Vulnerability Analyst

Direct message the job poster from Headway Tek Inc

Position Title :
Vulnerability Analyst (Onshore) – 2 Openings

Location :
McKinney, TX 4days onsite and Friday WFH -

Duration : 1 Year

We are seeking a highly skilled Vulnerability Analyst to provide project-based remediation support across diverse cloud and hybrid infrastructures, including AWS, Azure, Google Cloud Platform (GCP), and on-premises environments. This advisory role goes beyond tactical patching, requiring the delivery of tailored, strategic guidance to help clients achieve robust, sustainable security across complex architectures.

The ideal candidate will combine deep technical expertise with a clear understanding of the rapidly evolving AI-driven threat landscape—including AI-powered red teaming, automated penetration testing, and novel attack vectors. The analyst will ensure that remediation recommendations are current, actionable, and aligned with both cloud-native and hybrid operational realities.

• Vulnerability Management
  • Perform vulnerability assessments across AWS, Azure, GCP, and on-premises resources.
  • Work collaboratively with project, operations, and infrastructure teams to facilitate timely, effective remediation.
  • Prioritize vulnerabilities by severity, exploitability, and business impact, considering the unique dynamics of multi-cloud and hybrid environments.
  • Advise application, infrastructure, Dev Ops, and IT teams on secure configuration and patching strategies across cloud and on-premises platforms.
  • Recommend best practices for cloud-native and hybrid security controls (e.g., AWS Security Hub, Azure Security Center, GCP Security Command Center, on-prem SIEM and EDR solutions).
  • Contribute to the development and enhancement of enterprise security governance and standards for hybrid and multi-cloud environments.

• AI-Driven Threat Analysis
  • Monitor and assess emerging AI-based attack methodologies relevant to both cloud and on-premises infrastructures.
  • Evaluate AI-enabled red teaming and penetration testing tools, providing recommendations on adoption and integration where beneficial.
  • Share actionable threat intelligence and insights with technical and executive stakeholders to future-proof defenses.

• Collaboration and Reporting
  • Partner closely with SOC, cloud engineering, IT operations, and application teams throughout remediation processes.
  • Document remediation activities, lessons learned, and any outstanding risks across all environments.
  • Present findings and actionable recommendations to both technical and executive audiences.

• Mid-Senior level

• Contract

• Information Technology

• IT Services and IT Consulting

IsExpired: false