Information Security Analyst (Vulnerability Management)

TEKsystems•Richardson, TX

12h•$43 - $48•Hybrid

About The Position

This role is responsible for the operation of vulnerability assessment tools used to identify, evaluate, and report vulnerabilities across the enterprise. This role performs assessments of systems and networks within the network environment and identifies where those systems/networks deviate from acceptable configurations, standards, or policy.

Requirements

2+ Years experience working as a information Security Analyst, Penetration Tester, or similar role.
Hands-on experience with Vulnerability Management platforms such as Rapid7 InsightVM (preferred), Tenable Nessus, or Qualys in an enterprise environment.
Experience with multiple operating systems (Windows, macOS, Linux).
Working knowledge/experience with Python, PowerShell, and REST APIs.
Advanced knowledge and understanding of vulnerability scoring systems (e.g., CVSSv3, CVSSv4, EPSS).
Knowledge of endpoint security tools such as EDR solutions like CrowdStrike or Microsoft Defender for Endpoint.
SIEM Tools such as Microsoft Sentinel and other Advanced security capabilities (Defender for Office, Defender for Cloud Apps, SASE).
Familiarity with Entra ID sign-in logs and audit logs as it relates to Incident Response.
MISP or similar threat intelligence sharing platform.
Strong understanding and knowledge of Cybersecurity principles and frameworks, such as NIST CSF and ISO27001.
Ability to work collaboratively in a team environment.
Detail oriented, organized, follow up skills with an analytical thought.

Nice To Haves

Security certifications desired: CEH, Security+, PenTest+, GSEC.
Microsoft certifications desired: Microsoft Certified: Azure Fundamentals, Microsoft Certified: Azure Security Engineer Associate.
Experience with Third Party Risk Management a plus.

Responsibilities

Works independently to scope vulnerable bodies of technologies, identify weaknesses, severity, and impact, and recommend paths to remediation.
Support treatment and remediation activities with identified points of contact and system owners.
Learns advanced Cybersecurity concepts including new and modern threat exploitation techniques of inside and outside bad actors.
Contributes to actionable intelligence in the form of reports, notifications, alerts, and briefings.
Coordinate and communicate with cross-functional teams throughout the system lifecycle.
Highly motivated to gain knowledge of security techniques through formal and informal cybersecurity training opportunities (such as on-the-job training, mentorship, training courses, knowledge assessments).
Contributes to development of relevant applications and systems.