Senior Vulnerability Analyst, SOC & Threat Research

Ultipro; Salt Lake City (UT); On-site; USD 110,000 - 140,000; Full time

Job summary

ARUP Laboratories in Salt Lake City seeks a Vulnerability Analyst to lead enterprise-wide vulnerability management within the Security Operations Center. You will conduct in-depth research on discovered vulnerabilities affecting OS, applications, networks, and cloud, and oversee remediation prioritization.

You will develop risk analyses, build reports for executives, and collaborate across IT teams to strengthen defenses; require strong knowledge of NIST, ISO/IEC 27001, HITRUST and hands-on

Qualifications

• Bachelor's degree in Cybersecurity or related field (required).
• Six years of cybersecurity experience, including at least 4 years in vulnerability analysis, penetration testing, or cyber risk management.
• Strong understanding of security frameworks (e.g., NIST, MITRE ATT&CK, ISO/IEC 27001, HITRUST).
• Experience with vulnerability scanning tools.
• Experience with EDR solutions.
• Excellent communication, analytical, and problem-solving skills.

Responsibilities

• Lead advanced cyber vulnerability assessments across applications, systems, vendor IT networks and cloud architecture.
• Analyze and validate scan results, correlate findings, and determine severity and risk impact to prioritize remediation.
• Maintain and update vulnerability tracking systems, dashboards, and compliance reports.
• Develop and present reports, briefs, and metrics to leadership on vulnerability status and remediation progress.
• Stay informed about emerging vulnerabilities, CVEs, threat intelligence, and cybersecurity best practices.
• Collaborate with administrators, DevOps teams, researchers, CAB, and IT Tech Debt Committee to identify, prioritize, and remediate vulnerabilities.
• Lead remediation efforts with system owners and senior security staff to track and resolve identified vulnerabilities.
• Apply advanced threat modeling, penetration testing, and exploit development techniques to identify risks across on-premises and cloud environments.
• Contribute to recurring cyber vulnerability updates and executive summaries of findings for senior leadership.
• Provide expert support in incident response investigations and strengthen system defenses.

Skills

Vulnerability analysis

Penetration testing

Cyber risk management

Security frameworks

Education

Bachelor's degree in Cybersecurity or related field

Master's degree in Cybersecurity or related field

Tools

EDR solutions

Vulnerability scanning tools

Cloud security tools

Job description

ARUP Laboratories in Salt Lake City seeks a Vulnerability Analyst to lead enterprise-wide vulnerability management within the Security Operations Center. You will conduct in-depth research on discovered vulnerabilities affecting OS, applications, networks, and cloud, and oversee remediation prioritization.

You will develop risk analyses, build reports for executives, and collaborate across IT teams to strengthen defenses; require strong knowledge of NIST, ISO/IEC 27001, HITRUST and hands-on