Hybrid SOC Vulnerability Management Analyst II

Executive Office of Technology Services and Security; Chelsea (MA); Hybrid; USD 74,000 - 91,000; Full time

Benefits offered by this job

Hybrid work schedule

Job summary

The Executive Office of Technology Services and Security (EOTSS) in Chelsea, MA, is seeking a SOC Vulnerability Management Program Security Analyst II to join the Security Operations Team. The role focuses on vulnerability scanning, reporting, tracking, remediation, and analysis to strengthen statewide security.

The position supports a hybrid work model and requires strong collaboration with multiple agencies.

Qualifications

• Minimum of two (2) years of professional experience in information security or IT security, providing technical guidance across systems, networks, and applications in support of vulnerability management initiatives.
• Strong commitment to continuous learning and professional development.
• Understanding of networking concepts, Windows and Linux operating systems, and common security protocols.
• Experience supporting vulnerability management programs, including vulnerability assessment tools, cloud security solutions, and related technologies.
• Experience coordinating with third-party penetration testing vendors, including engagement scoping, testing coordination, results review, remediation tracking, and reporting.
• Working knowledge of cloud computing platforms and security principles across IaaS, PaaS, and SaaS (AWS/Azure).
• Strong knowledge of networking/infrastructure technologies (TCP/IP, DNS, DHCP, VLANs, Active Directory, Microsoft 365, SSL/TLS).
• Understanding CVSS and vulnerability scoring methodologies.
• Experience with enterprise vulnerability management tools such as Tenable One and Veracode.
• Strong analytical, organizational, and problem-solving skills with attention to detail.
• Excellent written and verbal communication with both technical and non-technical stakeholders.
• Ability to manage multiple priorities and work independently in a fast-paced environment.
• Experience with Veracode SAST, DAST, and SCA.
• Experience with scripting languages (Python, PowerShell, JavaScript, PHP, or Ruby).
• Experience implementing or supporting SOAR platforms.
• Hands-on experience with Tenable One ecosystem.

Responsibilities

• Act as primary contact for one or more agencies, driving continuous improvements in security posture.
• Conduct vulnerability scans and assessments to maintain visibility and proactive threat detection.
• Communicate and report vulnerabilities to system owners and stakeholders.
• Maintain threat intelligence knowledge to anticipate targeted vulnerabilities.
• Track and analyze vulnerability metrics over time for remediation progress.
• Assist with prioritization of vulnerabilities on customer assets based on severity and impact.
• Perform other duties as directed by management.

Skills

Vulnerability management

Security analytics

Cloud security

Python

PowerShell

Veracode

Tenable One

Education

Bachelor’s degree substitute

Associate’s degree substitute

Tools

Tenable One

Veracode

Job description

The Executive Office of Technology Services and Security (EOTSS) in Chelsea, MA, is seeking a SOC Vulnerability Management Program Security Analyst II to join the Security Operations Team. The role focuses on vulnerability scanning, reporting, tracking, remediation, and analysis to strengthen statewide security.

The position supports a hybrid work model and requires strong collaboration with multiple agencies.