IT Threat and Vulnerability Management Analyst; Hybrid Office

Job Category: IT - Security

Requisition Number: ITTHR
009384

• Posted :
  October 2, 2026
• Full-Time
• Hybrid

Showing 1 location

Duncan, SC 29334, USA

AFL manufactures industry-leading fiber optic cable, connectivity and accessories and provides engineering and installation services for some of the largest telecom customers in the world. Our company was founded in 1984 with a single fiber optic cable and today, we manufacture thousands of products, generate an excess of $4B in revenue, and employ approximately 12,000 associates worldwide. At AFL, we recognize that our employees are our greatest asset.

We hire and train each individual, investing in them to ensure success in their careers. With a commitment to professional development and growth, let us connect you to your next career opportunity.

What We Offer:

• A hybrid in office schedule for qualifying employees
• Flexible time off policy
• 401K Company match (up to 4% - dollar for dollar)
• Professional development, training, and tuition reimbursement programs
• Excellent medical, dental, vision, and life insurance policy options
• Opportunities for career advancement with an industry leading company!

We are seeking an IT Threat and Vulnerability Management Analyst to join our global IT organization in Duncan, SC. Under general direction, this role executes AFL's continuous threat exposure management program across both the corporate network and the manufacturing environments behind it. The incumbent runs discovery and validation cycles, triages findings by real exploitability, and drives remediation to closure with Systems, Network, and Application teams.

Success is measured by remediated exposures, not the number of tickets created.

Responsibilities

• Run scheduled discovery, scanning, and assessment cycles across the environment. Maintain scan schedules, credential health, and sensor coverage.
• Maintain asset coverage and data accuracy. Investigate gaps where systems appear in one data source and not another.
• Triage findings daily. Rank exposures by exploitability, asset criticality, and network exposure, and reconcile duplicate or conflicting findings before assigning work.
• Execute attack path validation assessments on defined scopes and schedules. Translate validated attack paths into prioritized remediation work.
• Confirm exploitability in the AFL environment before escalating severity.
• Create and track remediation tickets with clear technical guidance for the owning team.
• Drive remediation to closure. Follow up on aging findings,
• Maintain the exception and risk acceptance queue, including expiration tracking and renewal review.
• Identify recurring exposures and root cause patterns, and raise them for upstream correction.
• Produce exposure metrics and dashboards for IT leadership and technical teams, and prepare exposure data for audit and compliance requests.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity or equivalent work experience.
• Two or more years in vulnerability management, security operations, systems administration, or IT infrastructure.
• Hands-on use of a vulnerability management or scanning platform.
• Working knowledge of Windows and Linux patching, including how updates deploy and why they fail.
• Understanding of CVSS, and awareness of EPSS and the CISA Known Exploited Vulnerabilities catalog.
• Ability to read a vulnerability finding and explain the actual risk in plain terms.
• Networking fundamentals, including segmentation and firewall rule review.
• Clear written communication and persistence in a matrixed environment.
• Preferred:
  Horizon3 Node Zero, Crowd Strike Falcon Exposure Management, Tanium, Qualys, Tenable, or Rapid7; scripting or…