Vulnerability Management Analyst

WHAT MAKES US A GREAT PLACE TO WORK

Weareproudtobeconsistentlyrecognizedasoneoftheworld’sbestplacestowork.

Wearecurrentlythetoprankedconsultingfirmon Glassdoor’sBest Placesto Worklistandhaveearnedthe #1overallspotarecordseventimes.

Extraordinaryteamsareattheheartofourbusinessstrategy,butthesedon’thappenbychance.

Theyrequireintentionalfocusonbringingtogetherabroadsetofbackgrounds,cultures,experiences,perspectives,andskillsinasupportiveandinclusiveworkenvironment.

Wehirepeoplewithexceptionaltalentandcreateanenvironmentinwhicheveryindividualcanthriveprofessionallyandpersonally.

WHO YOU’LL WORK WITH

You’lljoinour

Cyber Operationsteamwithin Bain ’sTechnology Services Group (TSG),workingcloselywithIT,infrastructure,cloud,andengineeringteamsacrossalargeanddiverseglobalenvironment.

WHERE YOU’LL FIT WITHIN THE TEAM

Asa Vulnerability Management Analyst ,you’lloperateanddrivetheday-to-daymaturityofourvulnerabilityandexposuremanagementprogramacrossalarge,diverseglobalenvironmentspanningservers,endpoints,network devices,containers,andmulti-cloud workloads.

You’llworkhands-onwithourcoretoolingstack,including

Qualys Vulnerability Management ,Detection and Response(VMDR) forhostandapplicationscanning,Wizforcloudandcontainerposture,and Taniumforendpointvisibilityandremediation.

You’llalsoleada

Continuous Threat Exposure Management (CTEM) programthatturnsfindingsfromthesetoolsintoasingle,risk-prioritizedviewofrealexposure.

WorkingcloselywithIT,infrastructure,cloud,andengineeringteams,you’llsetremediationstandards,drive accountability,guidejunioranalysts,andbriefleadershiponexposureandrisktrends.

WHAT YOU’LL DO

• Ownandcontinuouslyimprovetheend-to-endvulnerabilitymanagementlifecycleacrosstheenterprise,includingassetdiscovery,scanning,detection,validation,prioritization,remediation governance,rescanning,andclosureverification.

• Operateandadministerourcoreexposuremanagementtools,QualysVMDR,Wiz,and Tanium,including deployment,configuration,tuning,integration,and scanner,agent,andsensorhealth.

• Leadthe Continuous Threat Exposure Management (CTEM) program,coordinating scoping,discovery,prioritization,validation,andmobilizationactivitieswhileconsolidatingfindingsintoasingle,risk-rankedviewofexposure.

• Prioritizevulnerabilitiesusingthe Common Vulnerability Scoring System (CVSS),Exploit Prediction Scoring System (EPSS),CISAKnown Exploited Vulnerabilities (KEV),threat intelligence,andbusinesscriticality.

• Establishandenforceremediationservice-level agreements(SLAs),partneringwithIT,infrastructure,cloud,andengineeringteamstodriveaccountabilityandresolvehigh-riskexposures.

• Collaboratewiththreatintelligenceteamstoconnectemergingthreatswithinternalvulnerabilitiesandguidetargetedremediationefforts.

• Defineandmaintainexceptionandrisk-acceptance standards,ensuringappropriatedocumentationforaudits,compliance,andleadershipreporting.

• Developandautomatedashboardsandreportingonvulnerabilityexposure,scan coverage,remediation progress,vulnerability aging,andSLAadherenceusingnativereportingtools,Excel,andbusinessintelligencesolutions.

• Mentorjunioranalysts,establishstandardsfortriageandreporting,andserveasanescalationpointforcomplexfindings.

• Providerecommendationsonsecureconfigurations,system hardening,andoverallvulnerabilitymanagementprogrammaturity,communicatingeffectivelywithbothtechnicalteamsandseniorstakeholders.

ABOUT YOU

Required Qualifications

• Experience:
  
  3–5yearsofhands-onexperienceinvulnerabilitymanagement,exposure management,orcloselyrelatedsecurityoperations,includingexperienceinaleadcapacity.

• Vulnerability Management:
  Deepunderstandingofthevulnerabilitymanagementlifecycle,risk-based remediation,andSLAgovernanceacrosslarge,complex environments.

• Security Tooling:
  Direct hands-onexperienceoperatingandadministering
  
  QualysVMDR,Wiz,and…