Senior Vulnerability & CTEM Analyst

Tech Economy; Ciudad de México; Híbrido; MXN 600.000 - 900.000; Jornada completa

Descripción de la vacante

Bain & Company in Mexico City offers a hybrid role as Vulnerability Management Analyst within its Cyber Operations team. You will mature our vulnerability and exposure program across servers, endpoints, and multi-cloud workloads.

You will lead CTEM, set remediation standards, and mentor junior analysts while partnering with IT and engineering to translate findings into actionable risk insights for leadership.

Formación

• 3–5 years hands-on in vulnerability or security operations.
• Deep understanding of vulnerability lifecycle and SLA governance.
• Hands-on with Qualys VMDR, Wiz and Tanium for deployment and reporting.
• Experience with CVSS, EPSS, KEV and threat intelligence.
• Strong data and reporting skills including Excel/BI tooling.
• Proven ability to communicate to engineers and leadership.

Responsabilidades

• Own and mature the end-to-end vulnerability management lifecycle.
• Administer core exposure tooling stack: Qualys VMDR, Wiz, Tanium.
• Lead CTEM scoping, prioritization, validation, and mobilization.
• Prioritize vulnerabilities using CVSS, EPSS, KEV and threat intel.
• Enforce SLAs and drive accountability across teams.
• Coordinate with threat intel to surface risks for leadership.
• Define risk-acceptance standards and maintain audit docs.
• Build dashboards and executive reports on exposure and aging.
• Mentor junior analysts and act as escalation point.
• Advise on secure configuration and program maturity.

Conocimientos

Vulnerability management

CTEM

English communication

Threat intelligence

Data reporting

Multi-cloud environments

Herramientas

Qualys VMDR

Wiz

Tanium

Descripción del empleo

Bain & Company in Mexico City offers a hybrid role as Vulnerability Management Analyst within its Cyber Operations team. You will mature our vulnerability and exposure program across servers, endpoints, and multi-cloud workloads.

You will lead CTEM, set remediation standards, and mentor junior analysts while partnering with IT and engineering to translate findings into actionable risk insights for leadership.