Security Analyst

WE are looking for a Vulnerability Management Analyst supports the AWPT program by triaging vulnerabilities, validating remediation, coordinating stakeholders, and managing the vulnerability lifecycle to ensure timely closure of security findings from AI-powered penetration testing tools.

Responsibilities

• Review and triage findings from AI-based penetration testing tools to assess exploitability, severity, technical impact, and business risk
• Identify false positives and duplicate vulnerabilities to improve accuracy of vulnerability data
• Recommend severity adjustments and risk acceptance decisions based on thorough risk assessment
• Coordinate with application teams to develop and validate remediation plans
• Review code changes, logs, and supporting evidence to confirm remediation effectiveness
• Retest vulnerabilities and validate fixes to ensure successful remediation before closure
• Enhance Jira-based triage workflows and automation to streamline vulnerability management processes
• Develop dashboards and lifecycle tracking reports to monitor vulnerability status and trends
• Improve vulnerability correlation and tracking capabilities for comprehensive risk visibility
• Support integration efforts with AI-powered testing platforms to optimize security assessments
• Manage vulnerability lifecycle tracking through Jira to ensure timely issue resolution
• Coordinate stakeholders and facilitate resolution of vulnerability-related issues across teams
• Escalate critical or overdue vulnerabilities to appropriate leadership for prompt action
• Produce governance metrics and executive reports to inform decision-making and compliance

Required competencies and certifications

• Vulnerability Management and Risk Assessment
• Penetration Testing concepts and OWASP Top 10 knowledge
• Jira workflow management and reporting skills
• Application Security and Secure Coding principles
• Security analytics and dashboard development
• Strong communication and stakeholder management skills

Preferred competencies and qualifications

• CEH, GWAPT, OSCP, CISSP, or equivalent certifications
• Experience in vulnerability governance for large enterprises
• Knowledge of AI-assisted security testing platforms