Vulnerability and Cybersecurity Operations Management Analyst

Job Responsibilities

• You will be responsible for managing and executing day to day operations of our vulnerability management tools – including ensuring overall tool health and compliance, scheduling and executing scans, compiling and distributing reports, and tracking findings through resolution. Further, you will be responsible for monitoring threat intelligence feeds and help detect 0-day vulnerabilities and coordinate appropriate and timely response.
• Service ownership will include ongoing understanding of current solution-set and make recommendations on improvements, be that by vendor, capability, configuration, deployment, compliance, process, or other.
• Tool ownership will include ensuring appropriate configuration of the tools, scan sensors placement and compliance, timely scan cadence, appropriate coverage, detecting and highlighting gaps (and propose recommendations to address them), etc.
• Reporting findings to relevant stakeholders will range from regular cadence updates of scheduled scans to proactive critical 0-day related alerts, as well as adhoc scans as necessary.
• Develop relationships with stakeholders both in management and across the business units to help ensure familiarity with processes, expectations from each, and smooth execution of resolutions when vulnerabilities are detected.
• Classify and prioritize the risk of new vulnerabilities according to the specifics of our unique environment's risk level, mitigating factors, and assessment of the impacts of internal and external threats.
• Participate in impact assessments to help define prioritization and proper monitoring coverage. Provide recommendations and technical guidance for the vulnerability management program. Validate scan results, research mitigation methods and retest findings. Demonstrate understanding of infrastructure/cloud vulnerability scanning and configuration.
• Develop automation, orchestration, and scripting to reduce manual processes, improving overall efficiency while also enabling new capabilities to meet our rapidly changing needs.
• Analyze requirements to develop and manage program metrics and performance through reporting. Produce detailed reports and present metrics to key stakeholders in the business.