Direct Client: Vulnerability Management Analyst @ Austin, TX – REMOTE
Jobs via Dice · United States
- Hybrid
- Full-time
- $100,000 / year
- United States
Job highlights
- Manage and analyze vulnerability data.
- Prioritize vulnerabilities based on risk.
- Coordinate and track remediation efforts.
- Report on vulnerability status and trends.
- Improve vulnerability management processes.
About the role
Vulnerability Management Analyst
KSN Technologies, Inc. is seeking a Vulnerability Management Analyst to join their team. This is a remote, one-year contract position based in Austin, TX. The ideal candidate will be responsible for managing and improving the organization's vulnerability management program.
Key Responsibilities:
- Review existing vulnerability data from various security tools and establish a consolidated vulnerability baseline.
- Develop and document remediation timelines for identified vulnerabilities based on risk and aging.
- Categorize and prioritize vulnerabilities based on risk, severity, exploitability, and potential impact.
- Align vulnerability classification and prioritization with NIST guidance and agency expectations.
- Coordinate remediation activities with system, server, and application owners, communicating clear expectations and timelines.
- Track remediation progress, identify blockers, and escalate overdue or high-risk vulnerabilities as per agency processes.
- Maintain ongoing tracking of vulnerability remediation status and produce periodic status reports.
- Validate remediation actions through evidence such as scan results and confirm closure in tracking systems.
- Formally document vulnerabilities that cannot be remediated within required timeframes with approved risk acceptance.
- Identify process gaps and systemic issues affecting remediation effectiveness.
- Provide recommendations for improving vulnerability remediation processes and accountability.
Minimum Requirements:
- 8 years of experience in Vulnerability Inventory and Baseline Establishment
- 8 years of experience in Risk Classification and Prioritization
- 8 years of experience in tracking vulnerability remediation
- 8 years of experience in producing status reports
- 8 years of experience in validating remediation actions through available evidence, including vulnerability scan results
Key Skills/Competency:
- Vulnerability Management
- Risk Assessment
- Remediation Coordination
- Security Tools
- NIST Guidance
- Vulnerability Scanning
- Reporting
- Process Improvement
- Security Compliance
- Cybersecurity Analysis
Skills & topics
- Vulnerability Management Analyst
- Vulnerability Management
- Risk Assessment
- Cybersecurity
- NIST
- Remediation
- Security Analyst
- IT Security
- Vulnerability Scanning
- Austin
- Remote
How to get hired
- Tailor your resume: Highlight your 8+ years of experience in vulnerability management, risk classification, remediation tracking, and reporting.
- Emphasize key skills: Showcase expertise in NIST guidance, vulnerability scanning tools, and evidence validation.
- Address contract requirements: Clearly state your ability to work without visa sponsorship.
- Prepare for technical questions: Be ready to discuss your experience with establishing baselines, prioritizing risks, and coordinating remediation with system owners.
- Showcase process improvement: Demonstrate your ability to identify gaps and recommend improvements to vulnerability management processes.
Technical preparation
Master vulnerability scanning tools.,Understand NIST vulnerability guidelines.,Practice risk classification techniques.,Prepare to discuss remediation strategies.
Behavioral questions
Describe a complex vulnerability you managed.,How do you prioritize competing risks?,Detail your experience coordinating remediation.,How do you handle resistance to remediation?
Frequently asked questions
- What is the work arrangement for the Vulnerability Management Analyst role at KSN Technologies, Inc.?
- This is a remote position, allowing you to work from anywhere. While the role is associated with Austin, TX, the work itself can be performed remotely.
- What is the duration of the contract for the Vulnerability Management Analyst position?
- This is a one-year contract role with KSN Technologies, Inc.
- Does KSN Technologies, Inc. offer visa sponsorship for the Vulnerability Management Analyst role?
- No, candidates must be able to work without visa sponsorship for this opportunity.
- What are the primary responsibilities of a Vulnerability Management Analyst at KSN Technologies, Inc.?
- The role involves reviewing vulnerability data, establishing baselines, prioritizing risks, coordinating remediation, tracking progress, reporting, validating closure, and supporting program improvement.
- What level of experience is required for the Vulnerability Management Analyst position?
- A minimum of 8 years of required experience is needed in key areas like vulnerability inventory, risk classification, remediation tracking, reporting, and validation.
- What security frameworks or standards should I be familiar with for this role?
- Familiarity with NIST guidance is essential, as the role requires aligning vulnerability classification and prioritization with these standards.
- How does KSN Technologies, Inc. ensure vulnerabilities are addressed?
- The role involves coordinating remediation with system owners, tracking progress, escalating issues, and validating that remediation actions are completed and documented according to policy.