Senior Security Analyst - Threat and Vulnerability Management

003 The P&G Distributing LLC; Województwo mazowieckie; On-site; PLN 180,000 - 260,000; Full time

Job summary

003 The P&G Distributing LLC is seeking a Senior Security Analyst in Active Threat and Vulnerability Defense to strengthen cybersecurity posture. You will integrate real-time threat intelligence, prioritize risks across enterprise assets, and automate vulnerability detection, reporting, and remediation with cross-functional teams across the organization.

You will collaborate with threat intelligence, patching, application owners, development teams, and leadership to drive continuous improvement

Responsibilities

• Proactive Vulnerability Assessment: Conduct thorough assessments of vulnerabilities across endpoints, servers, networks, and cloud assets. Utilize advanced tools and techniques to identify weaknesses before they can be exploited.
• Continuous Threat and Vulnerability Monitoring: Implement continuous monitoring processes to track vulnerabilities and threats in real time, leveraging threat intelligence feeds and automated tools to maintain an up-to-date understanding of the threat landscape.
• Automation and Orchestration: Lead initiatives to develop and enhance automated vulnerability detection, reporting, and remediation workflows. Collaborate with cross-functional teams to streamline processes that reduce the attack surface effectively.
• Collaborative Remediation Management: Engage with security, infrastructure, and development teams to validate findings, provide risk context, and support coordinated remediation efforts. Track and report on remediation progress, ensuring timely and effective mitigation of identified vulnerabilities.
• Threat Intelligence Integration: Work closely with Threat Intelligence and Threat Hunting teams to incorporate actionable insights into vulnerability assessments. Utilize this intelligence to inform vulnerability management strategies and decision-making.
• Stakeholder Communication and Reporting: Develop and present clear, actionable reports on vulnerability posture and risk management efforts to both technical and non-technical stakeholders, including executive leadership.
• Tool and Process Optimization: Continuously assess and improve internal tools and processes for tracking threats, exposures, and mitigation activities. Stay abreast of industry best practices and emerging technologies to enhance operational efficiency.
• Ongoing Professional Development: Maintain current knowledge of global threat trends, security advisories, and zero-day vulnerabilities. Actively engage in learning opportunities related to vulnerability management frameworks, solutions and emerging security practices.
• Leadership and Mentorship: Provide guidance and mentorship to junior analysts and team members, fostering a culture of knowledge sharing and continuous improvement within the team.

Job description

Job Description

The Senior Security Analyst in Active Threat and Vulnerability Defense will play a key role in strengthening our organization’s cybersecurity posture by integrating real-time threat intelligence and adaptive risk prioritization across enterprise assets. You will be responsible for identifying, assessing, and communicating vulnerabilities across P&G systems, enhancing our security toolkit through automation and technology integration, and collaborating with threat-informed defense teams, patching teams, application owners, development teams, and security leaders throughout the organization.

Key Responsibilities

• Proactive Vulnerability Assessment: Conduct thorough assessments of vulnerabilities across endpoints, servers, networks, and cloud assets. Utilize advanced tools and techniques to identify weaknesses before they can be exploited.
• Continuous Threat and Vulnerability Monitoring: Implement continuous monitoring processes to track vulnerabilities and threats in real time, leveraging threat intelligence feeds and automated tools to maintain an up-to-date understanding of the threat landscape.
• Automation and Orchestration: Lead initiatives to develop and enhance automated vulnerability detection, reporting, and remediation workflows. Collaborate with cross-functional teams to streamline processes that reduce the attack surface effectively.
• Collaborative Remediation Management: Engage with security, infrastructure, and development teams to validate findings, provide risk context, and support coordinated remediation efforts. Track and report on remediation progress, ensuring timely and effective mitigation of identified vulnerabilities.
• Threat Intelligence Integration: Work closely with Threat Intelligence and Threat Hunting teams to incorporate actionable insights into vulnerability assessments. Utilize this intelligence to inform vulnerability management strategies and decision-making.
• Stakeholder Communication and Reporting: Develop and present clear, actionable reports on vulnerability posture and risk management efforts to both technical and non-technical stakeholders, including executive leadership.
• Tool and Process Optimization: Continuously assess and improve internal tools and processes for tracking threats, exposures, and mitigation activities. Stay abreast of industry best practices and emerging technologies to enhance operational efficiency.
• Ongoing Professional Development: Maintain current knowledge of global threat trends, security advisories, and zero-day vulnerabilities. Actively engage in learning opportunities related to vulnerability management frameworks, solutions and emerging security practices.
• Leadership and Mentorship: Provide guidance and mentorship to junior analysts and team members, fostering a culture of knowledge sharing and continuous improvement within the team.