Network Security Analyst

Primary Responsibilities

• Review, triage, and manage vulnerability remediation assignments within Service Now IT Remediation Workspace.
• Coordinate remediation efforts for vulnerabilities that cannot be addressed through normal patch cycles (e.g., emergency, high-risk CVEs, exceptions, or special remediation scenarios).
• Serve as the central point of coordination between Server Operations, Security (CSOC), and other impacted teams throughout the remediation lifecycle.
• Track remediation status, dependencies, and outstanding actions to ensure vulnerabilities progress to closure in accordance with policy and risk priorities.
• Ensure remediation activities align with the Vulnerability Remediation Process and supporting work instructions.

• Create, manage, and update Vulnerability Remediation Tasks (VUL)
• Associated Change Requests
• Related Configuration Items (CIs)
• Ensure accurate documentation of remediation plans, implementation steps, validation outcomes, and rollback plans within Service Now records.
• Validate that vulnerability remediation tasks meet Service Now process requirements and audit expectations before change submission.
• Coordinate remediation sequencing across multiple server platforms and support teams using Service Now workflows and assignment rules.

• Prepare and submit Normal and Standard Change Requests for vulnerability remediation activities.
• Present vulnerability remediation changes to CAB, clearly articulating:
  • Security risk and urgency
  • Scope and impacted systems
  • Remediation approach
  • Testing and validation plans
  • Rollback and risk mitigation measures
• Address CAB questions and coordinate follow up actions as needed to secure approval.
• Ensure approved changes are scheduled, communicated, and implemented in alignment with change windows and operational constraints.

• Coordinate vulnerability remediation across:
  • Windows Server environments
  • Linux Server environments (RHEL)
  • Citrix server platforms
• Work with platform SMEs to understand remediation requirements and constraints without directly executing patching activities.
• Ensure consistent remediation tracking and reporting across heterogeneous server platforms.

• Maintain detailed tracking of:
  • Outstanding vulnerabilities
  • Change approvals
  • Implementation status
  • Validation and closure evidence
• Support audit, compliance, and leadership reporting with accurate, up to date remediation metrics and status summaries.
• Identify process gaps, bottlenecks, or recurring issues and recommend improvements to remediation and change workflows.

• 3 years required:
  Proven experience coordinating server vulnerability remediation in an enterprise environment.
• 3 years required:
  Strong hands on experience with Service Now, including Change Management and IT Remediation Workspace.
• 3 years required:
  Solid understanding of change management processes and presenting changes to a CAB.
• 3 years required:
  Practical knowledge of server platforms:
  Windows Server, Linux Server, Citrix Infrastructure.
• 3 years required:
  Exceptional organizational skills with the ability to manage multiple parallel remediation efforts.
• 3 years required:
  Strong written and verbal communication skills, especially for CAB and cross team coordination.
• 1 year preferred:
  Experience supporting vulnerability remediation in a government, regulated, or large enterprise environment.
• 1 year preferred:
  Familiarity with vulnerability management workflows involving CSOC, Infrastructure, and Application teams.
• 1 year preferred:
  Experience coordinating remediation outside of standard patching schedules (emergency or out of band remediation).
• 1 year preferred:
  Prior exposure to audit, compliance, or security evidence collection related to vulnerability remediation.
• 1 year preferred:
  Timely remediation of high risk and exception-based vulnerabilities.
• 1 year preferred:
  High quality, CAB approved change records with complete and accurate documentation.
• 1 year preferred:
  Clear, auditable tracking of vulnerability remediation status from assignment through closure.
• 1 year preferred:
  Improved coordination and reduced remediation delays across server platforms.