Senior Information Security Analyst — Vulnerability Management

frostbank; San Antonio (TX); Presencial; USD 110.000 - 140.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

401(k) matching

Tuition reimbursement

Paid time off

Health and wellness programs

Referral bonus program

Descripción de la vacante

Frost seeks an Information Security Analyst III - Vulnerability Management to safeguard Frost data and IT systems. You will coordinate vulnerability scanning, remediation, and testing across enterprise environments, cloud, and applications, while communicating effectively with technical and executive stakeholders.

With 5+ years in information security and a CISSP (or ability to obtain within 6 months), you will guide risk-based decisions and drive remediation to reduce organizational risk.

Formación

• Bachelor's degree in IT Security, a related field, or equivalent experience
• 5+ years of experience in Information Security, Vulnerability Management, or a related technical discipline
• Technical expertise in vulnerability management, vulnerability scanning, risk prioritization, container and cloud environments, operating systems, networking, threat intelligence, and/or security operations technologies
• CISSP or the ability to attain within 6 months
• Excellent written and verbal communication skills, including the ability to present technical risks and recommendations to both technical and executive audiences
• Strong analytical and troubleshooting skills with experience validating vulnerability findings, identifying false positives, coordinating remediation efforts, and driving issues through resolution

Responsabilidades

• Investigate, assess, and coordinate remediations of security vulnerabilities across enterprise infrastructure, cloud environments, applications, and supporting technologies
• Effectively communicate while leading incident response efforts, engaging executive and board-level leadership with clear, concise, and strategic updates
• Demonstrate effective presentation skills by clearly articulating security risks, vulnerability impacts, and mitigation strategies to both technical and non-technical stakeholders, ensuring alignment with business objectives
• Analyze vulnerability scan results and related security data to identify risks, validate findings, investigate false positives, and provide remediation guidance
• Maintain and continuously enhance security platforms and solutions to improve effectiveness, resilience, and alignment with evolving threats and business needs
• Perform and document security processes including vulnerability detection, remediation tracking, exception management, compliance monitoring, and risk assessments
• Coordinate and perform application and enterprise vulnerability and penetration testing, analyze the results, and initiate remediation processes
• Partner with technology teams to investigate complex vulnerabilities, validate remediation activities, troubleshoot findings, and reduce organizational risk
• Design, configure, test, implement, maintain, and document detection, prevention, and response processes in alignment with regulatory and compliance requirements
• Maintain a current and high level of knowledge of cyber security threats and vulnerabilities, industry and regulatory standards, and market innovations
• Evaluate new security technologies to identify potential business value
• Represent the IT Security department on interdepartmental projects and collaborative efforts
• Always take action using Integrity, Caring, and Excellence to achieve all-win outcomes

Conocimientos

Vulnerability management

Vulnerability scanning

Risk prioritization

Container and cloud environments

Operating systems

Networking

Threat intelligence

Security operations

Communication

Incident response leadership

Educación

Bachelor's degree in IT Security or related field

Herramientas

Tenable

Qualys

Rapid7

Descripción del empleo

Frost seeks an Information Security Analyst III - Vulnerability Management to safeguard Frost data and IT systems. You will coordinate vulnerability scanning, remediation, and testing across enterprise environments, cloud, and applications, while communicating effectively with technical and executive stakeholders.

With 5+ years in information security and a CISSP (or ability to obtain within 6 months), you will guide risk-based decisions and drive remediation to reduce organizational risk.