Cyber Defense Analyst: Vulnerability & Attack Surface

IQVIA; Ciudad de México; Vor Ort; MXN 480.000 - 720.000; Vollzeit

Zusammenfassung

IQVIA in Mexico City is seeking an experienced security professional to lead vulnerability management, external attack surface management and CTEM oversight. You will coordinate scanning, triage findings, and remediation with asset owners, and support penetration testing programs across cloud, web apps, and networks.

The role emphasizes threat intelligence monitoring, SOP maintenance, KPI reporting on exposure and SLA adherence, and escalation of high-risk findings to the Senior Analyst.

Qualifikationen

• Bachelor's Degree in Computer Science or related field; equivalent experience.
• Pref 2 years of IT/security experience.
• Fluent English, written and spoken.
• Experience with Vulnerability Management / scanning tools, EASM, Threat Intelligence Platforms or feeds, ITSM tickets.
• Knowledge of networking (TCP/IP, DNS, TLS), Windows and Linux, web apps and cloud basics.
• Understanding of CVSS, EPSS, known-exploited vulnerability catalogs and OWASP Top 10.
• Exposure to CSPM/CNAPP, CTEM platforms, scripting (Python, PowerShell) and BI reporting.
• CompTIA Security+ or CySA+ or GIAC GSEC.
• CompTIA PenTest+, eJPT, CEH or cloud fundamentals security cert.

Aufgaben

• Operate vulnerability and external attack surface scanning; monitor tool coverage and health, and identify unknown, unmanaged or misconfigured internet-facing assets.
• Triage, validate and prioritize findings using severity, exploitability, threat intelligence and asset criticality; filter out false positives.
• Identify asset owners and raise, track and follow up remediation tickets against agreed SLAs.
• Support the penetration testing program: collect scope details, schedule tests, track findings through remediation and coordinate retests.
• Monitor threat intelligence for newly exploited vulnerabilities and assess impact on the organization's assets.
• Maintain Standard Operating Procedures and produce dashboards and KPI reports on exposure, aging and SLA adherence.
• Escalate high-risk exposures and contested findings to the Senior Analyst.

Kenntnisse

Vulnerability management

External attack surface

CTEM

Penetration testing

Threat intelligence

ITSM

Python

PowerShell

Networking basics

Windows

Ausbildung

Bachelor's degree in Computer Science

Tools

Vulnerability scanners

EASM

Threat intel platforms

ITSM tooling

Jobbeschreibung

IQVIA in Mexico City is seeking an experienced security professional to lead vulnerability management, external attack surface management and CTEM oversight. You will coordinate scanning, triage findings, and remediation with asset owners, and support penetration testing programs across cloud, web apps, and networks.

The role emphasizes threat intelligence monitoring, SOP maintenance, KPI reporting on exposure and SLA adherence, and escalation of high-risk findings to the Senior Analyst.