyst

We are seeking a Senior Vulnerability Management Analyst to join our cybersecurity team. This role is responsible for analyzing, assessing, and overseeing the enterprise vulnerability management program to reduce risk and protect critical systems, networks, and applications. The ideal candidate will bring deep expertise in vulnerability assessment, threat analysis, and remediation coordination, along with strong communication skills for engaging stakeholders and leadership. Responsibilities • Support governance lifecycle activities for the vulnerability management process, including monitoring, assessment, and oversight. • Identify business areas and systems that present potential security threats to the enterprise. • Manage information monitoring processes and perform in-depth analysis to mitigate risk. • Oversee and track remediation efforts to ensure vulnerabilities are addressed effectively and efficiently. • Research vulnerabilities, emerging threats, and best practices to strengthen enterprise security posture. • Deliver clear reports and recommendations to management and stakeholders. • Assist in coordinating and resolving security incidents related to identified vulnerabilities. Qualifications • 5+ years of hands-on experience in vulnerability management, including vulnerability assessment and remediation oversight. • Strong experience analyzing data to identify security weaknesses in systems, networks, and applications. • Proficiency in evaluating risks, prioritizing remediation efforts, and collaborating with technical teams to implement solutions. • Knowledge of common security threats and vulnerabilities (e.g., buffer overflow, SQL injection, cross-site scripting, race conditions, malicious code). • Familiarity with vulnerability scanning tools such as Wiz, Tenable, NexusIQ, or similar. • Strong understanding of threat intelligence sources (e.g., CISA, Kenna). • Knowledge of network security architecture, traffic flows, and application vulnerabilities. • Experience with NIST Cybersecurity Framework (CSF) and Risk Management Framework (RMF) is preferred. • Professional certifications such as CISA, CRISC, CIA, CISM, or CISSP are a plus. Skills • Advanced analytical and problem-solving skills. • Strong communication and reporting abilities. • Ability to manage multiple priorities in a fast-paced environment. • Collaborative team player with attention to detail and process rigor.