Remote Vulnerability Management Analyst

About the role

We are looking for a detail‑oriented Vulnerability Management Analyst to identify, assess, prioritize, and remediate security vulnerabilities across our infrastructure, applications, and cloud environments. The role works closely with IT, security, and operations teams to improve our security posture and reduce cyber risk.

Key responsibilities

• Perform regular vulnerability scans on servers, endpoints, applications, databases, and network devices.
• Analyze and prioritize findings using severity, risk, and business impact.
• Coordinate remediation activities with infrastructure, application, and cloud teams.
• Monitor the full vulnerability lifecycle: detection, reporting, remediation, and validation.
• Generate dashboards, reports, and risk metrics for management and audit purposes.
• Track remediation SLAs and ensure timely closure of vulnerabilities.
• Maintain and optimize scanning tools and processes.
• Assist in incident response and security investigations when required.
• Stay updated on emerging threats, CVEs, and best practices.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, IT or related field (preferred).
• Experience with vulnerability scanning tools such as Tenable Nessus, Qualys, or Rapid7 InsightVM.
• Familiarity with security frameworks like ISO 27001, NIST, and CIS.
• Knowledge of cloud security in AWS, Azure, or Google Cloud.
• Relevant certifications (Security+, CEH, CISSP, Qualys/Tenable) are a plus.

Required skills

• Tenable Nessus
• Qualys
• Rapid7 InsightVM
• CVSS scoring and patch‑management workflows
• ISO 27001, NIST, CIS frameworks
• AWS, Microsoft Azure, Google Cloud Platform
• Python, PowerShell, Bash (optional)
• SIEM tools (Splunk, QRadar)
• Ticketing tools (Jira, ServiceNow)
• Windows and Linux operating systems