Vulnerability Management Analyst

Overview

Proactive security starts with understanding and mitigating vulnerabilities. As a Vulnerability Management Analyst, you will be critical in teaching AI the nuances of identifying, prioritizing, and remediating security weaknesses across diverse IT environments, transforming it into an intelligent risk reduction partner.

Key Responsibilities

• Develop comprehensive training datasets covering vulnerability scanning methodologies, tools, and reporting best practices.
• Create realistic scenarios for assessing vulnerabilities in operating systems, applications, and network devices.
• Generate detailed content on patch management strategies, configuration hardening, and risk prioritization frameworks (e.g., CVSS, EPSS).
• Formulate questions and evaluate AI's ability to recommend appropriate remediation steps for identified CVEs.
• Provide expert insights into the lifecycle of a vulnerability, from discovery to closure, and its impact on an organization's risk posture.
• Review AI-generated vulnerability assessment reports and provide feedback on accuracy, clarity, and actionable recommendations.

Ideal Qualifications

• Minimum 5 years of experience in vulnerability management, security auditing, or penetration testing.
• Certifications such as CySA+, PenTest+, or CISSP are highly desirable.
• Hands-on experience with leading vulnerability scanners (e.g., Nessus, Qualys, Rapid7 InsightVM).
• Strong understanding of common vulnerabilities and exposures (CVEs), security misconfigurations, and patch deployment processes.
• Proficiency with asset management systems and ticketing systems for tracking remediation efforts.
• Experience with scripting (Python, PowerShell) for automating vulnerability data analysis or reporting.

Project Timeline

• Start Date: Immediate
• Duration: Ongoing (Project-based)
• Commitment: Flexible, 15-25 hours/week