Global Cybersecurity Assurance Analyst

UL Solutions • Northbrook, IL

2d • $85,000 - $100,000 • Hybrid

About The Position

As a Global Cyber Assurance Analyst, you will be responsible for identifying and assessing vulnerabilities in the organization's systems, applications, and infrastructure. You will conduct vulnerability scans, coordinate penetration tests, and provide recommendations for remediation. Responsibilities Vulnerability Assessment: Perform vulnerability assessments and scans on systems, networks, and applications using automated tools and manual techniques. Identify and evaluate vulnerabilities, misconfigurations, and security weaknesses in hardware, software, and network infrastructure. Analyze vulnerability scan results and prioritize vulnerabilities based on severity, potential impact, and exploitability. Penetration Testing: Coordinate and conduct penetration tests to identify security weaknesses and validate the effectiveness of existing controls. Utilize a combination of manual testing techniques and automated tools to simulate real-world attacks and exploit vulnerabilities. Collaborate with stakeholders to define the scope and objectives of penetration tests and ensure adherence to ethical hacking guidelines. Vulnerability Remediation: Provide detailed recommendations and guidance to IT teams and system administrators on remediation strategies for identified vulnerabilities. Collaborate with stakeholders to develop and implement effective patch management processes, security configurations, and secure coding practices. Track and monitor the progress of vulnerability remediation efforts and verify the successful resolution of identified vulnerabilities. Vulnerability Research and Threat Intelligence: Stay updated on the latest vulnerabilities, exploits, and emerging threat trends through research, security advisories, and vulnerability databases. Conduct vulnerability research and analysis to understand the impact and potential risks associated with newly discovered vulnerabilities. Leverage threat intelligence insights to enhance vulnerability management processes and prioritize remediation efforts. Reporting and Documentation: Prepare clear and concise vulnerability assessment reports, penetration test reports, and risk assessments for management and stakeholders. Document findings, methodologies, and recommended actions to address identified vulnerabilities. Maintain accurate and up-to-date documentation of vulnerability management processes, procedures, and remediation activities. Collaboration and Communication: Collaborate with IT teams, system owners, and other stakeholders to ensure effective vulnerability management and remediation practices. Communicate technical vulnerabilities, risks, and mitigation strategies to non-technical stakeholders in a clear and understandable manner. Provide guidance and support to internal teams on vulnerability management best practices and security controls. Qualifications Bachelor's degree in cybersecurity or related field Read and follow the Underwriters Laboratories Code of Conduct and follow all physical and digital security practices. Experience working with vulnerability management and penetration testing tools Exposure to Red Team/Blue Team activities 1-2 years' experience in cybersecurity or related field Relevant security certifications preferred What you’ll experience working for ULS UL Solutions has been pioneering change since 1894 and we’re still leading the way. From day one, we’ve blazed a trail protecting the planet and everyone on it. Our teams have influenced billions of products, plus services, software offerings and more. We break things, burn things and blow things up. All in the name of safety science. That’s where you come in — because none of it could happen without you. It takes passion to protect people, problem-solving to safeguard personal data and conviction to make the world a more sustainable place. It takes bold ideas and brilliant minds to build a better world for future generations across the globe. This is more than a job. It’s a calling. A passion to use our expertise and play our part in creating a more secure, sustainable world today — and tomorrow. As a member of our safety science community, you’ll use your ideas, your energy and your ambition to innovate, challenge and ultimately, help create a safer world. Everyone here is unique. But we’re also a global community, working together to help create a safer world. Join UL Solutions and you can connect with the brightest minds in the business, all bringing their distinct perspectives and diverse backgrounds together to deliver real change. Empowering our customers to keep the world safe means thinking ahead. It means investing in training and empowering our people to learn and innovate. At UL Solutions, we help build a better future — one where everyone benefits. Join UL Solutions to be at the center of safety. To learn more about us and the work we do, visit UL.com Total Rewards: We understand compensation is an important factor as you consider the next step in your career. The estimated salary range for this position is $85,000 to $100,000 USD and is based on multiple factors, including job-related knowledge/skills, experience, geographical location, as well as other factors. This position is eligible for annual bonus compensation with a target payout of 10% of the base salary. This position also provides health benefits such as medical, dental and vision; wellness benefits such as mental and financial health; and retirement savings (401K) commensurate with the standard rewards offered in each individual location or country. We also provide full-time employees with paid time off including vacation (15 days), holiday including floating holidays (12 days) and sick time off (72 hours). #LI-SG2 #LI-Hybrid

Requirements

• Bachelor's degree in cybersecurity or related field
• Read and follow the Underwriters Laboratories Code of Conduct and follow all physical and digital security practices.
• Experience working with vulnerability management and penetration testing tools
• Exposure to Red Team/Blue Team activities
• 1-2 years' experience in cybersecurity or related field

Nice To Haves

• Relevant security certifications preferred

Responsibilities

• Vulnerability Assessment: Perform vulnerability assessments and scans on systems, networks, and applications using automated tools and manual techniques.
• Identify and evaluate vulnerabilities, misconfigurations, and security weaknesses in hardware, software, and network infrastructure.
• Analyze vulnerability scan results and prioritize vulnerabilities based on severity, potential impact, and exploitability.
• Penetration Testing: Coordinate and conduct penetration tests to identify security weaknesses and validate the effectiveness of existing controls.
• Utilize a combination of manual testing techniques and automated tools to simulate real-world attacks and exploit vulnerabilities.
• Collaborate with stakeholders to define the scope and objectives of penetration tests and ensure adherence to ethical hacking guidelines.
• Vulnerability Remediation: Provide detailed recommendations and guidance to IT teams and system administrators on remediation strategies for identified vulnerabilities.
• Collaborate with stakeholders to develop and implement effective patch management processes, security configurations, and secure coding practices.
• Track and monitor the progress of vulnerability remediation efforts and verify the successful resolution of identified vulnerabilities.
• Vulnerability Research and Threat Intelligence: Stay updated on the latest vulnerabilities, exploits, and emerging threat trends through research, security advisories, and vulnerability databases.
• Conduct vulnerability research and analysis to understand the impact and potential risks associated with newly discovered vulnerabilities.
• Leverage threat intelligence insights to enhance vulnerability management processes and prioritize remediation efforts.
• Reporting and Documentation: Prepare clear and concise vulnerability assessment reports, penetration test reports, and risk assessments for management and stakeholders.
• Document findings, methodologies, and recommended actions to address identified vulnerabilities.
• Maintain accurate and up-to-date documentation of vulnerability management processes, procedures, and remediation activities.
• Collaboration and Communication: Collaborate with IT teams, system owners, and other stakeholders to ensure effective vulnerability management and remediation practices.
• Communicate technical vulnerabilities, risks, and mitigation strategies to non-technical stakeholders in a clear and understandable manner.
• Provide guidance and support to internal teams on vulnerability management best practices and security controls.

Benefits

• health benefits such as medical, dental and vision
• wellness benefits such as mental and financial health
• retirement savings (401K)
• paid time off including vacation (15 days), holiday including floating holidays (12 days) and sick time off (72 hours)

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Number of Employees: 5,001-10,000 employees