Vulnerability Management Analyst

NorthAB LLC • Remote work MI, MI

2d • $70,000 - $110,000 • Remote

About The Position

North is seeking a detail-oriented Vulnerability Management Analyst to join our Cybersecurity team. In this role, you will help protect our payment processing platform, cloud environments, and internal infrastructure by identifying, analyzing, and prioritizing technical vulnerabilities. Working closely with engineering, cloud infrastructure, and IT teams, you will leverage enterprise security tools (such as Wiz and Tenable) to track risk and diplomatically advocate for timely remediation. This role is ideal for an early-to-mid career cybersecurity professional with strong analytical and interpersonal skills who enjoys turning security data into actionable fixes.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related technical field (or equivalent practical experience).
• 3 years of hands-on experience in cybersecurity, IT, system administration, or risk management.
• Hands-on experience operating enterprise scanning platforms, specifically Wiz and Tenable.
• Solid understanding of the vulnerability management lifecycle, Common Vulnerabilities and Exposures (CVEs), CVSS scoring, and common attack vectors and vulnerability exploitation.
• Exposure to enterprise scanner technologies (Tenable) and cloud security/exposure management tools (Wiz).
• Ability to analyze large datasets of vulnerability scans, identify trends, and translate raw data into clear, actionable reporting.
• Excellent verbal and written communication skills while building relationships across teams and encouraging patch completion.
• Understanding of core OS concepts (Windows, Linux), cloud security fundamentals (AWS, Azure, or GCP), and enterprise networking.

Nice To Haves

• 5 years of relevant or hands-on experience in cybersecurity, IT, system administration, or risk management
• Experience within fintech, payment processing, or another highly regulated, fast-paced environment.
• Familiarity with payment industry standards and security frameworks (PCI-DSS, NIST Cybersecurity Framework, CIS Benchmarks).
• Experience using ticketing and project tracking tools such as Jira to track vulnerability work items.
• Basic scripting knowledge (Python, PowerShell, Bash, or API queries) to automate reporting or routine tasks.
• Certifications such as CompTIA Security+, Network+, or eJPT are a plus, but not required.

Responsibilities

• Operate, maintain, and assist in configuring scanning platforms (Wiz, Tenable) across cloud assets, containers, data centers, network infrastructure, and endpoints.
• Review vulnerability data, reduce false positives, and prioritize risks based on business context, CVSS scores, threat intelligence, and payment industry risk factors.
• Act as a liaison to engineering, IT, and operations teams to champion patching initiatives, explain technical risks, and follow up on overdue SLAs.
• Track remediation progress, communicate risk posture to leadership, and maintain dashboards, reports, and key performance indicators (KPIs).
• Support security audit and compliance efforts (such as PCI-DSS) by providing evidence of regular vulnerability scanning and remediation.
• Refine vulnerability management processes, playbooks, and automated workflows to reduce exposure windows.

Benefits

• We're proud to offer benefits that help our team members further their overall well-being through unique initiatives that are both personally and professionally fulfilling.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level