Cybersecurity Vulnerability Analyst

Job Description

The Vulnerability Analyst will play a pivotal role in the internal Application Security team, leading the coordination and management of vulnerability processes across our infrastructure and products. This position is responsible for driving continuous improvement in vulnerability management, supporting compliance activities, and fostering collaboration across technical and business stakeholders.

• Coordinate Vulnerability Management:
  Work with asset owners and stakeholders to ensure prompt remediation, offering guidance as needed.
• Review and Escalation:
  Organize and lead regular vulnerability review calls, ensuring that appropriate stakeholders and asset owners are aware of open findings.
• Infrastructure Drop‑In Sessions:
  Facilitate infrastructure vulnerability drop‑in sessions to address technical issues and promote best practices.
• Reporting:
  Prepare and present quarterly vulnerability reports, raising findings to appropriate stakeholders and leadership.
• Compliance Support:
  Support PCI evidencing and Approved Scanning Vendor (ASV) activities, ensuring compliance with regulatory requirements.
• Exception Management:
  Guide exception management processes, review submissions, and track unresolved vulnerabilities, facilitating approvals and risk acceptance.
• Training and Enablement:
  Deliver training sessions to technical and non-technical teams on vulnerability management processes and security best practices.
• Collaboration:
  
  Prepare for and participate in Business Continuity Working Group (BCWG) meetings, fostering cross‑functional collaboration.

This is a hybrid position. Expectation of days in office will be confirmed by your hiring manager.