Senior Vulnerability Management Analyst

The Vanguard Group; Dallas (Luzerne County); Hybrid; USD 80,000 - 120,000; Full time

Job summary

An established industry player is seeking a Senior Vulnerability Management Analyst to enhance their cybersecurity posture. This role is pivotal in identifying and managing vulnerabilities across a hybrid infrastructure, ensuring the protection of client and organizational assets. The ideal candidate will thrive in a dynamic environment, leveraging their expertise in vulnerability management and cloud security while collaborating with cross-functional teams. With a focus on process improvement and automation, this position offers a unique opportunity to contribute to a robust risk culture and drive impactful security initiatives. Join a forward-thinking organization that values growth and innovation.

Benefits

Comprehensive Health Care

Work-Life Balance

Career Development

Qualifications

• 5+ years in vulnerability management and security frameworks.
• Strong problem-solving and communication skills.

Responsibilities

• Monitor assets for vulnerabilities using assessment platforms.
• Collaborate with teams to prioritize vulnerabilities and advise on mitigation.
• Handle time-sensitive escalations during zero-day events.

Skills

Vulnerability Management

Cloud Security

Analytical Skills

Technical Expertise

Communication Skills

Education

Undergraduate Degree

Tools

Aqua

Palo Alto Prisma

Wiz

CrowdStrike

Tenable Nessus

Qualys

Brinqa

Kenna

Vulcan

Dazz

Avalor

Job description

Global Risk and Security (GR&S) at Vanguard

Enables business strategy, protects client and Vanguard interests (assets and data), and fosters a strong risk culture. Our teams leverage enterprise-wide insights, expertise, and trusted advice to support risk-informed decisions across Vanguard.

Enterprise Security and Fraud (ES&F)

This sub-division is responsible for protecting Vanguard's global assets, including personnel, property, data, and client assets. We are trusted advisors with state-of-the-art security and fraud capabilities, committed to continuous learning and development in a dynamic security landscape. Joining our team means building collaborative relationships and enjoying benefits like comprehensive health care, work-life balance, and career development.

Position: Senior Vulnerability Management Analyst

We are seeking a high-energy individual to help shape Vanguard’s attack surface management. The ideal candidate will have a background in vulnerability management or pen-testing, experience with cloud security, and a readiness to grow professionally. This role involves identifying, prioritizing, and managing vulnerabilities across Vanguard’s hybrid infrastructure, requiring analytical skills, technical expertise, and excellent communication. It offers a chance to work in a fast-paced, cross-functional environment to protect Vanguard and its clients from cybersecurity threats.

Responsibilities

• Monitor Vanguard assets for vulnerabilities and security weaknesses using exposure assessment platforms as part of CTEM implementation.
• Collaborate with SOC, Cyber Threat Intel, Offensive Security, and other teams to prioritize vulnerabilities, assess impact, advise on mitigation, and report remediation progress.
• Investigate false positives and manage risk acceptance or rating adjustments.
• Develop remediation SLAs, enforce policies, and establish guardrails.
• Handle time-sensitive escalations during zero-day events, including custom reporting and investigations.
• Coordinate with engineering to tune scanning tools and improve security visibility.
• Focus on process improvement, automation, and consistency in remediation efforts.

Qualifications

• At least 5 years of relevant experience in vulnerability management and security frameworks.
• Undergraduate degree or equivalent experience.
• Strong problem-solving skills.
• Effective communication and stakeholder influence skills.
• Ability to lead initiatives independently.

Preferred Skills

• Experience leading process improvements.
• Passion for continuous learning.
• Scripting and automation skills.
• Experience with Aqua, Palo Alto Prisma, Wiz, CrowdStrike, Tenable Nessus, Qualys, and aggregators like Brinqa, Kenna, Vulcan, Dazz, or Avalor.
• Understanding of risk controls and audit interactions.

Additional Details

This is a hybrid role requiring presence in the office on Tuesdays, Wednesdays, and Thursdays, with remote work on Mondays and Fridays.

Sponsorship: Vanguard does not offer visa sponsorship for this position.

About Vanguard

Our mission is to support the long-term financial wellbeing of our clients through innovative products and services, fostering personal and team growth worldwide.

Work Environment

We embrace a hybrid working model that balances flexibility with in-person collaboration, supporting our mission and enriching the employee experience.