Job Description

Key Responsibilities: 

• Support and maintain vulnerability detection and mitigation best practices.
• Apply threat and vulnerability management (VM) programs to information security practices and contribute to the continuous improvement of security maturity.
• Participate in incident response triage and proactive analysis of information security-related vulnerabilities across networks, systems, and applications.
• Analyze vulnerability feeds and support Cyber Defense Center (CDC) operations by providing Indicators of Compromise (IOC) and Indicators of Attack (IOA) based on vendor advisories, security alerts, and emerging threat trends.
• Perform vulnerability analysis and apply the Common Vulnerability Scoring System (CVSS) to assess and prioritize vulnerabilities based on relevant vectors and metrics.
• Detect and analyze the latest threats and vulnerability exploitation techniques, and coordinate with CDC and Endpoint Detection and Response (EDR) teams on detection signatures and the creation of security use cases to monitor or prevent related exploitations.
• Provide regular updates to stakeholders through security assessment reports, including detailed security findings, risk assessments, and recommended remediation or workarounds.
• Track and maintain the vulnerability management lifecycle to ensure timely remediation and closure of identified vulnerabilities.
• Actively monitor and investigate the latest security vulnerabilities, vendor advisories, security incidents, and emerging penetration techniques, and notify relevant stakeholders when appropriate.
• Participate in rotational shifts covering US, APAC, and EMEA time zones.

Work Results

• Security tool configurations and updates
• Vulnerability management and security assessment reports
• Vulnerability tracking and remediation status reports
• Threat detection and monitoring use cases
• Security findings, analysis, and recommended remediation actions