Threat-Focused Vulnerability Analyst

Dillard's, Inc.; Little Rock (AR); Presencial; USD 60.000 - 80.000; Jornada completa

Descripción de la vacante

Dillard's, Inc. is seeking a Vulnerability Management Analyst to identify, assess, and prioritize vulnerabilities across our systems and networks. You will work with IT teams to ensure timely remediation and strengthen security controls.

The ideal candidate has 2+ years of cybersecurity experience, familiarity with CVE/CVSS, and knowledge of PCI/SOX compliance. This Arkansas-based role offers a collaborative environment and opportunities to advance security posture.

Formación

• Understanding of CVE, CVSS, CWE, and exploitability feeds such as CISA KEV.
• Experience with vulnerability scanning tools.
• Knowledge of network protocols and Windows and Linux administration.
• Familiarity with industry standards and frameworks such as NIST and CIS.
• Analytical and problem-solving skills.
• Strong communication and interpersonal skills, with the ability to convey technical information effectively to non-technical stakeholders.

Responsabilidades

• Conduct regular vulnerability assessments on systems, networks, and applications.
• Analyze vulnerability scan results and prioritize remediation efforts based on risk and impact.
• Work closely with system administrators and developers to ensure timely patching and vulnerability mitigation.
• Develop and maintain vulnerability management policies, procedures, and documentation.
• Research emerging threats and vulnerabilities to stay ahead of potential security risks.
• Provide guidance and recommendations to IT teams for improving security controls and processes.

Conocimientos

CVE/CVSS/CWE

Vulnerability scanning

Network & OS admin

NIST/CIS standards

Analytical skills

Communication skills

Educación

Bachelor's degree in Computer Science, Information Security, or related field

Descripción del empleo

Dillard's, Inc. is seeking a Vulnerability Management Analyst to identify, assess, and prioritize vulnerabilities across our systems and networks. You will work with IT teams to ensure timely remediation and strengthen security controls.

The ideal candidate has 2+ years of cybersecurity experience, familiarity with CVE/CVSS, and knowledge of PCI/SOX compliance. This Arkansas-based role offers a collaborative environment and opportunities to advance security posture.