Cybersecurity Vulnerability Analyst

Northwest Partners; United States; Remote; USD 90,000 - 120,000; Full time

Benefits offered by this job

Fully remote engagement

Global team collaboration

Job summary

Northwest Partners is seeking an experienced Cybersecurity Vulnerability Management Analyst for a long-term, fully remote engagement supporting a global cybersecurity operation. The role focuses on assessing newly disclosed vulnerabilities, evaluating their impact, and assigning risk and severity ratings.

You will triage vulnerabilities, use threat intel, and maintain accurate security documentation to support global vulnerability management. Remote work with a 24/5 coverage model is expected.

Qualifications

• Experience in vulnerability management, triage, and risk assessment.
• Strong understanding of CVE, CPE, and CVSS frameworks.
• Familiarity with enterprise technologies and threat intel sources.
• Ability to produce clear, audit-ready security documentation.

Responsibilities

• Triage newly disclosed vulnerabilities and assess relevance to systems and applications.
• Evaluate impact and exploitability using threat intel and PoC details.
• Assess real-world risk and assign severity ratings per standards.
• Maintain high-quality, audit-ready case notes and recommended mitigations.
• Support a 24/5 coverage model across a globally distributed team.

Skills

Vulnerability management

Risk assessment

CVSS/ CVE / CPE frameworks

Threat intelligence

Technical writing

Tools

Vulnerability scanners

Job description

Northwest Partners is seeking an experienced Cybersecurity Vulnerability Management Analyst for a long-term, fully remote engagement supporting a global cybersecurity operation. The role will focus on assessing newly disclosed vulnerabilities, evaluating their potential impact across enterprise environments, determining exploitability, and assigning appropriate risk and severity ratings. You will play a key role in vulnerability triage, threat assessment, and maintaining accurate security documentation to support global vulnerability management operations.

What You Will Do

• Triage newly disclosed vulnerabilities and assess their relevance to customer applications, systems, and infrastructure.
• Evaluate vulnerability impact and exploitability using threat intelligence, security advisories, exploit information, and proof-of-concept (PoC) details.
• Assess potential attack paths and determine the real-world risk to enterprise environments.
• Assign severity and risk ratings using industry standards, including CVE, CPE, and CVSS.
• Analyze vulnerability disclosures and security bulletins across a range of enterprise technologies.
• Identify and prioritize vulnerabilities based on severity, exploitability, and potential business impact.
• Maintain accurate, high-quality, and audit-ready case notes documenting findings, risk assessments, and recommendations.
• Support vulnerability management operations through a follow-the-sun delivery model.
• Manage urgent vulnerability escalations and ensure critical security issues are appropriately prioritized.
• Work collaboratively with global cybersecurity teams to maintain consistent vulnerability assessment processes.

What You Will Bring

• Experience as a Vulnerability Management Analyst, Cybersecurity Analyst, or Vulnerability Assessment Specialist.
• Strong hands-on experience in vulnerability management, triage, and risk assessment.
• Strong understanding of CVE, CPE, and CVSS frameworks.
• Experience analyzing security vulnerabilities, threat intelligence, exploit information, and PoC details.
• Ability to assess vulnerability exploitability and determine real-world security risks.
• Familiarity with enterprise technologies such as Microsoft, VMware, Oracle/Java, Citrix, and F5.
• Understanding of enterprise infrastructure, cloud environments, and large-scale open-source technologies.
• Knowledge of vulnerability remediation processes and enterprise patch/release lifecycles.
• Strong technical writing skills with the ability to produce clear and accurate security documentation.
• Excellent prioritization and multitasking skills, with the ability to work in a fast-paced operational environment.
• Comfortable working remotely as part of a globally distributed team and supporting a 24/5 coverage model.

Disclaimer

All candidates will be asked to briefly show a government-issued ID on video during the first interview. This step protects the integrity of the hiring process given the rise in applicant impersonation and employment fraud.

About Northwest Partners

Northwest Partners is an equal opportunity employer. At Northwest Partners, we are dedicated to moving at the speed of innovation. We work with clients across the globe to provide exceptional knowledge, talent, and resources. As a trusted partner, we merge the client's vision with our expertise to deliver powerful results. Northwest Partners is known for building and managing elite teams in technology across diverse industries. Our mission is to empower every talent and every client to achieve more.