Information Security Analyst

Sapear Inc; San Antonio (TX); Hybrid; USD 55,000 - 69,000; Full time

Job summary

Sapear Inc. is seeking an Information Security Analyst in the San Antonio or Plano area on a hybrid schedule. The role focuses on vulnerability review across multiple sources, improving automation, and partnering with teams to deploy secure solutions.

You will support vulnerability management tooling and dashboards. Candidates should have 4+ years in vulnerability or secure configuration management, hands-on experience with Qualys, Apiiro, Wiz, and familiarity with ServiceNow or JIRA.

Qualifications

• 4+ years of Vulnerability/Secure Configuration Management, Analysis, Reporting with strong understanding of baselines and scanner configurations.
• Hands-on experience with vulnerability tools like Qualys, Apiiro, Wiz, etc.
• Experience with remediation teams and vulnerability management tools such as ServiceNow and JIRA.
• Strong communication and collaboration skills; ability to work with cross-functional teams.

Responsibilities

• Review vulnerabilities data from multiple sources across infrastructure and applications.
• Improve and automate vulnerability management routing and remediation processes.
• Partner with tools/technology teams to implement security solutions.
• Provide support for vulnerability remediation reporting and dashboards.
• Maintain dashboards and reports, enabling self-service where possible.
• Monitor penetration test findings, retest, and report on progress.
• Coordinate with threat intelligence and monitoring teams to optimize security tooling.

Skills

Vulnerability analysis

Security baselines

Automation basics

Team collaboration

Project management

Communication

Risk identification

Tools

Qualys

Apiiro

Wiz

ServiceNow

JIRA

Job description

Information security Analyst

San Antonio TX or Plano TX – Hybrid

40/hr W2

Role & Responsibilities

• Assist in the responsibility for reviewing vulnerabilities' data from multiple sources (i.e., external / internal penetration testing, internal / external vulnerability scanning, PCI Issuer/Merchant/Hybrid Vulnerability scanning etc.) across multiple technologies and a changing environment including infrastructure and applications.
• Assist in improving and automating existing vulnerability management routing and remediation. Including but not limited, data ingestion & normalization, compliance metrics and detections on assets.
• Assist in partnering with tools and technology teams to troubleshoot, develop, select, implement and automate appropriate security solutions to keep system data protected from internal and external threats.
• Assist in providing support and resolution for vulnerability remediation reporting issues.
• Provide technical support for vulnerability management tools and Tickets.
• Provides analysis and validation post remediation, opportunities for improvements and out of the box thinking for optimizations and solving roadblocks.
• Assist in ensuring Vulnerability Tickets are presented in appropriate dashboards, reports, and forwarded to remediators as necessary.
• When provided with an objective to improve Vulnerability management tools and process in their area(s) of technology; develops and implements action plans.
• Monitoring and tracking of Penetration Test findings, Evidence collection, retest, reporting and Exception handling.
• Manages the analysis of the performance of installed vulnerability management tools and functionalities. Proposes and implements any required changes to improve current functionalities, including identifying and planning for any resulting impacts on other technologies.
• Ensures Vulnerability management teams collaborate with threat intelligence and monitoring team(s) to engineer solutions that will monitor the performance of the security infrastructure supporting various technologies.
• Act as primary contact for communicating with Business users during any ServiceNow or Tableau related dashboards development in IT Vulnerability & Patch Management Area.
• Responsible to maintain, refine and support existing dashboard & Reports, automating and providing for self-service whenever possible

Required Qualifications

• 4+ years of Vulnerability/Secure Configuration Management, Analysis, Reporting with Strong understanding of Security Baselines, Policies and Scanner configurations.
• Hands-on experience with maintenance, support and problem resolution for vulnerability Management tools technologies like Qualys, Apiiro, Wiz, etc.
• Direct experience of working with remediation teams and Working knowledge of vulnerability management Tools with preferred experience – ServiceNow, JIRA, Microsoft Office etc.
• Experience and Knowledge on managing and performing root cause analysis, risk identification, and risk mitigation.
• Contemporary experience understanding the areas of system and vulnerability management and security configuration management for on premise and cloud environments.
• Interpersonal skills including the ability to; collaborate effectively, manage challenging relationships, assist more junior staff developmentally and display excellent written and oral communications.
• Experience should include automation of maintenance and support functions for assigned areas of expertise to support continuous improvement of quality and consistency of operational tasks.
• Proficient knowledge of software delivery life cycles (Waterfall and Agile) and strong Project Management skills.

Regards !!

Himanshu Sharma

Sapear Inc.

Cell : +1 Ext : 1007