Vulnerability Management Analyst

• Does this position require a security clearance? No
• Years 3 to 5+ years
• Additional Info Visa / work permit sponsorship is not available for this position
• Applicants are required to read, write, and speak the following languages English

Who are we?
Oracle Analytics is a key contributor in delivering industry-leading cloud solutions to organizations worldwide. The Service Excellence team is dedicated to enabling secure, scalable, and reliable cloud services—driving transformation through technology innovation and operational excellence.

We blend cutting-edge cloud technologies, process automation, and security-first methodologies to ensure our customers’ data and operations remain safe and compliant. Our team empowers the proactive management of security risks and fosters a culture of continuous security improvement across Oracle’s cloud offerings.

Position Overview:
Join a fast-paced and growing organization as part of the core security team dedicated to cloud vulnerability management. You will play a pivotal role in overseeing the end-to-end process of vulnerability detection, risk assessment, remediation tracking, and process automation. Through your leadership and technical skills, you’ll drive timeliness, transparency, and continuous improvement in reducing security risk.

Role & Responsibilities
We are seeking a hands-on Security Analyst to own and coordinate the vulnerability management process across our cloud platforms. This key role entails:

• Daily monitoring, validation, and tracking of identified vulnerabilities to maintain accurate visibility of open, overdue, and new issues.
• Collaborating with development and service teams to prioritize and drive timely remediation of vulnerabilities, removing barriers and escalating as needed to meet compliance goals.
• Acting as an escalation point for remediation challenges and liaising with external technical or infrastructure teams as appropriate.
• Delivering comprehensive, periodic progress reports and metrics that clearly communicate remediation status, remediation trends, blockers, and actions being taken.
• Independently identifying risks and proposing effective solutions to resolve blockers and improve processes.
• Driving innovative solutions—such as automation, process optimization, and AI enablement—to meet and exceed security vulnerability SLAs and proactively address recurring challenges.
• Developing, enhancing, or integrating AI-driven tools, scripts, and platforms that automate vulnerability detection, tracking, reporting, pattern analysis, and remediation workflows.
• Facilitating knowledge-sharing sessions with development teams to promote best practices and share lessons learned.
• Continuously enhancing the vulnerability management process through innovation and operational improvements.

General Qualifications
The candidate should have knowledge and experience with:

• Vulnerability management in cloud or distributed environments (e.g., OCI, AWS, Azure, GCP).
• Vulnerability scanning tools, security operations workflows, and issue-tracking systems such as Jira.
• Experience designing or deploying automation and/or AI solutions that directly support vulnerability management objectives.
• Scripting and automation (preferably in Python, Bash, or similar languages).
• Agile methodologies and collaboration with global, cross-functional teams.
• Communicating risk and urgency to both technical and executive-level stakeholders.
• Generating clear documentation and regular written reports.

Preferred Qualifications

• Experience in information security, vulnerability management, or application/cloud security roles.
• Familiarity with industry-standard vulnerability assessment and scanning tools.
• Track record of driving remediation efforts from identification through closure.
• Analytical skills to identify trends and inform prioritization.
• Strong facilitation, negotiation, and collaborative skills.
• Demonstrated experience with automation or Dev Sec Ops  practices.
• Practical experience with AI/ML tools or platforms used in security analytics, automation, or decision-making.
• Understanding cloud service architectures and security controls.

Top 3 abilities / technologies in…