Information Security Analyst III - Vulnerability Management

Frost•San Antonio, TX

About The Position

The Information Security Analyst III - Vulnerability Management helps protect Frost’s data and IT systems by analyzing and responding to security alerts, coordinating vulnerability and penetration testing, and performing and monitoring security processes across the organization. The role provides technical expertise to the IT Security team and supports vulnerability management across enterprise infrastructure, cloud environments, applications, and related technologies. It also involves communicating security risks and remediation strategies to technical and non-technical stakeholders, including executive and board-level leadership.

Requirements

Bachelor's degree in IT Security, a related field, or equivalent experience.
At least 5 years of experience in Information Security, Vulnerability Management, or a related technical discipline.
Technical expertise in vulnerability management, vulnerability scanning, risk prioritization, container and cloud environments, operating systems, networking, threat intelligence, and/or security operations technologies.
CISSP certification or ability to attain it within 6 months.
Excellent written and verbal communication skills, including the ability to present technical risks and recommendations to technical and executive audiences.
Strong analytical and troubleshooting skills, including experience validating vulnerability findings, identifying false positives, coordinating remediation efforts, and driving issues through resolution.

Nice To Haves

Experience with ticketing platforms, Tenable, Qualys, Rapid7, or similar vulnerability management platforms.
Experience evaluating zero-day vulnerabilities and emerging threats.
Security+ certification, GSEC certification, or other industry-recognized cybersecurity certifications.
Experience developing vulnerability metrics, dashboards, and executive reporting.

Responsibilities

Investigate, assess, and coordinate remediation of security vulnerabilities across enterprise infrastructure, cloud environments, applications, and supporting technologies.
Lead incident response efforts and provide clear, concise, strategic updates to executive and board-level leadership.
Present security risks, vulnerability impacts, and mitigation strategies to technical and non-technical stakeholders, aligning recommendations with business objectives.
Analyze vulnerability scan results and related security data to identify risks, validate findings, investigate false positives, and provide remediation guidance.
Maintain and enhance security platforms and solutions to improve effectiveness, resilience, and alignment with evolving threats and business needs.
Perform and document security processes, including vulnerability detection, remediation tracking, exception management, compliance monitoring, and risk assessments.
Coordinate and perform application and enterprise vulnerability and penetration testing, analyze results, and initiate remediation processes.
Partner with technology teams to investigate complex vulnerabilities, validate remediation activities, troubleshoot findings, and reduce organizational risk.
Design, configure, test, implement, maintain, and document detection, prevention, and response processes in alignment with regulatory and compliance requirements.
Maintain current knowledge of cybersecurity threats and vulnerabilities, industry and regulatory standards, and market innovations.
Evaluate new security technologies for potential business value.
Represent the IT Security department on interdepartmental projects and collaborative efforts.
Act with Integrity, Caring, and Excellence to achieve all-win outcomes.