Vulnerability Management Operations Analyst

Morgan Stanley • Alpharetta, GA

3d • $95,000 - $130,000

About The Position

We're seeking someone to join our Vulnerability Management (VM) Operations team as a VM Ops Analyst in Cloud Platform Security and Developer Enablement to assist with Vulnerability findings identification, assignment, notification, prioritization, escalation and reporting. In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.

Requirements

• 3 -5 years of experience in vulnerability, technology security operations, or related SRE functions.
• Vulnerability management / Cybersecurity knowledge such as the ability to interpret vulnerability CVSS / EPSS / exploitability ratings and threats
• Ability to learn and understand the firm's OS/app patching ecosystems
• Basic understanding of on prem and cloud infrastructure technologies (e.g., systems, servers, virtualization, containers, images)
• Ability to adapt to inputs from cyber threat intelligence and/or escalations from Management.
• Ability to process information, translate into plans and present summaries to stakeholders.
• Strong analytical and problem-solving mindset
• Basic understanding of SDLC, CI/CD, IT Asset Management, and third-party software supply chains
• Ability to communicate effectively across technical and non-technical audiences
• Experience managing competing priorities in fast-paced environments
• Self-starter with ability to drive initiatives independently

Nice To Haves

• Basic understanding of emerging LLM/AI cyber threats
• Ability to document user-stories and/or bugs
• Prior experience with commercial Vulnerability Management scanning tooling (or adjacent Observability Management or Endpoint Security tools)
• Experience with Spunk and/or Grafana
• Ability to write scripts in Python or PowerShell and/or leveraging Agentic coding capabilities

Responsibilities

• Join a dynamic team accountable for Vulnerability Management findings triaging, case management, and remediation SLA tracking.
• Familiarize themselves with the firm's scanning tools and processes, triaging vulnerabilities, communicating status, guiding system owners in remediation, updating cases, reviewing system owner comments and requests.
• Develop deep operational expertise of the VM platform/s to mature and improve the platform determine possible future automation needs and work with the dev team to fix bugs, test fixes in QA, and streamline the processes via the platform.
• Explain and present the VM process and tool usage to system owners and provide basic guidance around VM Reporting and metrics.
• Respond to zero-day threats and bypass normal patch SLAs, with a compressed response window inclusive of weekends and holidays.
• Be part of the on-call rotation and occasionally support active incidents after hours.

Benefits

• Ample opportunity to move about the business for those who show passion and grit in their work.
• Attractive and comprehensive employee benefits and perks in the industry.
• Commission earnings
• Incentive compensation
• Discretionary bonuses
• Other short and long-term incentive packages
• Morgan Stanley sponsored benefit programs

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed