Vulnerability Analyst
IT
Remote
Posted on Oct 31, 2026
We are seeking a Vulnerability Management Analyst to support enterprise cybersecurity operations through the identification, assessment, prioritization, and documentation of security vulnerabilities across applications, systems, and infrastructure. This role will be responsible for evaluating newly disclosed vulnerabilities, determining organizational impact, assessing exploitability, and providing actionable risk recommendations to stakeholders.
The ideal candidate will have hands-on experience with vulnerability management programs, strong knowledge of industry-standard scoring methodologies, and the ability to translate technical findings into clear business and security risk assessments.
Key Responsibilities
- Triage newly disclosed vulnerabilities and determine their relevance and potential impact to enterprise applications, systems, and technology assets.
- Assess vulnerability exploitability using threat intelligence, vulnerability advisories, proof-of-concept (PoC) information, attack-path analysis, and emerging threat activity.
- Evaluate and document exposure risks, including potential business impact and remediation priorities.
- Assign and maintain risk and severity ratings aligned to organizational standards and industry frameworks, including CVE, CPE, and CVSS.
- Produce clear, accurate, and audit-ready case documentation, findings, recommendations, and remediation guidance.
- Support daily vulnerability management operations, including urgent escalations and global follow-the-sun support models.
- Collaborate with security, infrastructure, application, and platform teams to prioritize remediation activities and reduce organizational risk.
- Monitor newly disclosed vulnerabilities and provide timely analysis of threats affecting the enterprise environment.
Required Qualifications
- Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field, or equivalent professional experience.
- Hands-on experience with vulnerability management and end-to-end vulnerability assessment workflows.
- Strong knowledge of vulnerability identification and scoring methodologies, including CVE, CPE, and CVSS frameworks.
- Experience analyzing vulnerability disclosures, security advisories, exploit intelligence, and proof-of-concept research to assess real-world risk.
- Strong technical writing and communication skills with the ability to clearly document findings, impacts, recommendations, and remediation priorities.
- Experience working with enterprise technology platforms and infrastructure environments.
- Strong analytical, organizational, and problem-solving skills.
- Ability to effectively manage multiple priorities in a fast-paced operational environment.
Preferred Qualifications
- Experience with enterprise technologies including Microsoft, VMware, Oracle Java, Citrix, F5, and related infrastructure platforms.
- Knowledge of cloud environments and security considerations across large-scale enterprise deployments.
- Experience assessing risks associated with open-source software usage and dependency management.
- Familiarity with threat intelligence platforms, vulnerability scanning tools, and security operations processes.
- Experience supporting large-scale enterprise vulnerability management or security operations programs.
Key Skills
Medical, dental, and vision insurance are available to qualified candidates who meet eligibility requirements.
By providing your phone number, you consent to: (1) receive automated text messages and calls from the Judge Group, Inc. and its affiliates (collectively “Judge”) to such phone number regarding job opportunities, your job application, and for other related purposes. Message & data rates apply and message frequency may vary. Consistent with Judge's Privacy Policy, information obtained from your consent will not be shared with third parties for marketing/promotional purposes. Reply STOP to opt out of receiving telephone calls and text messages from Judge and HELP for help.