Senior Vulnerability & Risk Analyst (Remote)

Covington & Burling LLP; United States; On-site; USD 95,000 - 157,000; Full time

Benefits offered by this job

Healthcare insurance

Comprehensive benefits

Job summary

Covington & Burling LLP is seeking a Senior Cybersecurity Operations Vulnerability Analyst to manage vulnerability scans across on‑premise and cloud environments, analyze findings, and drive remediation with stakeholders. You will own VM program documentation, metrics, and automation initiatives, reporting to the Director of Cybersecurity Operations.

The role requires 5+ years’ experience in vulnerability analysis or 3+ years in offensive testing with 2+ years in VM responsibilities, strong

Qualifications

• Minimum of 5 years’ experience as a Vulnerability Analyst OR minimum of 3 years’ experience in Penetration /Offensive testing, and 2 years of core Vulnerability Management responsibilities.
• Communicates clearly and professionally in both written and verbal contexts.
• Demonstrates critical thinking and analytical skills with independent assessment and investigation.

Responsibilities

• Execute vulnerability scans on premise and in the cloud and report results.
• Collaborate with internal business units across the vulnerability management lifecycle.
• Triages vulnerabilities by likelihood and impact for Covington environment.
• Maintain VM program documentation and metrics reporting.
• Develop automation ideas and roadmap for VM workflows.
• Follow change management and patch management lifecycles.

Skills

Vulnerability scanners

CVEs

Automation scripting

Risk assessment frameworks

Security certifications

Education

Bachelor’s degree in CS/Info Security or related

Tools

Vulnerability management tools

Job description

Covington & Burling LLP is seeking a Senior Cybersecurity Operations Vulnerability Analyst to manage vulnerability scans across on‑premise and cloud environments, analyze findings, and drive remediation with stakeholders. You will own VM program documentation, metrics, and automation initiatives, reporting to the Director of Cybersecurity Operations.

The role requires 5+ years’ experience in vulnerability analysis or 3+ years in offensive testing with 2+ years in VM responsibilities, strong