Vulnerability Management Analyst

Vanguard; Charlotte (NC); Hybrid; USD 95,000 - 140,000; Full time

Job summary

Vanguard seeks a Vulnerability Management Analyst to strengthen its attack surface management and hybrid infrastructure security. You will identify, prioritize, and manage vulnerabilities, driving automation and AI-assisted remediation while collaborating with SOC and threat intel teams.

The role emphasizes strong analytics, communication, and cross-functional leadership to implement remediation and reporting across Vanguard’s security program. Hybrid work model is available.

Qualifications

• Minimum 4 years related work experience in vulnerability management.
• Experience with CVSS or other vulnerability rating frameworks.
• Prior experience automating security processes.
• Undergraduate degree in a related field or the equivalent combination of training & experience.
• Strong problem-solving ability.
• Solid communication skills with the ability to influence stakeholders.
• Ability to own and lead cross-functional initiatives with limited oversight.

Responsibilities

• Monitor Vanguard assets for vulnerabilities and security configuration weaknesses using exposure assessment platforms as part of CTEM implementation.
• Automate various aspects of VulnOps to help defend against AI-driven threats.
• Collaborate with SOC, Cyber Threat Intel, Offensive Security Team, and other stakeholders to refine prioritization, validate impact of suspected vulnerabilities, and advise owners on remediation strategies.
• Investigate false-positives and requests for risk-acceptance or risk-rating adjustment.
• Shape enforcement controls and guardrails.
• In zero-day events, iterate quickly through VM lifecycle and develop custom reports for escalations.
• Coordinate with Engineering platform team to tune scanning tools and meet security objectives.
• Focus on continuous process improvement and automation opportunities in security findings and remediation.

Skills

Vulnerability management

Cloud security

Automation

CVSS

Communication

Cross-functional leadership

Problem solving

Education

Bachelor's degree in a related field

Tools

Aqua

Palo Alto Prisma

Wiz

CrowdStrike

Tenable Nessus

Qualys

Claude Code/Codex

Job description

see JD

We’re excited for a Vulnerability Management Analyst to join our high-energy team - to help build the future of Vanguard’s attack surface management. This role sits at the intersection of security risk, automation, and emerging AI-driven capabilities. If you’re a cybersecurity professional who thrives on critical thinking, challenging yourself, and shaping how humans and machines work together to reduce risk - this role is for you!

You’ll be responsible for identifying, prioritizing, and managing vulnerabilities across Vanguard’s hybrid infrastructure - ensuring adherence to security hardening standards and integration with AI-assisted remediation tooling. The role requires strong analytical & communication skills, combined with technical and security expertise. This is a great opportunity to join a growing team - working in a fast-paced cross-functional environment to protect Vanguard and its clients from cyber security threats

Core Responsibilities (In This Role You Will)

• Leverage exposure assessment platforms to monitor Vanguard assets for vulnerabilities and security configuration weaknesses as part of CTEM implementation
• Automate various aspects of VulnOps to help defend against AI-driven threats
• Partner with the SOC, Cyber Threat Intel, Offensive Security Team, and other stakeholders to refine prioritization, to validate impact of suspected vulnerabilities, to advise owners on mitigation strategies or compensating controls, and to provide accurate & timely reporting that informs remediation progress
• Investigate false-positives and requests for risk-acceptance or risk-rating adjustment
• Shape enforcement controls & guardrails
• In zero-day events, quickly iterate through VM lifecycle - creatively handle time-sensitive escalations, develop custom reports, and perform special investigations
• Coordinate with Engineering platform team to tune scanning tools to improve visibility and to meet additional security objectives
• Focus on continuous process improvement and identify opportunities for automation, fusion of disparate sources of security findings, and consistency of remediation owner experience.

What It Takes (Qualifications)

• Minimum of 4 years related work experience required, such as experience managing vulnerabilities at scale and understanding of security frameworks
• Expertise in at least 1 major cloud service provider
• Experience with CVSS or other frameworks for rating CVE vulnerabilities
• Prior experience automating processes
• Undergraduate degree in a related field or the equivalent combination of training & experience
• Strong problem-solving ability
• Solid communication skills, with the ability to influence stakeholders
• Ability to own and lead cross-functional initiatives with limited oversight - including planning, execution, & outcome tracking

Ways to stand out:

• Demonstrated passion for continuous learning
• Experience with scripting and automation
• Experience with telecom/networking, windows, or linux configurations
• Experience with Aqua, Palo Alto Prisma, Wiz, CrowdStrike, Tenable Nessus, or Qualys
• Experience with Claude Code/Codex or Threat Modeling
• Experience with risk controls and interacting with internal/external audit

Sponsorship

Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission-we're on a mission. To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.