IT Security Analyst

IT Security Analyst

Location:

remote mid level Massachusetts, United States

The IT Security Analyst will support a strategic initiative integrating our vulnerability scanning platform. This role will focus on designing, developing, and validating the technical solution that automates the lifecycle of vulnerability remediation. This potential resource will work closely with cybersecurity, IT operations, and Service Now platform teams to ensure that detected vulnerabilities are seamlessly converted into actionable and trackable tickets in SNOW (Service Now) enabling better remediation, SLA tracking, and reporting.

• Design, develop and validate solutions that automate vulnerability life cycle management and remediation with Service Now® Vulnerability Response (VR).
• Identify security flaws and weaknesses in the systems that can be exploited to cause business risk.
• Provide crucial insights into the most pressing issues and suggest how to prioritize security resources while monitoring for and detecting security events utilizing Qualys and Nessus.
• Evaluate, rate and perform risk assessments on assets in addition to reviewing alerts escalated by end users and perform initial triage of incoming issues.
• Monitor health alerts and downstream dependencies in addition to providing limited response to end users for low complexity security events and reviewing false positives with the various Security teams to tune and provide feedback to improve accuracy of the alerts.
• Document, investigate and notify appropriate contact for security events and response while participating in the resolution of events, even after they are escalated.
• Collaborate with technical teams for security incident remediation and communication.
• Create process improvement by identifying inefficiencies and solutions for process improvements while following standard methodology to identify and/or detect threats to the IT infrastructure, applications and other information assets.

• Bachelor’s degree or experience in relevant field/equivalent work experience.
• 5+ years experience managing vulnerability remediation.
• Must have experience with Service Now (Sec Ops, Service Now® Vulnerability Response (VR), and workflows management).
• Ability to understand and validate vulnerability mapping with CMDB is a must.
• Must have strong knowledge of IT infrastructure, networking, servers, and datacenter environments.
• Bilingual in Spanish/English (not required, a plus).