Senior Information Security Analyst

As a full-time remote Senior Information Security Analyst focusing on vulnerability management, the candidate will manage the vulnerability management program, conduct scans, oversee penetration testing, and report findings while advocating for security enhancements across the enterprise. Key responsibilities Conduct internal and external vulnerability scans and manage the penetration testing program Rank and prioritize risks, reporting findings to stakeholders and identifying areas for security improvements Serve as a subject matter expert in vulnerability management for enterprise projects, ensuring compliance with security requirements Required qualifications A minimum of eight years of related work experience, or a bachelor's degree with at least five years of relevant experience, or a master's degree with a minimum of three years of relevant experience Experience using vulnerability management tools such as Qualys, Tenable, or Wiz Knowledge of risk-based prioritization methods and ability to interpret threat intelligence Experience in remediation management, ensuring SLAs are met and collaborating with technology teams Familiarity with penetration testing and integrating findings into the vulnerability management program