Vulnerability Management Analyst

Hewlett Packard Enterprise • Spring, TX

2d • $109,000 - $251,000 • Onsite

About The Position

As a Vulnerability Management Analyst at Hewlett Packard Enterprise, you will help evolve how vulnerability risk is identified, understood, and prioritized across the enterprise. You will turn data from vulnerability management, attack surface management, and internal scanning capabilities into clear, risk-based priorities that help IT teams focus remediation where it matters most. You will contribute to building a scalable vulnerability management capability that strengthens HPE’s security posture.

The role calls for an experienced vulnerability management professional with advanced expertise in vulnerability assessment, attack-surface management, continuous threat exposure management, and risk-based remediation. You will interpret complex technical findings in business context, exercise significant independent judgment, address ambiguous, high-impact issues, and provide authoritative guidance across teams. You will communicate risk clearly to technical and non-technical audiences and help build scalable automation, standards, and processes that deliver lasting risk reduction.

This role is designated onsite, with the expectation that you will primarily work from an HPE office. The stated annual base salary range is USD 124,000–251,000 in California or USD 109,000–251,000 in Texas. Variable incentives may also be offered; actual offers may vary based on location, experience, education, training, and skill level.

Requirements

• Six years of cybersecurity experience, with a focus on vulnerability management.
• Proven experience applying advanced cybersecurity and IT security expertise to solve complex business and technical issues.
• Advanced expertise across vulnerability assessment, attack-surface management, continuous threat exposure management, and risk-based remediation.
• Ability to interpret complex technical findings in business context and exercise significant independent judgment.
• Ability to communicate complex risk clearly to technical and non-technical audiences.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent experience, desired.

Nice To Haves

• Certified Information Systems Security Professional (CISSP) certification.
• GIAC Certified Vulnerability Assessor (GCVA) certification.

Responsibilities

• Apply advanced vulnerability management and attack-surface expertise to identify, assess, and interpret complex exposure across HPE’s internal and external environments.
• Correlate scan findings, asset criticality, threat intelligence, and business context to determine risk-based priorities and recommend proportionate remediation actions.
• Design, build, and implement scalable automation across the vulnerability management lifecycle, including discovery, triage, prioritization, assignment, remediation tracking, and validation.
• Use HPE’s vulnerability data lake and analytical capabilities to identify systemic trends, recurring control gaps, and emerging risks, and translate findings into actionable insights for IT, Cloud, and DevOps teams.
• Lead technical investigations of complex vulnerability and exposure issues, working across functional and technical teams to resolve blockers and drive timely, risk-based remediation.
• Develop and present evidence-based reporting on attack-surface exposure, vulnerability trends, remediation performance, and material risk to asset owners and senior management.
• Serve as a subject-matter expert to business, IT, Cloud, DevOps, and security teams, providing guidance on vulnerability prioritization, remediation approaches, and control improvements.
• Evaluate emerging practices, tools, and technologies in vulnerability management, continuous threat exposure management, and threat intelligence, and recommend ways to strengthen HPE’s capabilities.
• Define and implement improved processes, standards, and operating practices that reduce attack-surface exposure and mature vulnerability management in a post-Mythos environment.

Benefits

• Comprehensive benefits intended to support physical, financial, and emotional wellbeing.
• Programs supporting personal and professional development and career goals.
• Flexibility to manage work and personal needs.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior