External Vulnerability Validation Analyst

Job Description:
The Cyber Assurance team at our global client in the aerospace and defense industry is responsible for protecting the enterprise-wide data, technology, and its end users from external cyber threats by constantly monitoring and remediating all of their assets and endpoints. To improve those efforts, they are looking to bring in an External Vulnerability Management Analyst to manage and track vulnerabilities across company assets. This resource will review enterprise-wide vulnerability scans, prioritize critical issue, and drive efforts with stakeholders to remediate high-risk vulnerabilities quickly and effectively. This is a massive opportunity for someone to come in and make an immediate impact and accelerate their cyber career at a Fortune 50 enterprise! This position is fully remote. Apply today to connect with a recruiter and learn more!

Requirements:
• 3+ years’ experience in Vulnerability Management/IT Security
• Focus on identifying, assessing, and mitigating risks effectively.
• Experience tracking and documenting vulnerabilities and remediation efforts
• Experience working with incident response teams and escalating critical issues
• Hands-on experience with vulnerability management tools such as: Tenable, Qualys, Rapid7
• Solid understanding of vulnerability assessment, risk prioritization, and remediation strategies.
• Knowledge of security frameworks, such as NIST, ISO 27001, and compliance requirements.

Nice to have:
• SANS (GSEC, etc.)
• Certified Information Systems Security Professional (CISSP)
• Certified Ethical Hacker (CEH)
• CompTIA Security+
• Certified Vulnerability Assessor (CVA)

Responsibilities:
• Review, prioritize, and document high-risk vulnerabilities for all company-owned or managed assets in vulnerability management systems.
• Hand off high-risk vulnerabilities/defects to the partner cyber team(s) for technical testing and track their status within vulnerability management reporting systems.
• Escalate critical and exploitable vulnerabilities to relevant teams or leadership, ensuring immediate attention and action is taken.
• Coordinate mitigation efforts with service owners, validating and documenting results once remediation activities are complete.
• Maintain up-to-date and accurate metrics in vulnerability management systems, tracking remediation efforts, risk levels, and mitigation timelines.
• Communicate and report vulnerability status and key metrics to stakeholders, ensuring clear visibility into vulnerability management efforts.
• Collaborate closely with IT and Security teams to develop strategies and best practices for vulnerability remediation and risk mitigation.