Vulnerability Management Analyst

Systems Limited; Punjab; Presencial; PKR 1.000.000 - 1.800.000; Tempo integral

Resumo da vaga

Systems Limited is seeking a Vulnerability Management Analyst to support vulnerability management across infrastructure, applications, and cloud environments. The analyst will validate security findings, manage vulnerability-related incidents in ServiceNow, coordinate remediation with technical teams and vendors, and verify completed remediation.

The role requires practical experience with ServiceNow, vulnerability scanners, and coordination across multiple technical teams to ensure timely

Qualificações

• Practical experience using ServiceNow to manage incident ownership, workflow status, evidence, and SLA tracking.
• Ability to interpret scanner findings, CVEs, CVSS ratings, and remediation guidance.
• Sound technical understanding of operating systems, networking, applications, and cloud security concepts.
• Strong communication skills with SMEs and vendors to resolve findings.
• Ability to manage assigned work independently and follow remediation through to closure.
• Hands-on experience with Rapid7, Wiz, CyCognito, or comparable platforms.
• Experience with ServiceNow Vulnerability Response and coordinating remediation across multiple teams.

Responsabilidades

• Monitor, triage, and maintain vulnerability-related incidents in ServiceNow, ensuring accurate ownership, priority, status, target dates, evidence, and follow-up.
• Review and validate findings and scan results from Rapid7, Wiz, CyCognito, and other applicable security tools, investigating potential false positives and duplicate findings.
• Assess vulnerability applicability, severity, exploitability, asset exposure, and business impact to support prioritisation.
• Work with infrastructure, application, cloud, and other subject matter experts to confirm findings, determine ownership, and agree remediation actions and timelines.
• Engage vendors when additional technical validation or remediation support is required, and track outstanding responses.
• Revalidate completed remediation through rescans or appropriate technical checks, document supporting evidence, and support incident closure.
• Track aging items, blockers, and findings approaching or exceeding SLA deadlines, escalating to the Vulnerability Management team as required.
• Support recurring vulnerability reviews and provide clear updates on remediation progress, open risks, blockers, and next actions.

Conhecimentos

ServiceNow usage

Vulnerability management

Vendor coordination

Cloud security

SC scanning experience

Independent work

Ferramentas

ServiceNow

Rapid7

Wiz

CyCognito

Descrição da vaga

We are seeking a Vulnerability Management Analyst to support vulnerability management across infrastructure, applications, and cloud environments. The analyst will validate security findings, manage vulnerability-related incidents in ServiceNow, coordinate remediation with technical teams and vendors, and verify completed remediation.

Key Responsibilities

• Monitor, triage, and maintain vulnerability-related incidents in ServiceNow, ensuring accurate ownership, priority, status, target dates, evidence, and follow-up.
• Review and validate findings and scan results from Rapid7, Wiz, CyCognito, and other applicable security tools, investigating potential false positives and duplicate findings.
• Assess vulnerability applicability, severity, exploitability, asset exposure, and business impact to support prioritisation.
• Work with infrastructure, application, cloud, and other subject matter experts to confirm findings, determine ownership, and agree remediation actions and timelines.
• Engage vendors when additional technical validation, product guidance, or remediation support is required, and track outstanding responses.
• Revalidate completed remediation through rescans or appropriate technical checks, document supporting evidence, and support incident closure.
• Track aging items, blockers, and findings approaching or exceeding service-level agreement (SLA) deadlines, escalating to the Vulnerability Management team as required.
• Support recurring vulnerability reviews and provide clear updates on remediation progress, open risks, blockers, and next actions.

Requirement

• Practical experience using ServiceNow to manage incident ownership, workflow status, evidence, and SLA tracking.
• Ability to interpret scanner findings, Common Vulnerabilities and Exposures (CVEs), Common Vulnerability Scoring System (CVSS) ratings, and remediation guidance.
• Sound technical understanding of operating systems, networking, applications, and cloud security concepts.
• Strong communication skills, with experience working directly with technical SMEs and vendors to resolve findings.
• Ability to manage assigned work independently, maintain accurate records, and follow remediation through to closure.
• Hands-on experience with Rapid7, Wiz, CyCognito, or comparable vulnerability and exposure-management platforms.
• Experience with ServiceNow Vulnerability Response and coordinating remediation across multiple technical teams.