Vulnerability Management Analyst

Covenant HR LLC; United States; Remote; USD 110.000 - 150.000; Vollzeit

Zusammenfassung

Our client, a globally recognized technology consulting and cybersecurity leader, seeks a Vulnerability Management Analyst for a 100% remote role across North America. You will review, triage, and analyze disclosed vulnerabilities across enterprise platforms, identify affected assets, and determine exposure and business impact.

Responsibilities include evaluating exploitability with threat intel, CVSS-based risk scoring, and producing clear remediation guidance while maintaining audit-ready

Qualifikationen

• Hands-on vulnerability management and triage experience.
• Strong ability to assess exposure and risk using CVE/CPE/CVSS.
• Broad enterprise tech knowledge (Microsoft, VMware, Oracle/Java, Citrix, F5, cloud, open-source).
• Excellent audit-ready vulnerability assessments with remediation recommendations.

Aufgaben

• Review, analyze, and triage newly disclosed vulnerabilities across enterprise applications, infrastructure, and technology platforms.
• Identify affected systems and assets to determine vulnerability applicability, exposure, and business impact.
• Evaluate exploitability using threat intel, advisories, PoCs, and attack paths.
• Assess vulnerability severity and risk using CVE, CPE, CVSS, and client criteria.
• Maintain comprehensive, audit-ready documentation for vulnerability investigations and risk decisions.
• Escalate critical vulnerabilities to stakeholders for timely remediation.

Kenntnisse

Vulnerability management

CVE/CPE/CVSS

Enterprise tech knowledge

Technical documentation

Jobbeschreibung

Company - Our client is a globally recognized technology consulting and cybersecurity leader specializing in advanced technology solutions, digital transformation, and enterprise risk management. With a strong reputation for innovation and tackling complex security challenges, they offer the opportunity to work on high-impact cybersecurity initiatives across diverse enterprise environments.

Job Title - Vulnerability Management Analyst

Location - 100% Remote – North America

Must Have Skills:

• Hands-on vulnerability management and triage experience, including assessing newly disclosed vulnerabilities, identifying affected assets, and determining customer exposure and impact.
• Strong expertise in CVE, CPE, CVSS, and risk assessment methodologies, including evaluating exploitability, interpreting threat intelligence and proof-of-concept exploits, and assigning defensible severity and risk ratings.
• Broad enterprise technology knowledge, including Microsoft, VMware, Oracle/Java, Citrix, F5, cloud environments, and enterprise open-source technologies, with an understanding of patch management and software release lifecycles.
• Strong technical documentation and communication skills, with the ability to produce accurate, audit-ready vulnerability assessments covering exposure, impact, risk rationale, remediation recommendations, and escalation details.

Responsibilities and Job Details:

• Review, analyze, and triage newly disclosed vulnerabilities across enterprise applications, infrastructure, and technology platforms.
• Identify affected systems and assets to determine vulnerability applicability, customer exposure, and potential business impact.
• Evaluate exploitability using threat intelligence, published security advisories, proof-of-concept exploits, and potential attack paths.
• Assess vulnerability severity and risk using CVE, CPE, CVSS, and client-specific risk assessment criteria.
• Analyze vulnerabilities across diverse enterprise technologies, including Microsoft, VMware, Oracle/Java, Citrix, F5, cloud platforms, and open-source ecosystems.
• Develop clear, actionable vulnerability assessments outlining technical findings, exposure, risk rationale, and recommended remediation or mitigation steps.
• Maintain comprehensive, accurate, and audit-ready documentation for vulnerability investigations and risk decisions.
• Escalate critical and high‑risk vulnerabilities to appropriate stakeholders to support timely response and remediation.
• Support ongoing vulnerability management operations, including continuous monitoring, assessment, and prioritization of emerging security threats.
• Collaborate with geographically distributed security teams to ensure effective communication, case handoffs, and continuity of vulnerability assessments.
• Contribute to a global 24x5 vulnerability management operation, working an anticipated 40‑hour week in a fully remote environment.
• Support our client's efforts to strengthen enterprise security posture through consistent, risk‑based vulnerability analysis and assessment.