Vulnerability Management Analyst

Nicely Co.; Tulsa (OK); On-site; USD 90,000 - 130,000; Full time

Job summary

Nicely Co. is seeking a Vulnerability Management Analyst to strengthen risk-based security, threat detection, incident readiness, and secure-by-design practices. You will own day-to-day work and translate priorities into actionable plans, building lightweight processes for an early-stage company.

The role requires strong communication across functions, sound judgment, and the ability to operate with autonomy while shaping how the cybersecurity function scales with the company.

Qualifications

• Demonstrated capability relevant to risk-based security, threat detection, incident readiness, and secure-by-design practices.
• Judgment and ownership appropriate for the Vulnerability Management Analyst scope.
• Strong written and verbal communication with specialists and cross-functional partners.
• Ability to organize ambiguous work, make progress independently, and document decisions.
• Comfort building systems in an early-stage environment where priorities may evolve.
• Commitment to ethical conduct, confidentiality, security, accessibility, and inclusive collaboration.
• Preferred experience with modern cybersecurity methods and tools.
• Experience in startup, small business, or resource-conscious environments.

Responsibilities

• Own day-to-day work across risk-based security, threat detection, incident readiness, and secure-by-design practices.
• Translate priorities into documented plans, decisions, and measurable outcomes.
• Build lightweight, repeatable processes for an early-stage company.
• Collaborate across functions to resolve dependencies and deliver complete outcomes.
• Identify risks early, recommend proportional solutions, and escalate key decisions.
• Maintain accurate documentation and handle company, customer, and employee data responsibly.
• Use evidence and feedback to improve quality, efficiency, and stakeholder experience.
• Communicate progress, constraints, priorities, and results clearly to teammates.

Skills

Risk-based security

Threat detection

Incident readiness

Vulnerability reduction

Identity and access controls

Secure-by-design practices

Cross-functional collaboration

Documentation and record-keeping

Job description

Vulnerability Management Analyst

Help build Nicely Co.'s risk-based security, threat detection, incident readiness, vulnerability reduction, identity, controls, and secure-by-design practices as Vulnerability Management Analyst, with meaningful ownership in an early-stage company.

Position overview

Nicely Co. is seeking a Vulnerability Management Analyst to strengthen risk-based security, threat detection, incident readiness, vulnerability reduction, identity, controls, and secure-by-design practices. This role will turn company priorities into clear, dependable work while partnering directly with colleagues across functions.Nicely Co. is an early-stage company, so this position will help create the processes and internal systems behind the work, not merely inherit a mature playbook. The successful candidate will use sound judgment, communicate tradeoffs, and operate with appropriate autonomy.Responsibilities may evolve as the company grows. This is an opportunity to influence how the Cybersecurity function develops, establish useful standards, and leave behind systems that scale responsibly.

Responsibilities

• Own day-to-day work across risk-based security, threat detection, incident readiness, vulnerability reduction, identity, controls, and secure-by-design practices.
• Translate the priorities of the Vulnerability Management Analyst role into documented plans, decisions, and measurable outcomes.
• Build lightweight, repeatable processes that fit an early-stage company and can mature over time.
• Collaborate across functions to resolve dependencies and deliver complete outcomes.
• Identify risks early, recommend proportionate solutions, and escalate consequential decisions.
• Maintain accurate documentation and handle company, customer, and employee information responsibly.
• Use relevant evidence and feedback to improve quality, efficiency, and stakeholder experience.
• Communicate progress, constraints, priorities, and results clearly to affected teammates.

Qualifications

• Demonstrated capability relevant to risk-based security, threat detection, incident readiness, vulnerability reduction, identity, controls, and secure-by-design practices.
• Judgment and ownership appropriate for the Vulnerability Management Analyst scope.
• Strong written and verbal communication with both specialists and cross-functional partners.
• Ability to organize ambiguous work, make progress independently, and document decisions.
• Comfort building systems in an early-stage environment where priorities may evolve.
• Commitment to ethical conduct, confidentiality, security, accessibility, and inclusive collaboration.

Preferred qualifications

• Experience with modern methods and tools used in Cybersecurity.
• Experience in a startup, small business, or other resource-conscious environment.
• Evidence of improving a workflow, standard, product, service, or measurable outcome.
• Relevant education, certification, portfolio, or equivalent practical experience.
• Flexible work arrangements where applicable.
• Opportunity to help build an early-stage company.
• Direct impact on company growth and operating quality.
• Cross-functional collaboration and professional development opportunities.
• Significant ownership over assigned responsibilities.
• Opportunity for responsibilities to expand as the company grows.