Information Security Analyst III - Vulnerability Management

Frost Bank•San Antonio, TX

10d

About The Position

Frost is hiring an Information Security Analyst III - Vulnerability Management to help keep Frost data and IT systems secure. The role analyzes and responds to security alerts, coordinates application and enterprise vulnerability and penetration testing, and performs and monitors security processes across the organization. The analyst provides technical expertise to the IT Security team and works with technology partners to identify, investigate, and reduce security risks. The position also involves communicating security risks and response updates to technical and non-technical stakeholders, including executive and board-level leadership.

Requirements

Bachelor's degree in IT Security, a related field, or equivalent experience.
5+ years of experience in Information Security, Vulnerability Management, or a related technical discipline.
Technical expertise in vulnerability management, vulnerability scanning, risk prioritization, container and cloud environments, operating systems, networking, threat intelligence, and/or security operations technologies.
CISSP certification or ability to attain it within 6 months.
Excellent written and verbal communication skills, including presenting technical risks and recommendations to technical and executive audiences.
Strong analytical and troubleshooting skills, including validating vulnerability findings, identifying false positives, coordinating remediation, and driving issues through resolution.

Nice To Haves

Experience with ticketing platforms, Tenable, Qualys, Rapid7, or similar vulnerability management platforms.
Experience evaluating zero-day vulnerabilities and emerging threats.
Security+ certification, GSEC certification, or other industry-recognized cybersecurity certifications.
Experience developing vulnerability metrics, dashboards, and executive reporting.

Responsibilities

Investigate, assess, and coordinate remediation of security vulnerabilities across enterprise infrastructure, cloud environments, applications, and supporting technologies.
Lead incident response efforts and provide clear, concise, and strategic updates to executive and board-level leadership.
Present security risks, vulnerability impacts, and mitigation strategies to technical and non-technical stakeholders.
Analyze vulnerability scan results and related security data to identify risks, validate findings, investigate false positives, and provide remediation guidance.
Maintain and continuously enhance security platforms and solutions.
Perform and document vulnerability detection, remediation tracking, exception management, compliance monitoring, and risk assessments.
Coordinate and perform application and enterprise vulnerability and penetration testing, analyze results, and initiate remediation processes.
Partner with technology teams to investigate complex vulnerabilities, validate remediation activities, troubleshoot findings, and reduce organizational risk.
Design, configure, test, implement, maintain, and document detection, prevention, and response processes in alignment with regulatory and compliance requirements.
Maintain current knowledge of cybersecurity threats and vulnerabilities, industry and regulatory standards, and market innovations.
Evaluate new security technologies for potential business value.
Represent the IT Security department on interdepartmental projects and collaborative efforts.
Act with Integrity, Caring, and Excellence to achieve all-win outcomes.