Job Summary:
We are seeking a highly skilled and experienced professional to lead our new Cybersecurity Vulnerability and Threat Management program. This critical role will be instrumental in strengthening our organization's security posture and protecting our digital assets from evolving cyber threats.
About the Role:
As the Cybersecurity Vulnerability and Threat Management Analyst, you will be responsible for developing, implementing, and overseeing comprehensive strategies to identify, assess, and mitigate security vulnerabilities across our IT infrastructure. You will work with various security professionals and collaborate with cross-functional teams to ensure the effectiveness of our security measures.
Key Responsibilities:
1. IT Asset Management (CMDB)
Develop and maintain a robust Configuration Management Database (CMDB)
Ensure accurate tracking and management of all IT assets
2. Vulnerability Management Strategy
Design and implement a comprehensive vulnerability management program
Establish policies, procedures, and best practices for vulnerability identification and remediation
3. Vulnerability Assessment
Conduct regular vulnerability scans and assessments across the organization's IT infrastructure
Analyze and prioritize vulnerabilities based on risk and potential impact
4. Remediation Planning
Develop and oversee the execution of remediation plans for identified vulnerabilities
Collaborate with IT and development teams to ensure timely resolution of security issues
5. Patch Management Strategy
Create and maintain an effective patch management process
Ensure timely application of security patches across all systems and applications
6. Threat Intelligence
Establish a threat intelligence program to proactively identify and respond to emerging threats
Lead threat hunting initiatives to detect and mitigate advanced persistent threats (APTs)
7. Penetration Testing
Oversee internal and external penetration testing efforts
Analyze results and recommend security improvements based on findings
Qualifications:
Bachelor of Science degree, required
2+ years of experience in the cybersecurity field, required
Excellent communication and leadership skills, required
Strong analytical and problem-solving abilities, required
Strong knowledge of vulnerability management tools, threat intelligence platforms, and penetration testing methodologies, preferred but not required
Certifications such as CISSP, CEH, GIAC, or equivalent, preferred but not required
Experience with regulatory compliance standards (e.g., NIST, CIS), preferred but not required
Benefits:
Medical insurance
Health savings account with company contribution
Dental insurance
Vision insurance
Basic and voluntary life insurance
Disability insurance
401(k) plan with company match
Paid vacation and holidays
Stock purchase program with employee discount
Educational reimbursement
Wellness programs and challenges
Other supplemental benefits
The Company is an Equal Opportunity Employer.