Vulnerability Management Analyst: AI-Driven Automation

Vanguard; Malvern (Chester County); Hybride; USD 110 000 - 170 000; Plein temps

Avantages offerts par ce poste

Hybrid work model

Résumé du poste

Vanguard is seeking a Vulnerability Management Analyst to join our high-energy security team in Malvern. You will identify, prioritize, and manage vulnerabilities across Vanguard's hybrid infrastructure, ensuring adherence to hardening standards and AI-assisted remediation tooling.

This role blends risk, automation, and emerging AI capabilities to reduce threats while supporting cross-functional partners across SOC and engineering.

Qualifications

• Minimum of 4 years related work experience in vulnerability management.
• Experience with at least one major cloud provider.
• Experience with CVSS or other CVE rating frameworks.
• Experience automating processes.
• Undergraduate degree or equivalent.

Responsabilités

• Monitor Vanguard assets for vulnerabilities and security configuration weaknesses.
• Automate aspects of VulnOps to defend against AI-driven threats.
• Collaborate with SOC, Threat Intel, Offensive Security to prioritize and report remediation progress.
• Investigate false positives and risk-acceptance requests.
• Shape enforcement controls and guardrails.
• Support rapid response during zero-day events with reports and investigations.
• Tune scanning tools with Engineering to improve visibility.
• Drive continuous process improvement and automation across findings.

Connaissances

Vulnerability management

Security risk assessment

Automation

Communication

Cross-functional collaboration

Problem solving

Formation

Bachelor's degree in a related field

Outils

Aqua

Palo Alto Prisma

Wiz

CrowdStrike

Tenable Nessus

Qualys

Description du poste

Vanguard is seeking a Vulnerability Management Analyst to join our high-energy security team in Malvern. You will identify, prioritize, and manage vulnerabilities across Vanguard's hybrid infrastructure, ensuring adherence to hardening standards and AI-assisted remediation tooling.

This role blends risk, automation, and emerging AI capabilities to reduce threats while supporting cross-functional partners across SOC and engineering.