Vulnerability Management Security Analyst

University of Notre Dame•Notre Dame, IN

1d•Hybrid

About The Position

The Office of Information Technology (OIT) at the University of Notre Dame is seeking a collaborative and analytical Vulnerability Management Security Analyst to join their information security team. This role is crucial in helping OIT and campus technology teams identify, understand, prioritize, and remediate vulnerabilities across various environments including endpoint, server, network, identity, cloud, SaaS, application, and third-party systems. The analyst will support routine vulnerability scanning, validate findings, manage security exceptions, and provide actionable remediation guidance to system owners. Additionally, this position will contribute to maturing Notre Dame’s security capabilities through automation, dashboards, metrics, and workflow improvements.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Information Security, or a related field, OR an equivalent combination of education and professional experience.
Working knowledge of cybersecurity operations, vulnerability management, incident response, security monitoring, enterprise technology, and IT risk management principles.
Knowledge of vulnerability management practices, including scanning, validation, risk-based prioritization, remediation tracking, exceptions, compensating controls, and remediation verification.
Ability to evaluate vulnerability findings, alerts, logs, endpoint telemetry, network activity, cloud events, and authentication patterns to identify risk and recommend action.
Strong analytical, problem-solving, documentation, communication, security administration, and stakeholder coordination skills.
Ability to work in the United States, now or in the future, without visa sponsorship.

Nice To Haves

Experience in higher education or another complex, decentralized organization.
Familiarity with cybersecurity frameworks and standards such as NIST CSF, CIS Controls, ISO 27001, EDUCAUSE guidance, or MITRE ATT&CK.
Experience with security operations, vulnerability management, ticketing, or endpoint platforms such as CrowdStrike, ServiceNow, Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management, or similar tools.
Experience supporting vulnerability remediation, phishing investigations, account compromise response, endpoint investigations, cloud security reviews, or security tool administration.
Experience with scripting, automation, APIs, dashboarding, or data analysis using Python, PowerShell, Bash, SQL, Excel, or similar technologies.
Relevant certifications such as Security+, CySA+, GSEC, GCIH, GCIA, GMON, SSCP, CISSP, or similar credentials.

Responsibilities

Support the vulnerability management lifecycle through routine scanning, analysis, and validation of security findings.
Prioritize vulnerabilities based on exploitability, exposure, asset criticality, and data sensitivity.
Partner with system owners and distributed IT units to coordinate and track remediation progress.
Monitor, triage, and escalate security events across SIEM, EDR, email, and cloud platforms.
Assist with incident response by gathering evidence, documenting timelines, and recommending containment.
Maintain and tune security tools, dashboards, and automated ticketing workflows.
Contribute to broader security initiatives such as cloud security, identity protection, and risk reviews.