Vulnerability Management Analyst – Cloud & SIEM

Energy Exemplar Pty Ltd; United States; Remote; USD 80,000 - 120,000; Full time

Job summary

Energy Exemplar Pty Ltd is seeking an Information Security Analyst to lead vulnerability management, coordinating VAPT across cloud and on‑prem environments. You will work with engineering, cloud operations, and IT to identify, prioritize, and remediate vulnerabilities within defined SLAs.

The role offers flexible remote work options and exposure to security monitoring, SIEM platforms, and governance audits, with opportunities to influence the security posture across a global software portfolio.

Qualifications

• Experience performing vulnerability assessment and penetration testing (VAPT).
• Familiarity with CVSS scoring and prioritization.
• Knowledge of cloud security concepts (Azure preferred).
• Experience with SIEM platforms such as Splunk or Defender XDR.
• Understanding OWASP Top 10 and CWE basics.
• Ability to coordinate with multiple stakeholders and document findings.

Responsibilities

• Coordinate internal and external VAPT activities across cloud and on‑prem environments.
• Perform authenticated and unauthenticated vulnerability scans with enterprise tools.
• Review, triage, and prioritize vulnerabilities based on CVSS and business impact.
• Track remediation and verify closure, ensuring SLA compliance.
• Prepare vulnerability reports, dashboards, and executive summaries.
• Support audits (ISO 27001, SOC 2) with evidence related to vulnerability management.
• Assist in monitoring security events and SIEM investigations.

Skills

VAPT experience

OWASP Top 10 knowledge

CVSS understanding

Cloud security concepts

SIEM familiarity

Analytical skills

Communication skills

Vulnerability prioritization

Education

Bachelor’s degree in Computer Science or Information Security

Certifications such as CISSP or CEH desirable

Tools

Tenable

Qualys

Rapid7

Microsoft Defender Vulnerability Management

Microsoft Defender XDR

Splunk

Job description

Energy Exemplar Pty Ltd is seeking an Information Security Analyst to lead vulnerability management, coordinating VAPT across cloud and on‑prem environments. You will work with engineering, cloud operations, and IT to identify, prioritize, and remediate vulnerabilities within defined SLAs.

The role offers flexible remote work options and exposure to security monitoring, SIEM platforms, and governance audits, with opportunities to influence the security posture across a global software portfolio.