Senior Vulnerability & Risk Lead

ARUP Laboratories; Salt Lake City (UT); Hybrid; USD 120,000 - 170,000; Full time

Job summary

ARUP Laboratories, based in Salt Lake City, Utah, seeks a Vulnerability Analyst to lead enterprise vulnerability management efforts within the SOC. You will research, analyze, and develop methods for exploiting vulnerabilities and perform risk assessments to strengthen security controls.

The role requires collaboration with IT teams and leadership, with a focus on incident response support and security training.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, or related field
• Six years of cybersecurity experience with at least 4 years in vulnerability analysis, pentesting, or cyber risk
• Strong knowledge of NIST, ISO/IEC 27001, HITRUST
• Experience with vulnerability scanning tools and EDR solutions

Responsibilities

• Lead advanced cyber vulnerability assessments of applications, systems, vendor IT networks, and cloud architecture.
• Analyze and validate scan results, correlate findings, and determine severity and risk impact to prioritize remediation.
• Maintain and update vulnerability tracking systems, dashboards, and compliance reports.
• Develop and present reports, briefs, and metrics to leadership on vulnerability status and remediation progress.
• Stay informed about emerging vulnerabilities, CVEs, threat intel, and cybersecurity best practices.
• Collaborate with admins, DevOps, researchers, CAB, and IT Debt Committee to remediate vulnerabilities.
• Lead remediation efforts with system owners and senior security staff to close identified gaps.

Skills

Vulnerability analysis

Penetration testing

Cyber risk management

Security frameworks (NIST, MITRE ATT&K

EDR

Vulnerability scanning tools

Communication skills

Education

Bachelor's degree in Cybersecurity or related field

Master's degree in Cybersecurity or related field

Job description

ARUP Laboratories, based in Salt Lake City, Utah, seeks a Vulnerability Analyst to lead enterprise vulnerability management efforts within the SOC. You will research, analyze, and develop methods for exploiting vulnerabilities and perform risk assessments to strengthen security controls.

The role requires collaboration with IT teams and leadership, with a focus on incident response support and security training.