Vulnerability Management Analyst

Company - Our client is a globally recognized technology consulting and cybersecurity leader specializing in advanced technology solutions, digital transformation, and enterprise risk management. With a strong reputation for innovation and tackling complex security challenges, they offer the opportunity to work on high-impact cybersecurity initiatives across diverse enterprise environments.

Job Title - Vulnerability Management Analyst

Location - 100% Remote – North America

Must Have

Skills:

• Hands-on vulnerability management and triage experience, including assessing newly disclosed vulnerabilities, identifying affected assets, and determining customer exposure and impact.
• Strong expertise in CVE, CPE, CVSS, and risk assessment methodologies, including evaluating exploitability, interpreting threat intelligence and proof-of-concept exploits, and assigning defensible severity and risk ratings.
• Broad enterprise technology knowledge, including Microsoft, VMware, Oracle/Java, Citrix, F5, cloud environments, and enterprise open-source technologies, with an understanding of patch management and software release life cycles.
• Strong technical documentation and communication skills, with the ability to produce accurate, audit-ready vulnerability assessments covering exposure, impact, risk rationale, remediation recommendations, and escalation details.

Responsibilities and Job Details:

• Review, analyze, and triage newly disclosed vulnerabilities across enterprise applications, infrastructure, and technology platforms.
• Identify affected systems and assets to determine vulnerability applicability, customer exposure, and potential business impact.
• Evaluate exploitability using threat intelligence, published security advisories, proof-of-concept exploits, and potential attack paths.
• Assess vulnerability severity and risk using CVE, CPE, CVSS, and client-specific risk assessment criteria.
• Analyze vulnerabilities across diverse enterprise technologies, including Microsoft, VMware, Oracle/Java, Citrix, F5, cloud platforms, and open-source ecosystems.
• Develop clear, actionable vulnerability assessments outlining technical findings, exposure, risk rationale, and recommended remediation or mitigation steps.
• Maintain comprehensive, accurate, and audit-ready documentation for vulnerability investigations and risk decisions.
• Escalate critical and high‑risk vulnerabilities to appropriate stakeholders to support timely response and remediation.
• Support ongoing vulnerability management operations, including continuous monitoring, assessment, and prioritization of emerging security threats.
• Collaborate with geographically distributed security teams to ensure effective communication, case handoffs, and continuity of vulnerability assessments.
• Contribute to a global 24x5 vulnerability management operation, working an anticipated 40‑hour week in a fully remote environment.
• Support our client's efforts to strengthen enterprise security posture through consistent, risk‑based vulnerability analysis and assessment.