Vulnerability Management Analyst (US Remote)

Stott and May; Orlando (FL); Remote; USD 110,000 - 115,000; Full time

Job summary

An established industry player is seeking a Vulnerability Management Analyst to enhance their cybersecurity team. In this pivotal role, you'll lead efforts to identify and mitigate system vulnerabilities, ensuring a secure technology environment. Your expertise in vulnerability scanning tools like Tenable Nessus and Qualys will be crucial as you collaborate with IT and development teams to prioritize and address risks. This position offers a dynamic work environment where your contributions will directly impact the organization's security posture, making it an exciting opportunity for professionals passionate about cybersecurity.

Qualifications

• 3+ years in vulnerability management or related cybersecurity roles.
• Familiarity with vulnerability scanning tools like Nessus and Qualys.

Responsibilities

• Conduct regular vulnerability scans and analyze results.
• Collaborate with IT and DevOps to validate remediation of vulnerabilities.

Skills

Vulnerability Management

Cybersecurity

Vulnerability Scanning

Risk Assessment

Communication Skills

Collaboration Skills

Education

Relevant Certifications (e.g., CompTIA Security+)

Tools

Tenable Nessus

Qualys

SIEM Solutions (e.g., Sentinel)

EDR Solutions (e.g., CrowdStrike)

Scripting (Python, PowerShell)

Job description

Vulnerability Management Analyst (US Remote)

Get AI-powered advice on this job and more exclusive features.

This range is provided by Stott and May. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

$110,000.00/yr - $115,000.00/yr

Strategic Partnership Executive at Stott & May | Cultivating Top Tech Talent | Fuelling Technology Innovation Across UK

Vulnerability Management Analyst (US Remote)

Location: US Remote

Department: Security Risk Management

About the Role

We’re seeking a Vulnerability Management Analyst to join a cybersecurity team as they transition away from services currently provided by a third party. This is a key role in a newly forming security organization, where you'll help identify, assess, and manage risks to ensure a secure, resilient technology environment.

As a Vulnerability Management Analyst, you’ll take the lead in detecting system weaknesses, conducting vulnerability scans, prioritizing risks, and collaborating with teams across IT and development to drive remediation. You’ll be instrumental in reducing the organization’s attack surface and safeguarding our digital assets.

Key Responsibilities

• Conduct regular vulnerability scans using tools like Tenable Nessus or Qualys.
• Analyze scan results, assess exploitability, and prioritize remediation efforts.
• Collaborate with IT, DevOps, and system owners to validate and verify the remediation of vulnerabilities.
• Develop dashboards, reports, and metrics to track remediation progress and risk posture.
• Research new vulnerabilities and threats, and assess their impact on systems and networks.
• Provide mitigation strategies and countermeasures for identified security gaps.
• Ensure security configurations and hardening guidelines are implemented effectively.
• Regularly review and refine vulnerability management policies.
• Support compliance with industry best practices and regulatory standards.

Qualifications and Experience

• 3+ years of experience in vulnerability management or related cybersecurity roles.
• Deep familiarity with vulnerability scanning tools (Nessus, Qualys) and CVSS/EPSS scoring.
• Experience with SIEM, EDR, and SOAR solutions (e.g., Sentinel, CrowdStrike).
• Scripting skills (Python, PowerShell) for automation and efficiency.
• Strong knowledge of cloud environments (AWS, Azure, GCP).
• Solid understanding of threat modeling and risk assessment.
• Excellent communication, collaboration, and documentation skills.
• Relevant certifications such as CompTIA Security+, GCVA, CVMP or similar are a plus.

Help us secure the future.

APPLY NOW!

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Information Technology

Industries

• Technology, Information and Media