Remote Senior Vulnerability Management Analyst III

Summa Health; Cleveland (OH); Hybrid; USD 75,000 - 113,000; Full time

Benefits offered by this job

Medical, dental, vision

Retirement Savings Plan

Paid time off

Education Assistance

Daily Pay

Job summary

Summa Health is seeking a Cybersecurity Vulnerability Management Analyst to identify, prioritize, and drive remediation of vulnerabilities across the organization's IT, cloud, and medical device environments. You will collaborate with engineers, system owners, and clinical teams to accelerate fixes without disrupting care.

Experience in healthcare security, seven years in information security, and relevant certifications are required.

Qualifications

• Formal Education: Bachelor's degree in Computer Science, Cybersecurity, IT, or Engineering.
• 7+ years information security and IT experience in a complex healthcare environment.
• Certifications: CompTIA Security+, CySA+, CASP; GVAC/CISSP preferred.

Responsibilities

• Perform enterprise vulnerability identification, assessment, prioritization, and remediation tracking across on-prem and cloud environments.
• Operate vulnerability scanning platforms (e.g., Rapid7 InsightVM) and validate findings with risk-based prioritization.
• Coordinate with Infrastructure, Application Owners, Clinical Engineering, and vendors to drive timely remediation within SLAs.
• Produce vulnerability metrics, dashboards, and reports for governance and leadership.

Skills

Vulnerability management

CVSS/EPSS knowledge

Communication skills

Risk prioritization

Threat awareness

Education

Bachelor's degree in CS/Cybersecurity/Engineering

Tools

Rapid7 InsightVM

Tenable

Qualys

Job description

Summa Health is seeking a Cybersecurity Vulnerability Management Analyst to identify, prioritize, and drive remediation of vulnerabilities across the organization's IT, cloud, and medical device environments. You will collaborate with engineers, system owners, and clinical teams to accelerate fixes without disrupting care.

Experience in healthcare security, seven years in information security, and relevant certifications are required.