Vulnerability Management Analyst

General Information Job Title Vulnerability Management Analyst Job ID110664

Work Areas Technology & Engineering

Employment Type

Permanent Full-Time Location(s)
Boston, Chicago, Dallas Description & Requirements WHAT MAKES US A GREAT PLACE TO WORKWe are proud to be consistently recognized as one of the world’s best places to work. We are currently the top ranked consulting firm on Glassdoor’s Best Places to Work list and have earned the #1 overall spot a record seven times. Extraordinary teams are at the heart of our business strategy, but these don’t happen by chance.

They require intentional focus on bringing together a broad set of backgrounds, cultures, experiences, perspectives, and skills in a supportive and inclusive work environment. We hire people with exceptional talent and create an environment in which every individual can thrive professionally and personally.

WHO YOU’LL WORK WITHYou’ll join our Cyber Operations team within Bain’s Technology Services Group (TSG), working closely with IT, infrastructure, cloud, and engineering teams across a large and diverse global environment.

WHERE YOU’LL FIT WITHIN THE TEAMAs a Vulnerability Management Analyst, you’ll operate and drive the day-to-day maturity of our vulnerability and exposure management program across a large, diverse global environment spanning servers, endpoints, network devices, containers, and multi-cloud workloads.

You’ll work hands-on with our core tooling stack, including Qualys Vulnerability Management, Detection and Response (VMDR) for host and application scanning, Wiz for cloud and container posture, and Tanium for endpoint visibility and remediation.

You’ll also lead a Continuous Threat Exposure Management (CTEM) program that turns findings from these tools into a single, risk-prioritized view of real exposure. Working closely with IT, infrastructure, cloud, and engineering teams, you’ll set remediation standards, drive accountability, guide junior analysts, and brief leadership on exposure and risk trends.

WHAT YOU’LL DOOwn and continuously improve the end-to-end vulnerability management lifecycle across the enterprise, including asset discovery, scanning, detection, validation, prioritization, remediation governance, rescanning, and closure verification.

Operate and administer our core exposure management tools, Qualys VMDR, Wiz, and Tanium, including deployment, configuration, tuning, integration, and scanner, agent, and sensor health.

Lead the Continuous Threat Exposure Management (CTEM) program, coordinating scoping, discovery, prioritization, validation, and mobilization activities while consolidating findings into a single, risk-ranked view of exposure.

Prioritize vulnerabilities using the Common Vulnerability Scoring System (CVSS), Exploit Prediction Scoring System (EPSS), CISA Known Exploited Vulnerabilities (KEV), threat intelligence, and business criticality.

Establish and enforce remediation service-level agreements (SLAs), partnering with IT, infrastructure, cloud, and engineering teams to drive accountability and resolve high-risk exposures.

Collaborate with threat intelligence teams to connect emerging threats with internal vulnerabilities and guide targeted remediation efforts.

Define and maintain exception and risk-acceptance standards, ensuring appropriate documentation for audits, compliance, and leadership reporting.

Develop and automate dashboards and reporting on vulnerability exposure, scan coverage, remediation progress, vulnerability aging, and SLA adherence using native reporting tools, Excel, and business intelligence solutions.

Mentor junior analysts, establish standards for triage and reporting, and serve as an escalation point for complex findings.

Provide recommendations on secure…