InfoSec Vulnerability Metrics Data Analyst Remote

Experian; United States; Remote; USD 80,000 - 120,000; Full time

Job summary

Experian is seeking an InfoSec Vulnerability Metrics & Data Analyst to enhance its security strategy through data-driven insights. This role requires developing vulnerability metrics, maintaining reports, and collaborating with various teams to interpret risk from vulnerabilities in cloud and application environments. The successful candidate will possess strong analytical skills and a background in cybersecurity, focusing on improving security posture through detailed reporting and metrics.

Benefits

Great compensation package and bonus plan

Core benefits including medical, dental, vision, and matching 401K

Flexible work environment

Flexible time off including vacation and sick

Qualifications

• Background in cybersecurity or information security.
• Experience with vulnerability management tools and metrics.
• Ability to collect and analyze qualitative and quantitative data.

Responsibilities

• Guide development of vulnerability management metrics and reporting.
• Develop and automate metrics with partners.
• Communicate outstanding vulnerabilities to stakeholders.

Skills

Data Analysis

Vulnerability Management

Cyber Security

Cloud Platforms

SQL

Tableau

PowerBI

Excel

Education

Bachelor's degree in Computer Science

5+ years of equivalent work experience

Tools

ServiceNow

Confluence

Wiz

Qualys

Rapid7

Job description

Job Description

As an InfoSec Vulnerability Metrics & Data Analyst, you will provide data-driven insights contributing to our organization's security strategy and vulnerability management practices. You will establish and maintain regional and global reports to support the Cloud and Application Attack Surface Management scope, embrace and integrate a threat-informed approach, and perform analytical reviews to enhance Experian's Cloud and Application Attack Surface Management.

You will join our Cloud and Application Attack Surface Management team and report to the Director of Attack Surface Management.

You'll have the opportunity to:

• Guide the development of vulnerability management metrics, gathering feedback and sharing metrics with senior leaders
• Evaluate and define functional requirements for vulnerabilities, flaws, and misconfiguration metrics
• Develop, maintain, and run advanced reporting, dashboard, and scorecard results
• Communicate metrics to system owners and partners on outstanding vulnerabilities, issues, and concerns
• Develop and automate vulnerability metrics with specific procedures for data collection, analysis, and charting, partnering with necessary teams
• Determine requirements for technical solutions and tools to implement Vulnerability Metrics
• Develop vulnerability KPIs and metrics to demonstrate coverage and remediation effectiveness
• Develop program efficacy metrics to support platform stability and improvements
• Review business and internal requests for new or vulnerability management reporting, design the solution, and develop metrics
• Work with stakeholders to identify risk-based vulnerability management metrics that align with the security program and security risk management.
• Develop procedures to structure the metrics and reporting framework as part of a long-term strategy
• Produce scoping documents outlining the requirements for business requests
• Provide recommendations based on data analysis and findings related to vulnerability management processes
• Aggregate vulnerability data across technologies such as endpoints, servers, network equipment, and cloud and interpret and present risk.

Qualifications:
Qualifications

Your background:

• Bachelor's degree in Computer Science or a related field, or 5+ years of equivalent work experience in Cyber Security/Information Security and Vulnerability Management reporting
• Experience with tools such as SQL, Tableau, PowerBI, and Excel
• Experience in ServiceNow query and report development
• Experienced with collaboration tools such as ServiceNow and Confluence
• Understanding of the end-to-end security metrics process, including metrics collection, tracking, and reporting
• Understanding of Common Vulnerability Scoring System (CVSS), including calculations and implications of base, temporal, and environmental scoring factors
• Experience collecting, analyzing, and interpreting qualitative and quantitative data from several sources to detail results and analyze findings to provide threat intelligence
• Familiarity with architecture, engineering, and operations of one or more vulnerability management tools, such as Wiz, Qualys, Rapid7, and ServiceNow
• Knowledge of major cloud platforms (AWS, Azure, or GCP)
• A broad understanding of cybersecurity threats, vulnerabilities, controls, and remediation strategies
• #LI-Remote

Benefits/Perks:

• Great compensation package and bonus plan
• Core benefits including medical, dental, vision, and matching 401K
• Flexible work environment, ability to work remotely, hybrid, or in-office
• Flexible time off including volunteer time off, vacation, sick, and 12-paid holidays

Additional Information

Our uniqueness is that we celebrate yours. Experian's culture and people are important differentiators. We take our people agenda very seriously and focus on what matters; DEI, work/life balance, development, authenticity, engagement, collaboration, wellness, reward & recognition, volunteering... the list goes on. Experian's people first approach is award-winning; Great Place To Work in 24 countries, FORTUNE Best Companies to work and Glassdoor Best Places to Work (globally 4.4 Stars) to name a few. Check out Experian Life on social or our Careers Site to understand why.

Experian is proud to be an Equal Opportunity and Affirmative Action employer. Innovation is an important part of Experian's DNA and practices, and our diverse workforce drives our success. Everyone can succeed at Experian and bring their whole self to work, irrespective of their gender, ethnicity, religion, colour, sexuality, physical ability or age. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.