Vulnerability Management Analyst (Level 2) — Cyber Risk Champion

Inchcape; Colombia; Remote; COP 72,000,000 - 110,000,000; Full time

Benefits offered by this job

Supportive environment

Career growth

Work-life balance

Industry leadership

Job summary

Inchcape Digital is seeking a Level 2 Vulnerability Management Analyst to lead the organization’s vulnerability program across endpoints, servers, cloud environments, applications, and external assets. You will leverage ASM, Web Application Security Testing, CSPM, and automated testing tools to identify, prioritize, and reduce cyber risk.

You will partner with technology teams, review findings, maintain dashboards, and support threat analysis to strengthen overall security posture in a dynamic,

Qualifications

• Experience in Vulnerability Management, Security Operations, or Security Engineering.
• Hands-on experience with Tenable, Qualys, Rapid7, or similar platforms.
• Experience with ASM, DAST/Web Application Scanning, and CSPM technologies.
• Strong understanding of cloud, infrastructure, and application security.
• Experience managing third-party penetration testing and red team activities.
• Knowledge of the Continuous Threat Exposure Management (CTEM) framework and risk-based vulnerability management practices.
• Understanding of Cyber Threat Intelligence (CTI) and its role in cybersecurity operations.
• Strong analytical, communication, reporting, and stakeholder management skills.

Responsibilities

• Manage and operate the enterprise vulnerability management platform across endpoints, servers, cloud environments, applications, and internet-facing assets.
• Analyze, validate, prioritize, and track vulnerabilities through remediation.
• Partner with technology teams to coordinate vulnerability remediation efforts.
• Conduct Attack Surface Management (ASM) and external exposure assessments.
• Review findings from Web Application Security Testing and CSPM platforms.
• Administer automated penetration testing and exposure validation tools.
• Coordinate third-party penetration testing and red team engagements.
• Maintain vulnerability dashboards, reporting, and program metrics.
• Support threat analysis and vulnerability response activities.

Job description

Inchcape Digital is seeking a Level 2 Vulnerability Management Analyst to lead the organization’s vulnerability program across endpoints, servers, cloud environments, applications, and external assets. You will leverage ASM, Web Application Security Testing, CSPM, and automated testing tools to identify, prioritize, and reduce cyber risk.

You will partner with technology teams, review findings, maintain dashboards, and support threat analysis to strengthen overall security posture in a dynamic,