Vulnerability/Threat Management Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of the vulnerability management process from scanning to ticket creation to resolution.

• Conduct ongoing vulnerability scans utilizing Tenable and CrowdStrike Falcon.

• Inventory, evaluate, and assess assets within the public cloud infrastructure.

• Prioritize identified vulnerabilities based on exploitability, threat intelligence, and asset context.

• Validate critical findings through hands-on testing in cloud environments.

• Automate workflows from scan to ticketing, generating risk-prioritized, validated Jira tickets.

• Collaborate with teams on remediation efforts and ensure adherence to SLAs.

• Establish vulnerability management standards and monitor program performance.

• Report on coverage, remediation times, SLA compliance, and risk trends to leadership.

• Participate in mandatory on-call rotations for security incident response.

• Report directly to the Director of Security.

⛳️ Requirements

• Practical, hands-on experience managing vulnerability in a business setting.

• Preferred experience with Tenable; familiarity with Qualys, Rapid7 InsightVM, or Kenna is also relevant.

• Experience working in public cloud environments such as AWS, Azure, or GCP.

• Capability to establish test infrastructure to verify findings.

• Proficient scripting skills for automating scan-to-ticket processes; knowledge of Python is advantageous.

• Familiarity with offensive security techniques equivalent to PenTest+ or OSCP.

• Experience utilizing Jira for remediation ticketing workflows.

• Familiarity with endpoint security tools; experience with CrowdStrike Falcon Complete is beneficial.

• Certifications like CompTIA CySA+, GIAC GEVA, Security+, GSEC, PenTest+, OSCP, or SSCP are beneficial but not mandatory.

• Background in security compliance, operations, or application security.

• No degree required.

• Candidates must reside in the Greater Atlanta area and within the country specified in the application.

🏝️ Benefits

• Flexibility of a hybrid workforce.

• Opportunities for localized hiring and community/team-building initiatives.

• Recorded interviews with the option to opt-out.

• Recognized as a Great Place To Work Certified company.