Senior Vulnerability & Risk Analyst (SOC)

ARUP Laboratories; Salt Lake City (UT); On-site; USD 110,000 - 160,000; Full time

Job summary

ARUP Laboratories in Salt Lake City, UT seeks a Vulnerability Analyst to lead enterprise-wide vulnerability management within the Security Operations Center. You will research, analyze, and model vulnerabilities, prioritize remediation, and develop risk-based strategies for on-premise and cloud environments.

You will conduct Security Impact Analyses, maintain risk registers, and present executive-level briefs on remediation progress and compliance status to leadership.

Qualifications

• Bachelor's degree in Cybersecurity or related field required.
• Six+ years of cybersecurity experience with focus on vulnerability analysis, penetration testing, or cyber risk management.
• Strong understanding of security frameworks (NIST, MITRE ATT&CK).
• Experience with vulnerability scanning tools and EDR solutions.

Responsibilities

• Lead advanced cyber vulnerability assessments of applications, systems, and networks.
• Analyze scan results, determine severity, and prioritize remediation.
• Maintain vulnerability tracking systems and reports for leadership.
• Develop and present executive-level summaries of findings and remediation status.
• Collaborate with IT, DevOps, and security teams to identify, prioritize, and remediate vulnerabilities.

Skills

Vulnerability assessment

Cybersecurity

Risk analysis

EDR experience

NIST framework

Education

Bachelor's degree in Cybersecurity or related field

Master's degree in Cybersecurity or related field (preferred)

Tools

Vulnerability scanners

EDR solutions

Job description

ARUP Laboratories in Salt Lake City, UT seeks a Vulnerability Analyst to lead enterprise-wide vulnerability management within the Security Operations Center. You will research, analyze, and model vulnerabilities, prioritize remediation, and develop risk-based strategies for on-premise and cloud environments.

You will conduct Security Impact Analyses, maintain risk registers, and present executive-level briefs on remediation progress and compliance status to leadership.