Remote Vulnerability Management Analyst: Cloud & DevSecOps

Optomi; Town of Texas (WI); On-site; USD 120,000 - 150,000; Full time

Job summary

Optomi, in partnership with a large, global organization, is seeking an experienced Vulnerability Management Analyst to support enterprise vulnerability identification, risk prioritization, remediation, and reporting across traditional and cloud-based environments.

The ideal candidate will bring hands-on experience in AWS, containers/Kubernetes, and DevSecOps workflows, working with infrastructure, cloud, application, and security teams to drive remediation.

Qualifications

• 5+ years of hands-on experience in Vulnerability Management, Vulnerability Assessment, or Exposure Management.
• Strong understanding of the end-to-end vulnerability management lifecycle.
• Hands-on experience with enterprise vulnerability management platforms such as Tenable, Qualys, Rapid7, CrowdStrike, Wiz, or comparable technologies.
• Experience analyzing and prioritizing vulnerabilities beyond scanner severity alone, incorporating factors such as exploitability, exposure, business/asset criticality, and threat context.
• Demonstrated experience partnering with technical teams to drive vulnerabilities from identification through remediation and validated closure.
• Strong understanding of vulnerability remediation across operating systems, infrastructure, applications, and cloud workloads.
• Practical vulnerability management or security experience within AWS environments.
• Working knowledge of containers and Kubernetes and experience addressing vulnerabilities affecting containerized workloads.
• Understanding of CI/CD and DevSecOps processes, including how vulnerability and security scanning can be incorporated into development and deployment workflows.
• Experience responding to critical and zero-day vulnerabilities.
• Strong troubleshooting, analytical, and communication skills.

Responsibilities

• Perform hands-on vulnerability management activities across enterprise infrastructure, applications, and cloud environments.
• Analyze vulnerability findings and determine appropriate risk and remediation priority based on severity, exploitability, asset criticality, exposure, and other relevant risk factors.
• Manage vulnerabilities through the full lifecycle, including identification, analysis, prioritization, remediation coordination, exception management, validation, and closure.
• Support vulnerability management activities across AWS infrastructure and cloud workloads.
• Partner with Cloud Engineering, Infrastructure, DevOps, Application Development, and Security teams to drive timely remediation.
• Analyze vulnerabilities affecting containers and Kubernetes environments and work with engineering teams to address identified risks.
• Support the integration of vulnerability scanning and security controls into CI/CD and DevSecOps workflows.
• Provide technical remediation guidance to infrastructure, cloud, and application teams.
• Analyze and coordinate response to critical vulnerabilities, zero-days, and emerging threats.
• Leverage vulnerability management and cloud security platforms to identify and prioritize security exposure.
• Track vulnerability remediation progress, exceptions, SLAs, and risk trends.
• Develop vulnerability metrics, dashboards, and reporting for technical teams and security leadership.
• Identify opportunities to automate vulnerability management processes, reporting, enrichment, and remediation workflows.
• Utilize APIs and scripting where appropriate to improve the scalability and efficiency of vulnerability management operations.

Skills

Vulnerability management

AWS/cloud experience

Containers/Kubernetes

DevSecOps workflows

Vulnerability scanning tools

Tools

Tenable

Qualys

Rapid7

CrowdStrike

Wiz

Job description

Optomi, in partnership with a large, global organization, is seeking an experienced Vulnerability Management Analyst to support enterprise vulnerability identification, risk prioritization, remediation, and reporting across traditional and cloud-based environments.

The ideal candidate will bring hands-on experience in AWS, containers/Kubernetes, and DevSecOps workflows, working with infrastructure, cloud, application, and security teams to drive remediation.