Cybersecurity Vulnerability & Threat Analyst

IQVIA Inc; Ciudad de México; Hybrid; MXN 460,000 - 620,000; Full time

Job summary

IQVIA Inc is seeking a Security Analyst to support Vulnerability Management, Attack Surface Management, CTEM, and Penetration Testing oversight. The role emphasizes triage, remediation tracking, and collaboration with asset owners to meet SLAs.

The ideal candidate has 2 years in IT/security, strong English, and hands-on experience with vulnerability tools, EASM, and threat intel. A degree in CS or related field is preferred, with certification exposure valued.

Qualifications

• Bachelor's Degree in Computer Science or related field or equivalent experience.
• 2 years of IT or information security experience required.
• Fluent English, written and spoken.
• Experience with vulnerability management, EASM, and threat intel.
• Knowledge of networking (TCP/IP, DNS, TLS), Windows and Linux, web apps and cloud basics.
• Understanding of CVSS, EPSS, OWASP Top 10.
• Exposure to CSPM/CNAPP, CTEM platforms; scripting (Python/PowerShell) and BI reporting preferred.

Responsibilities

• Operate vulnerability and external attack surface scanning; monitor tool health and coverage.
• Triage, validate, and prioritize findings using severity, threat intel, and asset criticality.
• Identify asset owners and track remediation tickets against SLAs.
• Support penetration testing: scope details, scheduling, remediation tracking, retests.
• Monitor threat intel for newly exploited vulnerabilities and assess impact.

Skills

Vulnerability management

Threat intelligence

IT security fundamentals

Networking basics

Education

Bachelor's Degree in Computer Science or related field

Tools

Vulnerability scanning tools

External Attack Surface Management (EASM)

Threat Intelligence Platforms

ITSM ticketing systems

Job description

IQVIA Inc is seeking a Security Analyst to support Vulnerability Management, Attack Surface Management, CTEM, and Penetration Testing oversight. The role emphasizes triage, remediation tracking, and collaboration with asset owners to meet SLAs.

The ideal candidate has 2 years in IT/security, strong English, and hands-on experience with vulnerability tools, EASM, and threat intel. A degree in CS or related field is preferred, with certification exposure valued.