Looking For Vulnerability Analyst

• Scanning & Discovery:

  Execute recurring and on-demand vulnerability scans across networks, on-premises, cloud assets (AWS, GCP, Azure), and containers using tools like Nessus, Qualys, or OpenVAS.

• Prioritization & Risk Analysis:

  Evaluate findings based on severity, exploitability, asset criticality, and threat intelligence (such as the CISA Known Exploited Vulnerabilities catalog).

• Remediation & Patch Coordination:

  Partner with IT operations, engineering, and product teams to prioritize and apply security patches or deploy compensatory controls.

• Reporting & Metrics:

  Prepare trend reports, track key performance indicators (KPIs), and communicate security posture to technical and executive stakeholders.

• Documentation & Compliance:

  Maintain operational runbooks, playbooks, and compliance alignment with standards like ISO 27001, SOC 2, or PCI-DSS

Work from office