Let s do this. Let s change the world. In this vital role is focused on identifying, assessing, prioritizing, and tracking the remediation of vulnerabilities across the organization s technology stack. The Vulnerability Management Analyst plays a key role in the security operations team by ensuring known vulnerabilities are managed through their lifecycle using structured processes and tools. The individual will analyze vulnerability scan data, correlate threat intelligence (e.g., KEV, EPSS), and work closely with infrastructure, application, and business teams to drive risk-based remediation.
Roles & Responsibilities:
-
Analyze vulnerability scan results from tools like Tenable, Qualys, or Rapid7 to identify security weaknesses across infrastructure and applications.
-
Prioritize vulnerabilities using multiple criteria, including CVSS, KEV (Known Exploited Vulnerabilities), EPSS (Exploit Prediction Scoring System), asset criticality, and business context.
-
Partner with IT and DevOps teams to track remediation progress and provide technical guidance on mitigation strategies.
-
Monitor threat intelligence feeds to correlate vulnerabilities with current exploit activity.
-
Create and maintain vulnerability metrics, dashboards, and reports for leadership and compliance teams.
-
Support vulnerability assessment activities in cloud environments (AWS, Azure, etc.).
-
Maintain documentation related to the vulnerability management lifecycle.
-
Assist in policy and process development related to vulnerability and patch management.
-
Participate in audits and compliance efforts (e.g., SOX, ISO, NIST, PCI).
What we expect of you
We are all different, yet we all use our unique contributions to serve patients.
Master s degree and 1 to 3 years of experience in Cybersecurity, vulnerability management or information security operations OR
Bachelor s degree and 3 to 5 years of experience in Cybersecurity, vulnerability management or information security operations OR
Diploma and 7 to 9 years of experience in Cybersecurity, vulnerability management or information security operations
Must-Have Skills:
-
Familiarity with vulnerability management tools (e.g., Tenable, Qualys, Rapid7).
-
Understanding of CVSS scoring, vulnerability lifecycle, and remediation workflows.
-
Basic knowledge of threat intelligence and how it applies to vulnerability prioritization.
-
Working knowledge of network, operating system, and application-level security.
-
Ability to analyze scan data and correlate it with business context and threat intelligence.
Preferred Qualifications:
Good-to-Have Skills:
-
Experience with KEV, EPSS, and other threat-based scoring systems.
-
Familiarity with patch management processes and tools.
-
Exposure to cloud security and related scanning tools (e.g., Prisma Cloud, AWS Inspector).
-
CompTIA Security+
-
GIAC GSEC / GCIH
-
Qualys Vulnerability Management Specialist (QVMS)
-
Tenable Certified Nessus Auditor (TCNA)
Soft Skills:
-
Analytical Thinking - Ability to interpret complex data sets and assess risk effectively
-
Attention to Detail - Precision in identifying and tracking vulnerabilities and remediation status
-
Communication Skills - Ability to communicate technical findings to both technical and non-technical audiences
-
Collaboration & Teamwork - Able to work across IT, DevOps, and security teams to drive resolution
-
Curiosity & Continuous Learning - Willingness to know the latest with evolving threats and technologies
-
Problem-Solving Approach - Capability to identify solutions to security weaknesses in diverse environments
What you can expect of us
As we work to develop treatments that take care of others, we also work to care for your professional and personal growth and well-being. From our competitive benefits to our collaborative culture, we ll support your journey every step of the way.
In addition to the base salary, Amgen offers competitive and comprehensive Total Rewards Plans that are aligned with local industry standards.