Vulnerability Analyst
About The Position
The Vulnerability Analyst is responsible for reviewing, validating, and coordinating the resolution of security vulnerabilities across The Coca-Cola Company's systems and digital assets. The role supports the company's Vulnerability Disclosure Program (VDP, Bug Bounty Program (BBP) and Attack Surface Management (ASM) operations — assessing incoming reports, confirming they are valid and in scope, assigning the right owners, and tracking each issue through to a verified fix. Working closely with researchers, asset owners, and remediation teams, the Vulnerability Analyst helps ensure vulnerabilities are prioritized, addressed within established SLAs, and resolved effectively.
Requirements
- 2+ years in vulnerability management, application security, SOC, or a related security operations role.
- Working knowledge of common web/application vulnerability classes (e.g., OWASP Top 10) and the ability to read and reproduce a proof-of-concept.
- Demonstrated ability to validate findings, judge scope, and assess severity accurately.
- Familiarity with vulnerability tracking / disclosure platforms and ticketing workflows.
- Strong written communication — able to correspond with external researchers and internal owners clearly and diplomatically.
- Must be currently authorized to work in the United States on a full-time basis and must not require The Coca-Cola Company's sponsorship to continue to work legally in the United States.
Nice To Haves
- Experience running or supporting a VDP, bug bounty program or ASM function.
- Hands-on experience with platforms such as Intigriti, HackerOne, Bugcrowd or an ASM vendor.
- Understanding of enterprise remediation and risk-exception governance process.
Responsibilities
- Review and validate incoming vulnerability reports across the VDP, BBP, and ASM programs, confirming scope and severity.
- Coordinate remediation with asset owners and internal teams, and verify that fixes are effective before closing each report.
- Track and prioritize vulnerabilities to ensure they are resolved within established SLAs.
- Serve as the primary point of contact for external security researchers throughout the disclosure and resolution process.
- Maintain accurate vulnerability records and reporting in the team's tracking platforms.
Benefits
- A full range of medical, financial, and/or other benefits, dependent on the position, is offered.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
