Security Analyst – Vulnerability Management & Cloud/Data Security Posture

Associates Systems LLC; Irving (TX); On-site; USD 80,000 - 110,000; Full time

Job summary

Associates Systems LLC in Irving, TX is seeking a Security Analyst with hands-on experience in vulnerability management, CSPM, and DSPM to join our security team. This role focuses on identifying and prioritizing risks across our infrastructure, cloud environments, and data assets.

You will operate Rapid7 InsightVM or InsightCloudSec, monitor CSPM across AWS/Azure/GCP, and use Varonis to govern data access and detect anomalies.

Qualifications

• 2+ years with Rapid7 (InsightVM or InsightCloudSec) for vulnerability management.
• 2+ years CSPM tools and concepts.
• 2+ years Varonis for DSPM.
• Understanding CVSS and remediation prioritization.
• Experience with cloud environments (AWS, Azure, and/or GCP) and misconfigurations.
• Knowledge of data governance, access controls, and permissions models.
• Strong analytical and communication skills.
• Familiarity with security frameworks (NIST, CIS Benchmarks, ISO 27001) a plus.

Responsibilities

• Operate Rapid7 to scan, prioritize, and track remediation of vulnerabilities across on‑prem and cloud assets.
• Monitor cloud posture with CSPM across AWS/Azure/GCP to identify misconfigurations and risky permissions.
• Use Varonis to monitor data security posture, permissions analysis, and anomalous data access.
• Produce remediation reports for IT and engineering stakeholders.
• Track remediation progress and report risk trends and SLA compliance.
• Investigate alerts related to data exposure and excessive permissions.
• Collaborate with IT, DevOps and applications teams to remediate findings.
• Maintain policies, rules, and dashboards in Rapid7, CSPM, and Varonis.
• Support audits by providing evidence of vulnerability management and data security controls.
• Document findings and procedures related to vulnerability and posture management programs.

Skills

Vulnerability management

CSPM

DSPM

Data governance

Cloud security

Risk assessment

Analytical thinking

Stakeholder communication

Tools

Rapid7 InsightVM/InsightCloudSec

Varonis

CSPM tooling

Jira/ServiceNow

Job description

Security Analyst – Vulnerability Management & Cloud/Data Security Posture

• Irving, TX

Security Analyst – Vulnerability Management & Cloud/Data Security Posture

Location: Irving, TX

About the Role

We are seeking a Security Analyst with hands-on experience in vulnerability management, cloud security posture management (CSPM), and data security posture management (DSPM) to join our security team. This role is responsible for identifying, assessing, and helping remediate security risks across our infrastructure, cloud environments, and data assets.

Key Responsibilities

• Manage and operate Rapid7 InsightVM (or equivalent) to scan, identify, prioritize, and track remediation of vulnerabilities across on-prem and cloud assets
• Monitor and manage cloud security posture using CSPM tooling to identify misconfigurations, compliance gaps, and risky permissions across cloud environments (AWS, Azure, and/or GCP)
• Utilize Varonis to monitor data security posture, including sensitive data discovery, access governance, permissions analysis, and anomalous data access/behavior
• Perform regular vulnerability scans, analyze results, and produce prioritized remediation reports for IT and engineering stakeholders
• Track remediation efforts to closure and report on risk trends, SLA compliance, and overall security posture metrics
• Investigate and respond to alerts related to data exposure, excessive permissions, and abnormal access patterns
• Collaborate with IT, DevOps, and application teams to remediate identified vulnerabilities and misconfigurations
• Assist in maintaining and tuning policies, rules, and dashboards within Rapid7, CSPM, and Varonis platforms
• Support audit and compliance efforts by providing evidence of vulnerability management and data security controls
• Document findings, processes, and procedures related to vulnerability and posture management programs

Required Qualifications

• 2+ years of hands-on experience withRapid7(InsightVM or InsightCloudSec) for vulnerability management
• 2+ years of experience withCloud Security Posture Management (CSPM)tools and concepts
• 2+ years of experience withVaronisfor data security posture management (DSPM)
• Solid understanding of vulnerability scanning, risk scoring (CVSS), and remediation prioritization
• Familiarity with cloud environments (AWS, Azure, and/or GCP) and common misconfigurations
• Understanding of data governance, access controls, and permissions models
• Strong analytical and problem-solving skills with attention to detail
• Ability to communicate findings clearly to both technical and non-technical stakeholders
• Familiarity with security frameworks (NIST, CIS Benchmarks, ISO 27001) a plus

Preferred Qualifications

• Relevant certifications (Security+, CySA+, AWS/Azure Security certifications, etc.)
• Experience with ticketing/workflow tools (Jira, ServiceNow) for remediation tracking
• Scripting/automation experience (Python, PowerShell) for reporting or integrations
• Prior experience in a SOC, IT security, or GRC role