Vulnerability Management Analyst

Weareproudtobeconsistentlyrecognizedasoneoftheworld’sbestplacestowork.

Wearecurrentlythetoprankedconsultingfirmon Glassdoor’sBest Placesto Worklistandhaveearnedthe #1overallspotarecordseventimes.

Extraordinaryteamsareattheheartofourbusinessstrategy,butthesedon’thappenbychance.

Theyrequireintentionalfocusonbringingtogetherabroadsetofbackgrounds,cultures,experiences,perspectives,andskillsinasupportiveandinclusiveworkenvironment.

Wehirepeoplewithexceptionaltalentandcreateanenvironmentinwhicheveryindividualcanthriveprofessionallyandpersonally.

You’lljoinour

Cyber Operationsteamwithin Bain ’sTechnology Services Group (TSG),workingcloselywithIT,infrastructure,cloud,andengineeringteamsacrossalargeanddiverseglobalenvironment.

You’llworkhands-onwithourcoretoolingstack,including

Qualys Vulnerability Management ,Detection and Response(VMDR) forhostandapplicationscanning,Wizforcloudandcontainerposture,and Taniumforendpointvisibilityandremediation.

You’llalsoleada

Continuous Threat Exposure Management (CTEM) programthatturnsfindingsfromthesetoolsintoasingle,risk-prioritizedviewofrealexposure.

WorkingcloselywithIT,infrastructure,cloud,andengineeringteams,you’llsetremediationstandards,drive accountability,guidejunioranalysts,andbriefleadershiponexposureandrisktrends.

Operateandadministerourcoreexposuremanagementtools,QualysVMDR,Wiz,and Tanium,including deployment,configuration,tuning,integration,and scanner,agent,andsensorhealth.

Establishandenforceremediationservice-level agreements(SLAs),partneringwithIT,infrastructure,cloud,andengineeringteamstodriveaccountabilityandresolvehigh-risk exposures.

Collaboratewiththreatintelligenceteamstoconnectemergingthreatswithinternalvulnerabilitiesandguidetargetedremediationefforts.

Developandautomatedashboardsandreportingonvulnerabilityexposure,scan coverage,remediation progress,vulnerability aging,andSLAadherenceusingnativereportingtools,Excel,andbusinessintelligencesolutions.

Mentorjunioranalysts,establishstandardsfortriageandreporting,andserveasanescalationpointforcomplexfindings.

Providerecommendationsonsecureconfigurations,system hardening,andoverallvulnerabilitymanagementprogrammaturity,communicatingeffectivelywithbothtechnicalteamsandseniorstakeholders.

Experience:

3–5yearsofhands-onexperienceinvulnerabilitymanagement,exposure management,orcloselyrelatedsecurityoperations,includingexperienceinaleadcapacity.

Vulnerability Management:
Deepunderstandingofthevulnerabilitymanagementlifecycle,risk-based remediation,andSLAgovernanceacrosslarge,complex environments.

Security Tooling:
Direct hands-onexperienceoperatingandadministering

QualysVMDR,Wiz,and Tanium,including deployment,configuration,tuning,integration,and reporting.

Experiencewithallthreeplatformsisrequired.

CTEM:
Demonstratedexperiencerunningormateriallycontributingtoa Continuous Threat Exposure Management program ,including scoping,discovery,prioritization,validation,and mobilization.

Data & Reporting:
Strongreportingandanalyticalcapabilities,including

Excel,pivottables,andnativesecuritytoolreporting,withtheabilitytoproducetechnicalandexecutive-level metrics.

Technical Environment:
Experiencesecuringcomplexenvironmentsspanning Windows,Linux,network devices,endpoints,containers,andmulti-cloud workloads.

Threat Intelligence:
Strongunderstandingofthreatintelligencesourcesandtheabilitytocorrelateexternalthreatswithinternalfindings.

Communication & Leadership:
Excellent written,verbal,andpresentationskills,withtheabilitytoinfluencestakeholders,communicateriskstoleadership,andmentorjunioranalysts.

English:
Advanced English proficiency,withtheabilitytocommunicateeffectivelyinprofessionalandtechnicalenvironments.

Knowledgeofcloudsecurit…