Vulnerability Management Analyst

Dillard's, Inc.; Little Rock (AR); Presencial; USD 60.000 - 80.000; Jornada completa

Descripción de la vacante

Dillard's, Inc. is seeking a Vulnerability Management Analyst to identify, assess, and prioritize vulnerabilities across our systems and networks. You will work with IT teams to ensure timely remediation and strengthen security controls.

The ideal candidate has 2+ years of cybersecurity experience, familiarity with CVE/CVSS, and knowledge of PCI/SOX compliance. This Arkansas-based role offers a collaborative environment and opportunities to advance security posture.

Formación

• Understanding of CVE, CVSS, CWE, and exploitability feeds such as CISA KEV.
• Experience with vulnerability scanning tools.
• Knowledge of network protocols and Windows and Linux administration.
• Familiarity with industry standards and frameworks such as NIST and CIS.
• Analytical and problem-solving skills.
• Strong communication and interpersonal skills, with the ability to convey technical information effectively to non-technical stakeholders.

Responsabilidades

• Conduct regular vulnerability assessments on systems, networks, and applications.
• Analyze vulnerability scan results and prioritize remediation efforts based on risk and impact.
• Work closely with system administrators and developers to ensure timely patching and vulnerability mitigation.
• Develop and maintain vulnerability management policies, procedures, and documentation.
• Research emerging threats and vulnerabilities to stay ahead of potential security risks.
• Provide guidance and recommendations to IT teams for improving security controls and processes.

Conocimientos

CVE/CVSS/CWE

Vulnerability scanning

Network & OS admin

NIST/CIS standards

Analytical skills

Communication skills

Educación

Bachelor's degree in Computer Science, Information Security, or related field

Descripción del empleo

THE OPPORTUNITY

The Information Security team is seeking a highly skilled and motivated Vulnerability Management Analyst to join our team. As a member of our Information Security department, you will identify, assess, and prioritize vulnerabilities across our organization's systems and networks. You will play a crucial role in maintaining our organization's security posture and protecting all assets from cyber threats.

THE TEAM

The Information Security team is expected to be high-performing. To meet this expectation, team members communicate and collaborate, sharing knowledge and research. Team members should understand what is expected of them and adjust on the fly, as priorities may change depending on the company's needs. If you are someone who sets a standard of excellence for yourself and enjoys working alongside others who share that standard and genuinely want each of their peers to succeed, you may be the perfect addition to this team.

ROLES & RESPONSIBILITIES

• Conduct regular vulnerability assessments on systems, networks, and applications.
• Analyze vulnerability scan results and prioritize remediation efforts based on risk and impact.
• Work closely with system administrators and developers to ensure timely patching and vulnerability mitigation.
• Develop and maintain vulnerability management policies, procedures, and documentation.
• Research emerging threats and vulnerabilities to stay ahead of potential security risks.
• Provide guidance and recommendations to IT teams for improving security controls and processes.

REQUIRED SKILLS

• An understanding of CVE, CVSS, CWE, and exploitability feeds such as CISA KEV.
• Experience with vulnerability scanning tools.
• Knowledge of network protocols and Windows and Linux administration.
• Familiarity with industry standards and frameworks such as NIST and CIS.
• Analytical and problem-solving skills.
• Strong communication and interpersonal skills, with the ability to convey technical information effectively to non-technical stakeholders.

MINIMUM YEARS OF EXPERIENCE

• 2 Year s

DESIRED SKILLS

• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience).
• At least 2-3 years of experience in vulnerability management or related cybersecurity roles.
• General knowledge of compliance requirements for PCI, SOX, etc.
• Working knowledge of at least one scripting language and secure coding practices.
• Experience applying AI/LLM tools to security workflows, including awareness of data handling practices.