Vulnerability Management Analyst — AI-Driven Security & Automation

The Vanguard Group; Malvern (Chester County); Hybrid; USD 120,000 - 160,000; Full time

Job summary

The Vanguard Group is seeking a Vulnerability Management Analyst to strengthen our attack surface management. You will identify, prioritize, and manage vulnerabilities across Vanguard’s hybrid infrastructure while aligning with hardening standards and AI-assisted remediation tooling.

You will partner with SOC, threat intel, and engineering teams to refine prioritization, validate impact, and report progress. Prior experience in security risk and automation is essential.

Qualifications

• Minimum of 4 years related work experience in vulnerability management or risk reduction.
• Experience with major cloud providers and secure configurations.
• Experience with CVSS or other vulnerability rating frameworks.
• Proven ability to automate processes and drive remediation.

Responsibilities

• Monitor Vanguard assets for vulnerabilities and configuration weaknesses as part of CTEM.
• Automate aspects of VulnOps to defend against AI-driven threats.
• Collaborate with SOC, threat intel, and engineering to prioritize and validate mitigations.
• Investigate false-positives and requests for risk-acceptance or rating adjustments.
• Develop and refine remediation reports and guardrails; support zero-day response.

Skills

Vulnerability management

Cloud security

Automation scripting

CVSS/ remediation frameworks

Stakeholder communication

Education

Bachelor's degree in related field

Tools

Aqua

Palo Alto Prisma

Wiz

CrowdStrike

Tenable Nessus

Qualys

Job description

The Vanguard Group is seeking a Vulnerability Management Analyst to strengthen our attack surface management. You will identify, prioritize, and manage vulnerabilities across Vanguard’s hybrid infrastructure while aligning with hardening standards and AI-assisted remediation tooling.

You will partner with SOC, threat intel, and engineering teams to refine prioritization, validate impact, and report progress. Prior experience in security risk and automation is essential.