Info Security Analyst for Vulnerability Remediation - locals only

Value Innovation Labs; San Antonio (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

Value Innovation Labs seeks a Vulnerability Management Specialist to review vulnerability data from multiple sources across infrastructure and applications and to help automate remediation and reporting.

You will support dashboards, analytics, and remediation workflows, collaborating with IT teams to strengthen security posture across on‑premise and cloud environments.

Qualifications

• 4+ years of Vulnerability/Secure Configuration Management, Analysis, Reporting with Strong understanding of Security Baselines, Policies and Scanner configurations.
• Hands-on experience with maintenance, support and problem resolution for vulnerability management tools technologies like Qualys, Apiiro, Wiz, etc.
• Direct experience of working with remediation teams and Working knowledge of vulnerability management Tools with preferred experience – ServiceNow, JIRA, Microsoft Office etc.
• Experience and Knowledge on managing and performing root cause analysis, risk identification, and risk mitigation.
• Contemporary experience understanding the areas of system and vulnerability management and security configuration management for on premise and cloud environments.
• Interpersonal skills including the ability to; collaborate effectively, manage challenging relationships, assist more junior staff developmentally and display excellent written and oral communications.
• Experience should include automation of maintenance and support functions for assigned areas of expertise to support continuous improvement of quality and consistency of operational tasks.
• Proficient knowledge of software delivery life cycles (Waterfall and Agile) and strong Project Management skills.

Responsibilities

• Assist in reviewing vulnerabilities' data from multiple sources across technologies and a changing environment including infrastructure and applications.
• Assist in improving and automating vulnerability management routing and remediation, including data ingestion, normalization, and compliance detections on assets.
• Assist in partnering with tools and technology teams to troubleshoot, develop, implement and automate security solutions to protect data.
• Assist in providing support and resolution for vulnerability remediation reporting issues.
• Provide technical support for vulnerability management tools and tickets.
• Provide analysis and validation post remediation and suggest improvements.
• Assist in ensuring Vulnerability Tickets are presented in dashboards and forwarded to remediators as necessary.
• Develop and implement action plans to improve vulnerability management tools and processes in their area(s) of technology.
• Monitoring and tracking of Penetration Test findings, evidence collection, retest, reporting and exception handling.
• Manage the performance analysis of vulnerability management tools and plan changes to improve functionality.
• Ensure collaboration with threat intelligence and monitoring teams to monitor security infrastructure across technologies.
• Act as primary contact for communicating with business users during ServiceNow or Tableau dashboards development in IT Vulnerability & Patch Management.
• Maintain, refine and support dashboards and reports, enabling self-service when possible.

Skills

Interpersonal skills

Collaboration

Written and verbal communication

Tools

Qualys

Apiiro

Wiz

ServiceNow

JIRA

Microsoft Office

Job description

• Assist in the responsibility for reviewing vulnerabilities' data from multiple sources (i.e., external / internal penetration testing, internal / external vulnerability scanning, PCI Issuer/Merchant/Hybrid Vulnerability scanning etc.) across multiple technologies and a changing environment including infrastructure and applications.

• Assist in improving and automating existing vulnerability management routing and remediation. Including but not limited, data ingestion & normalization, compliance metrics and detections on assets.

• Assist in partnering with tools and technology teams to troubleshoot, develop, select, implement and automate appropriate security solutions to keep system data protected from internal and external threats.

• Assist in providing support and resolution for vulnerability remediation reporting issues.

• Provide technical support for vulnerability management tools and Tickets.

• Provides analysis and validation post remediation, opportunities for improvements and out of the box thinking for optimizations and solving roadblocks.

• Assist in ensuring Vulnerability Tickets are presented in appropriate dashboards, reports, and forwarded to remediators as necessary.

• When provided with an objective to improve Vulnerability management tools and process in their area(s) of technology; develops and implements action plans.

• Monitoring and tracking of Penetration Test findings, Evidence collection, retest, reporting and Exception handling.

• Manages the analysis of the performance of installed vulnerability management tools and functionalities. Proposes and implements any required changes to improve current functionalities, including identifying and planning for any resulting impacts on other technologies.

• Ensures Vulnerability management teams collaborate with threat intelligence and monitoring team(s) to engineer solutions that will monitor the performance of the security infrastructure supporting various technologies.

• Act as primary contact for communicating with Business users during any ServiceNow or Tableau related dashboards development in IT Vulnerability & Patch Management Area.

• Responsible to maintain, refine and support existing dashboard & Reports, automating and providing for self-service whenever possible

Required Qualifications:

• 4+ years of Vulnerability/Secure Configuration Management, Analysis, Reporting with Strong understanding of Security Baselines, Policies and Scanner configurations.

• Hands-on experience with maintenance, support and problem resolution for vulnerability Management tools technologies like Qualys, Apiiro, Wiz, etc.

• Direct experience of working with remediation teams and Working knowledge of vulnerability management Tools with preferred experience – ServiceNow, JIRA, Microsoft Office etc.

• Experience and Knowledge on managing and performing root cause analysis, risk identification, and risk mitigation.

• Contemporary experience understanding the areas of system and vulnerability management and security configuration management for on premise and cloud environments.

• Interpersonal skills including the ability to; collaborate effectively, manage challenging relationships, assist more junior staff developmentally and display excellent written and oral communications.

• Experience should include automation of maintenance and support functions for assigned areas of expertise to support continuous improvement of quality and consistency of operational tasks.

• Proficient knowledge of software delivery life cycles (Waterfall and Agile) and strong Project Management skills.