Vulnerability Analyst

This is a fully remote position, open to applicants in Portugal.

📋 Description

• Oversee and sustain vulnerability scanning operations utilizing both commercial and open-source security tools across the enterprise infrastructure, cloud environments, operating systems, applications, and publicly exposed services.

• Keep track of threat intelligence feeds, vendor advisories, security research, and emerging vulnerabilities to pinpoint risks affecting Intermedia systems and escalate critical threats as necessary.

• Collaborate directly with infrastructure, operations, engineering, and application teams to formulate effective remediation and mitigation strategies for identified vulnerabilities.

• Monitor remediation progress in relation to established SLAs, follow up on overdue items, and convey risk and remediation updates to leadership through metrics and reports.

• Maintain and support the vulnerability management platform, scanner infrastructure, cloud integrations, asset inventory integrations, and associated automation workflows.

• Uphold vulnerability management procedures, standards, documentation, and operational processes to ensure precision, consistency, and adherence to security best practices.

• Partner with Security Operations and Incident Response teams during security investigations, threat analyses, incident response actions, and remediation efforts.

• Aid in identifying unmanaged, unsupported, or non-compliant systems through asset inventory analysis and vulnerability assessment activities.

• Support audit, compliance, and governance tasks by keeping precise remediation records, tracking exceptions, and providing supporting documentation.

⛳️ Requirements

• Bachelor’s Degree or an equivalent combination of education and experience.

• At least 2 years of pertinent experience.

• Familiarity with Vulnerability Management and its associated processes and procedures.

• Proficiency in utilizing Qualys for scanning servers, desktops, cloud workloads, and network devices to detect security vulnerabilities.

• Fundamental knowledge of Information Security and a general understanding of systems and networking principles.

• Experience with Microsoft technologies and Linux operating systems.

• Awareness of OWASP Top 10 and familiarity with vulnerability management concepts such as CVE, CVSS, and emerging threat intelligence.

• Outstanding written and verbal communication skills with the ability to collaborate effectively across teams.

• Demonstrates ingenuity, teamwork, strong accountability, and the capability to prioritize tasks with urgency.

• Knowledge of cloud platforms and related technologies; experience with Python and PowerShell is advantageous but not mandatory.

🏝️ Benefits

• We hire, promote, and compensate employees based on their ability to perform their job responsibilities, without regard to race, color, creed, religion, sex, gender, marital status, national origin, ancestry, age, citizenship, physical or mental disability, sexual orientation, or any other basis protected by applicable law (collectively referred to in our Code of Conduct as “Protected Classes”).

• We do not tolerate employment discrimination in the workplace, and we are dedicated to making reasonable accommodations for identified disabilities or other limitations as required by all applicable laws.

• We are an equal opportunity employer and appreciate diversity within our company.