Security Analyst

• Monitor security tools and dashboards to identify vulnerabilities, assess risks, and propose compensating controls to reduce risk.
• Assess risks across IT infrastructure and cloud platforms.
• Communicate findings to appropriate teams and track vulnerabilities through resolution.
• Create detailed vulnerability reports for technical teams and summary reports for management.
• Collaborate with IT and development teams to prioritize and remediate vulnerabilities.
• Contribute to the development and improvement of vulnerability management processes and tools.

Duties and Responsibilities:

• Support cybersecurity programs to align with organizational security objectives.
• Conduct regular security scans, validate vulnerabilities through penetration testing, and retest fixes to ensure effectiveness across the enterprise and cloud environments.
• Administer and monitor security tools.
• Assist in establishing metrics and KPIs to measure vulnerability reduction.
• Collaborate with business units and engineering teams to implement security policies, establish sustainable processes, and enhance compliance while reducing risk.
• Provide support for cybersecurity projects, technical discussions, and collaborative meetings.
• Identify and address gaps within the cybersecurity program, applying your expertise to strengthen the organization’s security posture.

Qualifications

• Bachelor’s degree in Engineering, Computer Science, or related discipline
• 5+ years of experience in vulnerability assessment, penetration testing, or cybersecurity.
• Hands-on experience with vulnerability scanning tools and remediation processes.
• Hands-on experience with cloud platforms (preferably Azure & AWS)
• Knowledge of networking, operating systems (Windows, Linux), and application security.
• Experience with vulnerability frameworks (NIST, CVSS, etc.)
• Some experience with programming or scripting and familiarity with DevSecOps practices.
• Strong communication skills, with the ability to deliver clear oral, written, and visual presentations.
• Strong organizational skills, with the ability to plan, prioritize, and align tasks effectively.
• Customer-focused mindset with a strong eagerness to learn and grow.
• SANS GIAC, Network+, Security+, AZ-500 or other industry certifications preferred.