Vulnerability Analyst

Gravity IT Resources; Utah; On-site; USD 70,000 - 110,000; Full time

Job summary

Gravity IT Resources is seeking an experienced Vulnerability Analyst in Utah to manage vulnerability scanning, assess security risks, and coordinate remediation across enterprise systems. The role emphasizes hands-on work with Qualys and other scanning tools, with close collaboration with IT and security teams to prioritize risks and ensure timely remediation.

The ideal candidate will have 2–5 years of vulnerability management experience, familiarity with CVEs/CWEs, and knowledge of NIST, CIS,

Qualifications

• 2–5 years of security experience.
• 2–5 years of vulnerability management experience.
• Hands-on experience with Qualys, Tenable or other scanning tools.
• Experience with CTEM.
• ServiceNow reporting experience.
• Familiarity with CVEs, CWEs, CISA, and KEV.
• Familiarity with NIST, CIS, FFIEC, and PCI DSS.
• Strong analytical, communication, and problem-solving skills.

Responsibilities

• Manage vulnerability scanning and risk assessment across enterprise systems.
• Coordinate remediation and patching within established timelines.
• Collaborate with IT and security teams to prioritize risks.
• Track and report vulnerability status using ServiceNow.

Skills

Security experience

Vulnerability management

Analytical skills

Communication skills

Problem-solving

Education

Bachelor’s degree in Cybersecurity/Info Systems/CS

Security certifications (CISSP, CEH, Security+, OSCP, GPEN, PenTest+)

Tools

Qualys

Tenable

ServiceNow

CTEM

Job description

We are seeking an experienced Vulnerability Analyst to manage vulnerability scanning, assess security risks, and coordinate remediation across enterprise systems. The ideal candidate has strong Qualys experience and works closely with IT and security teams to prioritize risks, track patching, and ensure vulnerabilities are resolved within established timelines.

Required Qualifications

• 2 to 5 years of security experience.
• 2 to 5 years of vulnerability management experience.
• Hands-on experience with Qualys, Tenable or any other scanning tool
• Experience with CTEM.
• Service Now reporting
• Understanding CVEs, CWEs and CISA, KEV
• Familiarity with security frameworks such as NIST, CIS, FFIEC, and PCI DSS.
• Strong analytical, communication, and problem-solving skills.

Preferred Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field.
• Relevant security certifications, such as CISSP, CEH, Security+, OSCP, GPEN, or PenTest+.
• Scripting experience with Python or Perl.

Employment Eligibility: Candidates must be authorized to work in the U.S. for any employer. Visa sponsorship and C2C arrangements are not available.