External Attack Surface & Vulnerability Analyst (VDP)

Vanguard; Charlotte (NC); On-site; USD 80,000 - 100,000; Full time

Job summary

A leading financial services firm in Charlotte is seeking a Vulnerability Analyst to validate and reproduce security findings. The role requires 3-5 years in vulnerability analysis or application security, along with scripting skills. Collaboration with product teams and governance is essential. The ideal candidate will have experience with EASM and VDP platforms. This position offers a supportive work environment and is focused on continuous improvement.

Qualifications

• 3-5 years in vulnerability analysis or application/infrastructure security.
• Proven ability to validate complex issues and write concise steps.
• Experience with EASM and VDP/bug bounty platforms.

Responsibilities

• Validate and reproduce findings from EASM and VDP submissions.
• Right-size severity and priority using exploitability signals.
• Partner with teams to negotiate remediation paths and SLAs.

Skills

Vulnerability analysis

Application security

Exploitability validation

Scripting (Python/PowerShell/Bash)

Technical writing

Tools

EASM platforms

VDP platforms

Platform scanners

Job description

A leading financial services firm in Charlotte is seeking a Vulnerability Analyst to validate and reproduce security findings. The role requires 3-5 years in vulnerability analysis or application security, along with scripting skills. Collaboration with product teams and governance is essential. The ideal candidate will have experience with EASM and VDP platforms. This position offers a supportive work environment and is focused on continuous improvement.