IT Security Analyst - Vulnerability Management (Candidate local to Michigan only)

Cays - Windsor charter Township, MI

Full-time - Mid Level

Windsor charter Township, MI

Professional, Scientific, and Technical Services

About the position

The IT Security Analyst - Vulnerability Management position is a critical role within the Vulnerability Management team, focusing on the planning, scheduling, implementation, and maintenance of scalable vulnerability scans for high complexity devices. The successful candidate will utilize modern vulnerability management scanning tools to ensure that scans are conducted safely and timely, minimizing any potential impact on the scan targets. This role requires troubleshooting technical issues that may arise during scans and providing support for vulnerability management scanning and reporting tools. In addition to conducting vulnerability scans, the analyst will perform internal vulnerability audits on various devices, including servers, network devices, and applications. The role involves interfacing with both internal and external auditors, supplying detailed information regarding remediation efforts. A key responsibility will be to create integrations of vulnerability management data with other enterprise services, enhancing the overall security posture of the organization. The analyst will also conduct data analysis on vulnerability management data, often integrating it with other data sources to measure the effectiveness of remediation efforts. This includes working with large datasets that may be structured, semi-structured, or unstructured. The role requires making recommendations to other agencies on improving security measures and reducing vulnerabilities. Additionally, the analyst will conduct trend analysis and create dashboards using data scripting to provide metrics on the performance of security responsibilities and controls, generating new reports for management based on collected metrics across multiple agencies. Escalation of issues will be necessary as appropriate.

Responsibilities

• Plan, schedule, implement, and maintain scalable vulnerability scans using modern vulnerability management scanning tools.
• Ensure safe and timely scanning with minimal impact on scan targets.
• Troubleshoot technical issues related to scans.
• Support vulnerability management scanning and reporting tools.
• Conduct internal vulnerability audits of servers, network devices, applications, and other devices.
• Interface with internal and external auditors, providing detailed information on remediation efforts.
• Create integrations of vulnerability management data with other enterprise services.
• Conduct data analysis of vulnerability management data, integrating with other data sources to measure effectiveness of remediation.
• Perform trend analysis and create dashboards using data scripting to provide metrics on security performance.
• Generate new reports for management based on collected metrics across multiple agencies.
• Make recommendations to improve security posture and reduce vulnerabilities.
• Escalate issues as appropriate.

Requirements

• Experience with vulnerability management scanning tools.
• Strong understanding of network security principles and practices.
• Ability to conduct internal vulnerability audits and assessments.
• Proficiency in data analysis, including working with large datasets.
• Experience in creating dashboards and reports using data scripting.
• Strong communication skills for interfacing with auditors and other agencies.

Nice-to-haves

• Familiarity with compliance frameworks and standards (e.g., NIST, ISO 27001).
• Experience with security information and event management (SIEM) tools.
• Knowledge of scripting languages (e.g., Python, PowerShell) for automation.

Benefits

• Hybrid work model (in office 2 days a week).
• Potential for contract extension after 1 year.