System Analyst

Key Responsibilities:

• Own and manage the end-to-end vulnerability management lifecycle, from identification and validation through remediation and closure.
• Perform hands-on vulnerability assessments across infrastructure, endpoints, cloud environments, networks, and applications.
• Analyze and validate vulnerability scan results, including identifying false positives and determining actual exposure.
• Perform risk-based vulnerability prioritization considering factors beyond CVSS/severity, including asset criticality, business impact, exploitability, exposure, and active exploitation.
• Investigate vulnerabilities across Windows and Linux environments and coordinate appropriate remediation activities.
• Assess security vulnerabilities across cloud and endpoint environments.
• Define technical remediation and mitigation steps and work with relevant teams to implement them.
• Document technical findings, evidence, risk, business impact, and recommended remediation actions.
• Drive vulnerability remediation across Infrastructure, Cloud, Network, Application, DevOps, and Security teams.
• Track remediation progress and ensure vulnerabilities are addressed within defined remediation SLAs.
• Perform remediation validation through re-scanning, technical verification, or other appropriate methods.
• Support endpoint security and vulnerability management activities using relevant security platforms.
• Maintain the vulnerability dashboards, reports, remediation status, and risk documentation.
• Provide regular updates to security and business stakeholders regarding critical findings, remediation progress, exceptions, and outstanding risks.
• Support investigation and response activities for critical or actively exploited vulnerabilities, including zero-day vulnerabilities when required.

Required Qualifications:

• 5+ years of experience in Vulnerability Management, Security Operations, Cybersecurity, or a related security domain.
• Hands-on experience in vulnerability assessment and vulnerability management.
• Strong understanding of risk assessment and risk-based vulnerability prioritization, beyond simply relying on CVSS/severity ratings.
• Ability to analyze, investigate, and validate vulnerability scan results.
• Strong knowledge of endpoint security and vulnerability remediation.
• Good understanding of Windows and Linux operating systems from a security perspective.
• Working knowledge of networking and network security fundamentals.
• Understanding basic application security and common application vulnerabilities.

Experience working with some of the following security technologies/tools:

• Wiz
• CrowdStrike
• Nexpose / Rapid7
• Splunk
• AppSpider
• ServiceNow

Ability to document technical security findings and define appropriate remediation/mitigation steps.

Demonstrated experience driving remediation activities across multiple technical teams.

Strong communication, stakeholder management, ownership, and follow-up skills.

Preferred Qualifications:

• Experience in Security Operations (SecOps) and/or Vulnerability Management.
• Exposure in security environments across AWS, Microsoft Azure, and Google Cloud Platform (GCP).
• Experience with zero-day vulnerability identification, assessment, response, and remediation.
• Experience working with remediation SLAs and vulnerability tracking.
• Familiarity with security exceptions, risk acceptance, compensating controls, and risk treatment processes.
• Experience coordinating remediation across infrastructure, cloud, network, application, and DevOps teams.

Relevant security certifications such as:

• CompTIA Security+
• CompTIA CySA+
• GIAC Security Essentials (GSEC)