Senior Vulnerability Analyst & Risk Lead

ARUP Laboratories; United States; On-site; USD 90,000 - 130,000; Full time

Job summary

ARUP Laboratories is seeking a Vulnerability Analyst to lead enterprise-wide vulnerability management. The role conducts extensive research on vulnerabilities, analyzes findings, and develops methods for remediation, reporting to the SOC Manager.

You will collaborate with IT teams, DevOps, and leadership to communicate risk, create dashboards, and stay current with CVEs and threat intelligence. This role requires strong analytical skills and collaborative execution across multiple teams.

Qualifications

• Experience conducting vulnerability research and analysis.
• Ability to develop and present executive-level vulnerability metrics.
• Experience with risk assessments and remediation planning.

Responsibilities

• Lead advanced cyber vulnerability assessments of applications, systems, vendor IT networks, and cloud architecture.
• Analyze scan results, correlate findings, and determine severity and risk impact to prioritize remediation efforts.
• Maintain and update vulnerability tracking systems, dashboards, and compliance reports.
• Develop and present reports, briefs, and metrics to communicate vulnerability status, remediation progress, and compliance standing to leadership.
• Stay informed about emerging vulnerabilities, CVEs, threat intelligence, and cybersecurity best practices.
• Collaborate with administrators, DevOps teams, researchers, CAB, and IT Tech Debt Committee to identify, prioritize, and remediate vulnerabilities.
• Lead efforts with remediation teams, system owners, and senior security staff to track and resolve identified vulnerabilities.
• Apply advanced threat modeling, penetration testing, and exploit development techniques to identify risks across on-premises and cloud environments.
• Contribute to recurring cyber vulnerability updates and prepare executive-level summaries of findings for senior leadership.
• Provide subject matter expert support in incident response investigations and provide technical recommendations to strengthen system defenses.
• Develop and deliver training and awareness programs for team members and stakeholders on vulnerability identification, remediation, and secure system design practices.
• Provide expert support to the SOC Tier 1 and Tier 2 Analyst teams as needed in performing threat detection and incident response.

Skills

Vulnerability assessment

Threat modeling

Risk management

Incident response

Security reporting

Cross-functional collaboration

Tools

Vulnerability scanning tools

Job description

ARUP Laboratories is seeking a Vulnerability Analyst to lead enterprise-wide vulnerability management. The role conducts extensive research on vulnerabilities, analyzes findings, and develops methods for remediation, reporting to the SOC Manager.

You will collaborate with IT teams, DevOps, and leadership to communicate risk, create dashboards, and stay current with CVEs and threat intelligence. This role requires strong analytical skills and collaborative execution across multiple teams.