Role Overview :

As a SOC Vulnerability Management Analyst, you will be at the forefront of safeguarding our digital infrastructure by identifying, assessing, and mitigating security risks across diverse environments. You will work closely with cross-functional IT and security teams to ensure that vulnerabilities are addressed systematically, maintaining the integrity of our applications and cloud platforms. This role is pivotal in reducing the organization's attack surface, ensuring that our security posture remains resilient against evolving threats while supporting seamless business operations.

Key Responsibilities :

- Execute end-to-end vulnerability management lifecycles using Qualys VMDR to identify and prioritize security gaps across the enterprise infrastructure.

- Conduct regular penetration testing and application security assessments using tools like Burp Suite to proactively uncover potential exploits before they can be leveraged by external actors.

- Manage and monitor security configurations within cloud environments to ensure compliance with industry standards and internal security policies.

- Collaborate with IT operations teams to track and remediate vulnerabilities through ITSM platforms, ensuring timely closure of security tickets and adherence to SLAs.

- Integrate security scanning processes into the CI/CD pipeline using JFrog to ensure that code deployments are secure and free from known vulnerabilities.

- Analyze security reports and provide actionable insights to stakeholders to drive continuous improvement in the overall cyber security posture.

Required Skillset :

- Demonstrated proficiency in managing vulnerability assessment programs using Qualys VMDR and interpreting complex security data to drive remediation efforts.

- Strong technical capability in performing manual and automated penetration testing using Burp Suite to identify application-level vulnerabilities.

- Proven experience in securing cloud-native environments and understanding the nuances of cloud security architecture.

- Ability to bridge the gap between technical security findings and business requirements by effectively communicating risk to non-technical stakeholders.

- Hands-on experience with ITSM tools for incident tracking and workflow management, ensuring high levels of accountability and process adherence.

- Familiarity with DevSecOps practices, specifically integrating security scanning tools like JFrog into development workflows.

- Strong analytical mindset with the ability to work independently in a fast-paced environment, maintaining a focus on detail and accuracy.

- A Bachelor's degree in Computer Science, Information Technology, or a related field, supported by 5 - 7 years of relevant experience in a SOC or security operations environment.