Vulnerability Management Analyst

Hewlett Packard Enterprise • San Jose, CA

1d • $109,000 - $251,000 • Onsite

About The Position

The Vulnerability Management Analyst will help evolve how vulnerability risk is identified, understood, and prioritized across HPE. The role turns data from vulnerability management, attack surface management, and internal scanning capabilities into clear, risk-based priorities that help IT teams focus remediation where it matters most. The analyst will contribute to building a scalable vulnerability management capability that strengthens HPE’s security posture.

The position calls for an experienced vulnerability management professional with advanced expertise in vulnerability assessment, attack-surface management, continuous threat exposure management, and risk-based remediation. The analyst interprets complex technical findings in business context, exercises significant independent judgment, and translates vulnerability data into priorities and practical actions. The role involves solving ambiguous, high-impact issues, providing authoritative guidance across teams, communicating risk to technical and non-technical audiences, and building scalable automation, standards, and processes.

This is an onsite role, with the expectation that the employee will primarily work from an HPE office.

Requirements

• Six years of cybersecurity experience, with a focus on vulnerability management.
• Proven experience applying advanced cybersecurity and IT security expertise to solve complex business and technical issues.

Nice To Haves

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, a related field, or equivalent experience.
• Certified Information Systems Security Professional (CISSP) certification.
• GIAC Certified Vulnerability Assessor (GCVA) certification.

Responsibilities

• Apply advanced vulnerability management and attack-surface expertise to identify, assess, and interpret complex exposure across HPE’s internal and external environments.
• Correlate scan findings, asset criticality, threat intelligence, and business context to determine risk-based priorities and recommend proportionate remediation actions.
• Design, build, and implement scalable automation across the vulnerability management lifecycle, including discovery, triage, prioritization, assignment, remediation tracking, and validation.
• Use HPE’s vulnerability data lake and analytical capabilities to identify systemic trends, recurring control gaps, and emerging risks, and translate findings into actionable insights for IT, Cloud, and DevOps teams.
• Lead technical investigations of complex vulnerability and exposure issues, working across functional and technical teams to resolve blockers and drive timely, risk-based remediation.
• Develop and present evidence-based reporting on attack-surface exposure, vulnerability trends, remediation performance, and material risk to asset owners and senior management.
• Serve as a subject-matter expert to business, IT, Cloud, DevOps, and security teams, providing guidance on vulnerability prioritization, remediation approaches, and control improvements.
• Evaluate emerging practices, tools, and technologies in vulnerability management, continuous threat exposure management, and threat intelligence, and recommend ways to strengthen HPE’s capabilities.
• Define and implement improved processes, standards, and operating practices that reduce attack-surface exposure and mature vulnerability management in a post-Mythos environment.

Benefits

• A comprehensive suite of benefits supporting physical, financial, and emotional wellbeing.
• Career development programs to support professional goals, including becoming a subject-matter expert or applying skills in another division.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior