Government and Infrastructure - Service Delivery Center - Cybersecurity Vulnerability Management

EY•San Antonio, TX

7d•$104,800 - $218,500•Hybrid

About The Position

EY’s Government & Infrastructure practice provides consulting and audit services to Federal, State, Local, and Education clients. The Cybersecurity Vulnerability Management Senior Analyst will join a team designing, implementing, and managing EY’s vulnerability management service offering. The role combines technical vulnerability management expertise with business-risk understanding to help clients deploy and operate effective vulnerability management programs. The position involves analyzing, validating, prioritizing, and reporting vulnerabilities; guiding technical teams through remediation; and using Tenable tools and scripting to improve vulnerability management operations. The role is based in a hybrid environment and requires the ability to obtain and maintain a security clearance.

Requirements

Bachelor’s degree or equivalent relevant experience.
Must be able to obtain and maintain a security clearance.
At least 5 years of cybersecurity experience, including hands-on vulnerability management experience.
Demonstrated experience with Tenable VM and/or Tenable Exposure Management.
Experience performing vulnerability analysis, validation, risk-based prioritization, and remediation support.
Experience working directly with technical teams to resolve vulnerabilities.
Strong written and verbal communication skills, including the ability to clearly explain technical vulnerabilities and remediation requirements.
Comfort working in a hybrid environment.
Strong understanding of vulnerability management and the CVE, CWE, CVSS, EPSS, and CISA KEV frameworks.
Ability to independently research vulnerabilities, determine applicability and risk, identify false positives, and recommend remediation.
Working knowledge of Windows, Linux, Active Directory, networking, cloud technologies, and enterprise applications.
Familiarity with CIS, NIST, ISO 27001, PCI DSS, and OWASP.
Experience developing dashboards, metrics, and reports using Tenable, Excel, and/or Power BI.
Experience with Python, PowerShell, or similar scripting languages.
Strong communication skills and ability to work effectively with technical remediation teams.

Nice To Haves

Strong interpersonal and communication skills for collaborating with clients and presenting solutions.
Ability to analyze issues strategically and technically.
Proven ability to influence decisions and work across multiple simultaneous initiatives.
A cybersecurity certification such as CISSP, CEH, or GSEC.

Responsibilities

Analyze and prioritize vulnerabilities using technical risk, exploitability, asset context, CVSS, EPSS, CISA KEV, and threat intelligence.
Research vulnerability findings to understand underlying issues, potential impact, and appropriate remediation or mitigation.
Validate findings and investigate potential false positives.
Translate vulnerability findings into clear, actionable remediation guidance for infrastructure, application, cloud, and other technical teams.
Work with remediation teams to explain findings, address technical questions and blockers, and drive vulnerabilities through remediation and validated closure.
Use Tenable Vulnerability Management and Tenable Exposure Management to analyze vulnerability and asset data and support prioritization.
Develop custom Tenable dashboards and reports for operational and management reporting.
Use Python and/or PowerShell to automate vulnerability analysis, reporting, and recurring vulnerability management activities.
Develop vulnerability metrics and reporting using Excel and/or Power BI, including backlog, aging, remediation progress, trends, and SLA performance.