Senior Vulnerability Management Analyst (CrowdStrike)

The primary responsibility requires proactively identifying and managing all vulnerabilities detected across Metro Infrastructure. You must analyze and assess security risks, provide actionable recommendations for remediation, and collaborate with various teams to improve security posture. This role also involve ensuring timely application of patches and monitoring their effectiveness by collaborating with various IT teams to minimize disruptions. The primary goal is to maintain system security and stability by addressing vulnerabilities and ensuring compliance with security standards.

Responsibilities

Proactively identify and manage all vulnerabilities detected across Metro Infrastructure; Analyze and assess security risks and provide actionable recommendations for remediation; Collaborate with various teams to improve security posture; Ensure timely application of patches and monitor their effectiveness; Deep understanding of VAPT and its management platforms; Manage and maintain vulnerability scanning tools to identify security vulnerabilities in enterprise systems, networks, and applications; Refine scan results to identify and resolve false positive findings and produce vulnerability reports with actionable and prioritized information for system owners; Perform risk-based prioritization of identified vulnerabilities and conduct detailed assessments of critical vulnerabilities, developing mitigation strategies; Work with IT and cross-functional teams to develop and implement prioritized vulnerability remediation plans and timelines, ensuring timely patching or mitigation; Ensure Metro's systems and applications are regularly updated with security patches; Provide risk-based mitigation and remediation recommendations and guidance; Manage tracking and reporting on remediation progress to stakeholders and leadership; Stay updated on emerging threats and integrate threat intelligence into the vulnerability management process; Develop baseline asset inventories and maintain owners for systems in the inventory; Define metrics and reporting to track program effectiveness, and develop and track KPIs for the vulnerability management program; Cross-train and mentor the wider analyst team in the development of the VA Team; Adapt quickly to changing priorities and re-align with team priorities/roadmap

Requirements

Strong experience in coordinating vulnerability remediation activities in a larger corporate environment; Hands-on experience and knowledge of vulnerability management technologies; Extensive knowledge of OS, Application, Middleware Vulnerability Management, Container Scanning, and Patch Management; Well-versed in penetration testing, vulnerability scanning, and red teaming methodologies and frameworks such as OWASP Top 10 and CWE 25; In-depth understanding of technical information security concepts related to threat landscapes; Strong understanding of network protocols, operating systems, and security technologies; Experience in improving vulnerability prioritization models; Ability to conduct independent research and analysis, identifying issues, formulating options, and making conclusions and recommendations; Demonstrable conceptual, analytical and innovative problem-solving and evaluative skills; Very high attention to detail, with strong skills in managing/presenting data and information; Excellent communication, collaboration, and interpersonal skills; Capable of working collaboratively in a team environment and in a hybrid work environment, and as part of a geographically separated team; Willingness to learn additional technologies, not focused on a single technology/application; Bachelor's degree in Computer Science, Information Security, or a related field; 4-7 years of total experience in Cybersecurity in a large multi-national organization or in a known MSSP; Minimum 2 years of experience in Infrastructure Vulnerability Management

Nice to have

Relevant Cyber Security certifications (e.g. CompTIA PenTest+, C|PENT, OSCP, CPT, CCPT)