Vulnerability Management Analyst

Role : Vulnerability Management Analyst

Location : Bay Area CA

Only w2, USC - Citizens

Vulnerability Management Analyst

This role keeps the queue healthy and the SLAs visible. Experience: 2 to 4 years. Sourcing profile: Vulnerability Management Analyst.

Job description

Summary. Own queue hygiene, severity assignment support, exception paperwork and SLA tracking for the pod, so nothing ages out unnoticed and every closure is documented.

Responsibilities

• Maintain bug tracking queue hygiene: dedupe, route, tag and close stale items
• Apply policy-compliant severity assignments using the scoring rubric
• Prepare documented exception reviews for the Triage and Policy engineer and security leads
• Track remediation SLAs and flag items at risk of breach
• Report on triage turnaround, patch acceptance and remediation cycle time
• Keep documentation and audit trails complete

Must-have

• 2 to 4 years in vulnerability management, security operations analysis or similar
• Working knowledge of CVE, CWE, CVSS and severity-to-SLA mapping
• Hands-on with bug trackers (Jira or similar) and vulnerability scanners
• Strong documentation discipline and attention to detail

Nice-to-have

• Scanner tuning and reporting dashboards
• Light GRC or compliance policy exposure
• Basic scripting (Python or SQL) for reporting

Rachael

IT Services | Development | Staffing
Email:

rachael@sidramtech.com

Direct: 470-523-9688