Principal Cybersecurity - Vulnerability Analyst

AT&T•Charlotte, NC

2d•Onsite

About The Position

Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won’t just imagine the future-you’ll create it. As a Cybersecurity Vulnerability Analyst, you will be responsible for identifying, analyzing, and mitigating vulnerabilities within our systems and networks. You will work closely with other cybersecurity professionals to ensure the highest level of security for our organization and clients.

Requirements

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
Minimum of 3 years of experience in cybersecurity, with a focus on vulnerability assessment and penetration testing.
Proven experience using threat intelligence to prioritize remediation efforts.
3+ years of experience with vulnerability management technology, process, and programs.
Working knowledge of cloud security.
Demonstrated, hands-on experience deploying and operationalizing AI/GenAI solutions within a production enterprise environment
3 years of experience in application security testing (OWASP ZAP, Burp Suite, etc.).
Continual assessment of enterprise attack surface using tools such as Tenable, Xpanse, Censys.
Self-starter with a can-do attitude that can drive results independently.
Knowledge of SAST/DAST/SBOM and how they are utilized within application security.
Proficiency in using vulnerability assessment tools such as Nessus, Qualys, and OpenVAS.
Strong understanding of network protocols, operating systems, and security frameworks.
Experience with scripting languages such as Python, Bash, or PowerShell.
Excellent analytical and problem-solving skills.
Strong communication skills, both written and verbal.
Relevant certifications such as CISSP, CEH, or CCSP are highly desirable.
ServiceNow experience is a plus.

Nice To Haves

Experience with cloud security platforms (AWS, Azure, Google Cloud).
Knowledge of regulatory compliance standards (e.g., GDPR, HIPAA, PCI-DSS).
Familiarity with security information and event management (SIEM) tools.

Responsibilities

Conduct regular vulnerability assessments and penetration testing on systems, networks, and applications.
Identify and analyze security vulnerabilities using various tools and techniques.
Develop and implement strategies to mitigate identified vulnerabilities.
Monitor and respond to security incidents and alerts.
Collaborate with IT and development teams to ensure security best practices are integrated into the development lifecycle.
Prepare detailed reports and documentation on findings, recommendations, and remediation efforts.
Stay up-to-date with the latest cybersecurity trends, threats, and technologies.

Benefits

Medical/Dental/Vision coverage
401(k) plan
Tuition reimbursement program
Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
Paid Parental Leave
Paid Caregiver Leave
Additional sick leave beyond what state and local law require may be available but is unprotected
Adoption Reimbursement
Disability Benefits (short term and long term)
Life and Accidental Death Insurance
Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
Employee Assistance Programs (EAP)
Extensive employee wellness programs
Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone.