Senior Vulnerability Management & Risk Analyst

Hewlett Packard Enterprise Company; San Jose (CA); On-site; USD 124,000 - 251,000; Full time

Job summary

Hewlett Packard Enterprise (HPE) is seeking a Vulnerability Management Analyst to strengthen our security posture. You will turn vulnerability data into risk-based priorities, work with IT, Cloud, and DevOps teams, and drive scalable automation across the vulnerability management lifecycle.

Role emphasizes examining exposure across internal and external environments, and reporting trends to asset owners and leadership. Onsite role with office-based work expectations in the United States.

Qualifications

• Experience applying advanced cybersecurity and IT security expertise to solve complex issues.
• Ability to translate vulnerability data into clear priorities and actions.
• Comfort solving ambiguous, high-impact issues across teams.

Responsibilities

• Apply advanced vulnerability management and attack-surface expertise to identify and interpret exposure across environments.
• Correlate scan findings, asset criticality, threat intelligence, and business context to determine risk-based priorities.
• Design, build, and implement scalable automation across vulnerability management lifecycle.
• Use vulnerability data to identify trends and translate findings into actionable IT/DevOps insights.
• Lead technical investigations of complex vulnerability issues and drive timely remediation.
• Develop and present reporting on attack-surface exposure, vulnerability trends, and remediation performance.

Skills

Vulnerability management

Attack-surface management

Threat exposure management

Risk-based remediation

Data interpretation for business

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Vulnerability data lake

Job description

Hewlett Packard Enterprise (HPE) is seeking a Vulnerability Management Analyst to strengthen our security posture. You will turn vulnerability data into risk-based priorities, work with IT, Cloud, and DevOps teams, and drive scalable automation across the vulnerability management lifecycle.

Role emphasizes examining exposure across internal and external environments, and reporting trends to asset owners and leadership. Onsite role with office-based work expectations in the United States.