Junior Information Security Vulnerability Analyst

Fortive

About The Position

As a Junior Vulnerability Analyst on Fluke’s Information Security team, you will play an integral role in ensuring the security of our infrastructure across cloud, web, endpoints, and on-premises environments. This entry-level position focuses on identifying, managing, and mitigating vulnerabilities to strengthen Fluke’s overall security posture. You will work closely with the Vulnerability Management Lead and Product Security Lead, gaining hands-on experience in vulnerability management, security monitoring, and compliance efforts. This role is ideal for candidates with foundational knowledge of cybersecurity who are eager to grow their technical skills and contribute to a dynamic team. The Junior Vulnerability Analyst reports to the CISO and receives daily guidance from the Vulnerability Management Lead and Product Security Lead.

Requirements

Basic understanding of system security principles and common vulnerabilities (e.g., CVS Scoring).
Detail-oriented, with a strong focus on data accuracy and accountability.
Foundational knowledge in vulnerability assessment and familiarity with vulnerability management tools (e.g., Nexpose Rapid7).
Ability to prioritize tasks, adapt to changing requirements, and meet deadlines.
Strong communication skills, able to document findings clearly and collaborate effectively.
Willingness to learn and apply new technologies and security practices.
B.S. Degree in Information Assurance, Cybersecurity, Computer Science or other related field, or equivalent work experience

Nice To Haves

Experience with CMDB management platforms is a plus (e.g., Service-Now)

Responsibilities

Vulnerability Identification and Management: Assist in scanning, identifying, and documenting vulnerabilities across cloud, web applications, endpoints, and on-premises infrastructure.
Support prioritization and remediation efforts by working with relevant teams to address identified vulnerabilities.
Asset Inventory Maintenance: Develop and maintain an accurate inventory of infrastructure components, including domains, applications, and systems, ensuring proper ownership and accountability.
Monitor and Improve Security Metrics: Regularly review and contribute to the improvement of Fluke’s security posture and score by ensuring vulnerabilities are addressed promptly and security best practices are followed.
Collaborate on Security Initiatives: Work alongside the Product Security Lead to identify and remediate vulnerabilities in digital products and external-facing assets.
Partner with cross-functional teams to implement security controls and enhance visibility into potential risks.
Security Monitoring and Alert Management: Review, analyze, and triage security alerts related to vulnerabilities, escalating critical issues to the appropriate teams.
Reporting and Documentation: Track and report on vulnerability management metrics, providing regular updates to leadership and stakeholders.
Contribute to the creation and improvement of documentation for vulnerability management processes, tools, and policies.
Process Improvement: Support efforts to streamline vulnerability management workflows and implement automation where possible to enhance efficiency.