Cyber Threat and Vulnerability Senior Analyst

Mars UK; Arujá; Presencial; BRL 180 000 - 280 000; Tempo integral

Resumo da oferta

Mars UK is seeking a TVM professional to lead end-to-end vulnerability management across assets and applications as part of the Global TVM team. You will coordinate remediation with stakeholders, develop workflows, and promote continuous improvement to security services.

Strong English communication and cross-functional collaboration will be essential in this global role. The role emphasizes ownership, data-driven prioritization, and delivery excellence to strengthen Mars’ security posture

Qualificações

• 3+ years in server administration, application development, networking, or a security function supporting vulnerability management
• Strong written and verbal communication; comfortable presenting findings to leadership
• Ability to work both individually and as part of a team
• Ability to write reports in clear, objective language
• Fluent in English

Responsabilidades

• Manage end-to-end vulnerability management lifecycle with provided tools
• Support TVM program services to meet stakeholder needs and strategic goals
• Own assigned TVM services and drive program execution and improvements
• Drive remediation activities across assets, devices and applications
• Develop and deploy workflows and runbooks for services

Conhecimentos

Vulnerability management

Program management

Documentation

Communication

Cloud platforms

Ferramentas

Azure

GCP

AWS

Descrição da oferta de emprego

Job Description:

Threat & Vulnerability Management (TVM) is a program for identifying weaknesses and vulnerabilities in applications, cloud services, and physical IT infrastructure. The TVM team provides the knowledge, the tools, and guidance on how to address these vulnerabilities for Mars globally. The purpose of this role is to manage the quality of the services we provide and improve delivery to all our stakeholders.

This role will be part of the Global TVM team.

What will be your key responsibilities?

• Manage the end-to-end vulnerability management lifecycle, including identifying vulnerabilities using provided security tools, assessing and prioritizing remediation using a risk- and data-driven approach, coordinating remediation efforts with stakeholders, and validating fixes through follow-up verification.

• Support TVM program services to ensure stakeholders’ needs and challenges are met while also achieving information security strategic goals

• Take ownership of assigned TVM services by driving program execution, ensuring continuous maintenance, and actively promoting adoption and ongoing improvements to the program.

• Drive remediation activities for vulnerabilities identified in assets, devices, and applications across different areas and organizations.

• Develop and deploy workflows and runbooks for our various services and capabilities

• Guide and document workflows for the vulnerability remediation activities

• Facilitated cross-functional meetings with stakeholders to review open vulnerabilities, remediation plans, and overdue findings.

• Support and guide the continuous delivery of services

• Established and documented standardized vulnerability remediation workflows, improving efficiency, consistency, and tracking of remediation activities.

• Providing guidance and technical support to teams working to support devices or applications

• Proactive mindset to propose and seek opportunities for improvement on the services that are assigned

• Strong customer-focused attitude

• Self-motivated, patient, hands-on, and driven by a positive, solution-oriented attitude

• Great teamwork

Job Specifications/Qualifications

• 3+ years of experience in either server administration, application development, networking, or a security function supporting vulnerability management

• Strong written and verbal communication skills. Must be comfortable with presenting findings to others, including leadership.

• Ability to work both individually and as part of a team.

• Ability to write reports and statements in clear, objective, unambiguous language

• Language: Fluent in English.

• Experience with a variety of tools and processes that can be used to assess vulnerabilities

• Experience managing programs and supporting large-scale platforms.

• Demonstrates strong documentation skills, constructing workflow diagrams and processes, publishing status reports, etc.

• Experience in creating and maintaining end-to-end processes is a plus.

• Experience with cloud platforms such as Azure, GCP, and AWS is a plus.

#TBdigital