Vulnerability Management Analyst (Hybrid) — Secure Banking Tech

SMBC Group; Charlotte (NC); Hybrid; USD 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

SMBC Group is seeking a Vulnerability Management Analyst to strengthen cybersecurity across networks, apps, and infrastructure. You will identify risks, drive remediation, and ensure timely closure while collaborating with security professionals and IT owners.

The role emphasizes proactive risk-based vulnerability management, scanning, threat research, and reporting within a large enterprise environment. Hybrid work is offered.

Qualifications

• Foundational cybersecurity knowledge gained through study or work.
• Familiarity with MITRE ATT&CK and common network/web attacks.
• Understanding of OS, networking, web apps, and infrastructure.
• Hands-on exposure to vulnerability assessment tools and interpreting results.
• Ability to assess exploitability, exposure, and business impact when prioritizing fixes.
• Strong written and verbal communication to explain risks to stakeholders.
• Experience coordinating remediation with tech owners is a plus.
• Analytical, proactive, and organized with strong time management.

Responsibilities

• Triage vulnerability alerts from tools and external sources and assess impact.
• Configure scans and policy checks across networks, infra, and apps.
• Collaborate with business units to perform assessments and oversee remediation.
• Model attack surface risks and communicate high-risk areas to stakeholders.
• Contribute to vulnerability management reports and metrics.
• Tune tools to improve coverage and reduce false positives/negatives.
• Work with the Optimization team on detections and mitigations.
• Drive continuous security posture improvements across the bank.

Skills

Cybersecurity knowledge

MITRE ATT&CK framework

OS & networking basics

Vulnerability assessment tools

Exploitability prioritization

Communication skills

Remediation coordination

Scripting & automation

Cloud technologies

Tools

Nessus

Qualys

Burp Suite

Job description

SMBC Group is seeking a Vulnerability Management Analyst to strengthen cybersecurity across networks, apps, and infrastructure. You will identify risks, drive remediation, and ensure timely closure while collaborating with security professionals and IT owners.

The role emphasizes proactive risk-based vulnerability management, scanning, threat research, and reporting within a large enterprise environment. Hybrid work is offered.