Enterprise Security Posture Management Analyst

Description

• Perform configuration reviews to detect and prioritize risks in networks, systems, applications, and cloud infrastructures.
• Create and maintain metrics, dashboards, and reports on trends, remediation progress, and program effectiveness for senior leadership.
• Conduct continuous vulnerability assessments and verify appropriate coverage is maintained across on premises and cloud environments.
• Continually improve vulnerability and configuration management programs, including policies, procedures, and tools for continuous monitoring and remediation capabilities.
• Stay updated on industry trends, emerging threats, and best practices, recommending enhancements to security controls and tools.
• Coordinate remediation efforts with cross-functional teams, ensuring timely patching, configuration hardening, and mitigation strategies to reduce attack surfaces.
• Detect, report, and provide oversight over end-of-life hardware and software.
• Enrich vulnerability data with threat intelligence, perform risk assessments, and manage escalations for critical issues, including zero-day vulnerabilities.
• Drive automation initiatives for scanning, reporting, and compliance checks to enhance efficiency and scalability.

Requirements

• Strong knowledge of configuration management standards and Cloud Security Posture Management (CSPM).
• All applicants must be able to complete pre-employment onboarding requirements (if selected) which may include any/all of the following: criminal/civil background check, drug screen, and motor vehicle records search, in compliance with any applicable laws and regulations.
• Excellent communication skills to explain risk to both technical and non-technical audiences and influence leaders across IT and the business.
• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field or equivalent experience.
• Track record of leading security assessments, tool implementations, and cross-team collaborations in enterprise settings.
• Experience with scripting and automation languages (e.g., Python, PowerShell) for process optimization and integration.
• Familiarity with threat intelligence, incident response, and security operations in fast-paced environments.
• Proven experience managing vulnerability programs in on-premises, cloud (e.g., AWS, Azure, GCP), and hybrid environments.
• Curiosity to dig for root causes and find creative solutions to complex problems.
• Relevant certifications such as CISSP, CISM, CEH, GIAC, or equivalent are highly desirable.
• 6+ years of experience in cybersecurity, with at least 3-5 years focused on vulnerability and configuration management.
• Analytical skills for risk assessment, data enrichment, and trend analysis.
• Proficiency with vulnerability scanning and management tools like Qualys, Nessus, Tenable, Rapid7, or similar platforms.

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance