Senior Analyst, Cybersecurity Vulnerability Management

About the role

EY's Government and Infrastructure practice is looking for an experienced Vulnerability Management (VM) Cyber Senior to join its San Antonio team. The role designs, implements and manages a comprehensive vulnerability management service offering, helping clients deploy and run effective programs that combine technical expertise with an understanding of business risk.

Key responsibilities

• Analyze and prioritize vulnerabilities by technical risk, exploitability, asset context, CVSS, EPSS, CISA KEV and threat intelligence
• Research findings to understand the issue, impact and appropriate remediation, validate findings and investigate false positives
• Translate findings into clear, actionable remediation guidance for infrastructure, application, cloud and other technical teams
• Work with remediation teams to explain findings, remove blockers and drive vulnerabilities to validated closure
• Use Tenable Vulnerability Management and Tenable Exposure Management to analyze vulnerability and asset data and support prioritization
• Build custom Tenable dashboards and reports, and develop metrics and reporting (backlog, aging, remediation progress, trends, SLA performance) in Excel and/or Power BI
• Automate vulnerability analysis, reporting and repetitive VM activities with Python and/or PowerShell

Required profile

• Bachelor's degree or equivalent relevant experience
• 5+ years of cybersecurity experience, with hands-on vulnerability management experience
• Demonstrated experience with Tenable VM and/or Tenable Exposure Management
• Experience performing vulnerability analysis, validation, risk-based prioritization and remediation support
• Ability to obtain and maintain a security clearance
• Hybrid work arrangement; client-facing collaboration and presentation skills are a plus

Required skills

• Strong understanding of CVE, CWE, CVSS, EPSS and CISA KEV
• Hands-on Tenable VM and Exposure Management
• Windows, Linux, Active Directory, networking, cloud technologies and enterprise applications
• CIS, NIST, ISO 27001, PCI DSS and OWASP familiarity
• Python, PowerShell, Excel and/or Power BI

What we offer

• A competitive salary range depending on location (e.g., $104,800 to $192,200 for offices outside the NYC, Boston, Washington DC metro areas, Washington State and Southern California)
• Medical and dental coverage, pension and 401(k) plans
• Paid time off, including flexible vacation and EY-paid holidays