Vulnerability & Cloud Security Analyst II

Hidden Jobs; United States; Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Flexible spending account

Health savings account

Hybrid work flexibility

Generous PTO

Job summary

Hidden Jobs is seeking a security operations professional to own vulnerability and attack surface management for a HIPAA-regulated healthcare org. This full-time role focuses on reducing a large backlog of findings, coordinating with engineering to ship fixes, and maturing base images and CI/CD security controls.

You will lead cloud, container, and web application security, using CVSS/EPSS, and drive remediation with cross-functional teams across cloud, endpoints, and SaaS.

Qualifications

• Minimum 3–6 years in security with hands-on vulnerability management experience.
• Direct experience operating and tuning a vulnerability scanner or CNAPP platform.
• null],
• job_responsibilities_description
• CoT_job_summary_short
• job_summary_short
• contract_type
• location_type
• remote_scope
• perks
• stated_min
• stated_max
• stated_absolute
• salary_estimation_cot
• estimated_low
• estimated_medium
• estimated_high
• currency
• frequency
• bonus
• tax
• application_email
• job_end_date
• contact_person
• hiring_department_name

Responsibilities

• Run the full vulnerability lifecycle across cloud workloads, containers, code repos, and endpoints.
• Prioritize findings using a risk model with CVSS/EPSS and data sensitivity.
• Build and maintain a unified asset inventory across cloud, endpoint, and SaaS.
• Drive remediation by coordinating with engineering and IT teams.
• Address root causes via hardened images and automated tooling.
• Lead web app security, including dynamic scans and WAF mitigations.
• Stand up checks for an internal app publishing platform.

Skills

Vulnerability management

Attack surface management

Cloud security basics

Scripting (Python/PowerShell)

Risk-based prioritization

Engineering collaboration

AI in security workflows

Education

Bachelor's degree in CS or related field

Tools

Wiz

Orca

Prisma Cloud

Defender for Cloud

Lacework

CrowdStrike Falcon Exposure Management

Tenable

Qualys

Rapid7

Axonius

runZero

Job description

Hidden Jobs is seeking a security operations professional to own vulnerability and attack surface management for a HIPAA-regulated healthcare org. This full-time role focuses on reducing a large backlog of findings, coordinating with engineering to ship fixes, and maturing base images and CI/CD security controls.

You will lead cloud, container, and web application security, using CVSS/EPSS, and drive remediation with cross-functional teams across cloud, endpoints, and SaaS.