GIO Vulnerability Remediation Analyst

Sysco Northeast Rdc; Houston (TX); Hybrid; USD 110,000 - 140,000; Full time

Job summary

Sysco Northeast Rdc is looking for a security-focused professional to support vulnerability management within the Infrastructure Operations program. You’ll analyze findings and drive remediation aligned with Sysco’s Best Practice standards.

The role requires collaboration across Cyber, IT, and business units, with on-site presence 3–4 days per week. Cloud security experience and familiarity with scanning tools are essential for success.

Qualifications

• Bachelor’s degree or equivalent work experience in IT security.
• Experience with vulnerability management processes and remediation cycles.
• Proficiency using vulnerability scanning tools and reporting outputs.

Responsibilities

• Collaborate with Cyber teams to align remediation with Sysco’s best practices.
• Direct internal teams to patch, decommission, and manage software versions.
• Attend quarterly business reviews with Executives to discuss environment posture.
• Attend Vulnerability Management meetings to align reporting and actions.
• Interpret threat and vulnerability data from Sysco’s vulnerability scanning tools.

Skills

Vulnerability management

Threat data interpretation

Security reporting

Cloud security

Cross-team collaboration

Education

Bachelor's in Computer Information Systems

AWS Certified Security – Specialty

Azure Security Engineer Associate

GCP Cloud Security

CompTIA Security+

Systems Security Certified Practitioner

Tools

Kenna

Tanium

Wiz.io

Job description

This is a hybrid position requiring an on-site presence 3 to 4 days per week. Please note that the number of days on-site can increase based on business needs.

Job Summary:

This position sits within the Infrastructure Operations program at Sysco where you’ll play a key role in analyzing vulnerability findings, determining best practices for remediation & adoption of Sysco’s Best Practice standards.

Duties and Responsibilities:

• Collaborating with Cyber, leverage data & reports to direct internal teams to align to Sysco’s best practices for patch, posture and utilization of public & private cloud offerings
• Collaborate with various teams across Sysco to ensure timely remediation, decommissioning, and/or and software versioning
• Attend quarterly business reviews with Executives to report on & discuss specific environment posture
• Attend Vulnerability Management meetings to align priorities into team reporting and actions
• Ability to interpret threat and vulnerability data generated by Sysco’s vulnerability scanning tools

Education Preferred:

• Bachelors in Computer Information Systems

Experience Required:

• Work Equivalent Experience

Licenses/Certifications Preferred:

AWS Certified Security – Specialty, Azure Security Engineer Associate, GCP Cloud Security, CompTIA Security+, Systems Security Certified Practitioner

Technical Skills and Abilities:

Appreciation of application and IT product diversity, interoperability, and functional knowledge in IT security

Ability to consume scan output from tools such as Kenna, Tanium & Wiz.io

Understanding of VM lifecycle within cloud environment for discovering scanning, analyzing, and triage

Ability to interpret threat and vulnerability data generated by Sysco’s vulnerability scanning tools

Provide reporting to patching teams detailing prioritized needs for remediation

Physical Demands:

Reasonable accommodations will be made to enable individuals with disabilities to perform the essential functions of this job.

Work Environment:

Hybrid