Cyber Threat and Vulnerability Senior Analyst

Mars; Guararema; Presencial; BRL 180 000 - 300 000; Tempo integral

Resumo da oferta

Mars is seeking a Threat & Vulnerability Management (TVM) professional to lead the end-to-end vulnerability lifecycle across applications, cloud services, and IT infrastructure. You will work within the Global TVM team to identify weaknesses, prioritize remediation, document workflows, and promote continuous improvement across stakeholders.

This role requires strong communication, collaboration, and a hands-on, customer-focused attitude, with a bias for action and delivery.

Qualificações

• 3+ years in server administration, application development, networking, or a security function supporting vulnerability management.
• Strong written and verbal communication; comfortable presenting to leadership.
• Ability to write reports and statements in clear, objective, unambiguous language
• Language: Fluent in English.
• Experience with a variety of tools and processes that can be used to assess vulnerabilities.

Responsabilidades

• Manage the end-to-end vulnerability management lifecycle, including identifying vulnerabilities and prioritizing remediation using a risk- and data-driven approach.
• Coordinate remediation efforts with stakeholders and validate fixes through follow-up verification.
• Take ownership of TVM services by driving program execution and promoting continuous improvements.
• Drive remediation activities for vulnerabilities across assets, devices, and applications.
• Develop and deploy workflows and runbooks for TVM services and capabilities.
• Guide and document workflows for remediation activities and review open vulnerabilities with cross-functional stakeholders.
• Support the continuous delivery of TVM services and establish standardized remediation workflows.

Conhecimentos

Communication

Teamwork

Report writing

Documentation

English (Fluent)

Ferramentas

Vulnerability tools

Cloud platforms (Azure/AWS/GCP)

Remediation workflows

Descrição da oferta de emprego

Job Description

Threat & Vulnerability Management (TVM) is a program for identifying weaknesses and vulnerabilities in applications, cloud services, and physical IT infrastructure. The TVM team provides the knowledge, the tools, and guidance on how to address these vulnerabilities for Mars globally. The purpose of this role is to manage the quality of the services we provide and improve delivery to all our stakeholders.

This role will be part of the Global TVM team.

What will be your key responsibilities?

• Manage the end-to-end vulnerability management lifecycle, including identifying vulnerabilities using provided security tools, assessing and prioritizing remediation using a risk- and data-driven approach, coordinating remediation efforts with stakeholders, and validating fixes through follow-up verification.
• Support TVM program services to ensure stakeholders’ needs and challenges are met while also achieving information security strategic goals
• Take ownership of assigned TVM services by driving program execution, ensuring continuous maintenance, and actively promoting adoption and ongoing improvements to the program.
• Drive remediation activities for vulnerabilities identified in assets, devices, and applications across different areas and organizations.
• Develop and deploy workflows and runbooks for our various services and capabilities
• Guide and document workflows for the vulnerability remediation activities
• Facilitated cross-functional meetings with stakeholders to review open vulnerabilities, remediation plans, and overdue findings.
• Support and guide the continuous delivery of services
• Established and documented standardized vulnerability remediation workflows, improving efficiency, consistency, and tracking of remediation activities.
• Providing guidance and technical support to teams working to support devices or applications
• Proactive mindset to propose and seek opportunities for improvement on the services that are assigned
• Strong customer-focused attitude
• Self-motivated, patient, hands-on, and driven by a positive, solution-oriented attitude
• Great teamwork

Job Specifications/Qualifications

• 3+ years of experience in either server administration, application development, networking, or a security function supporting vulnerability management
• Strong written and verbal communication skills. Must be comfortable with presenting findings to others, including leadership.
• Ability to work both individually and as part of a team.
• Ability to write reports and statements in clear, objective, unambiguous language
• Language: Fluent in English.
• Experience with a variety of tools and processes that can be used to assess vulnerabilities
• Experience managing programs and supporting large-scale platforms.
• Demonstrates strong documentation skills, constructing workflow diagrams and processes, publishing status reports, etc.
• Experience in creating and maintaining end-to-end processes is a plus.
• Experience with cloud platforms such as Azure, GCP, and AWS is a plus.

#TBdigital