Cyber Security Vulnerability Analyst

Overview: We are seeking a full-time Cyber Security Vulnerability Analyst for our headquarters in the greater Kansas City area. In this role, you will be responsible for performing vulnerability scanning and assessments to support the identification, analysis, and remediation of risk to networks, operating systems, applications, and other information system components. Qualifications: Basic Qualifications Bachelor's Degree in Computer Science, Information Technology, Management Information Systems, or related field AND a minimum of 5 years IT Security experience OR a Master's Degree in a field noted above AND a minimum of 3 years relevant experience OR an equivalent combination of education and experiencePossesses analytical skills and strong ability to maintain composure and remain diplomatic under highly stressful situations Familiarity with Common Vulnerability Scoring System CVSS framework, National Vulnerability Database (NVD) Must be team-oriented, possess a positive attitude and work well with others as well as strong multitasking skills to be able to effectively manage multiple activities, including cross-team dependent activities simultaneously Demonstrated strong and effective verbal, written, and interpersonal communication skills Demonstrated quality and effectiveness in work documentation and organization Familiarity with defensive security techniques and implementation of mitigating security controls Desired Qualifications Working experience with automated vulnerability scanning tools, to include implementation, configuration, maintenance Information security related experience, in areas such as: security operations, incident analysis, incident handling, system patching, and end point protection Experience with vulnerability scanning in cloud-based environments, to include security posture management Familiarity with container vulnerability scanning and processes Ability to work in a fast paced, dynamic environment Security certifications (GCIH, GCED, CISSP) Experience with NIST 800-53 and/or NIST Cyber Security Framework (CSF) information and event management (SIEM) Platforms Experience with BI tools for data analytic reporting and KPIs API usage and data manipulation System administration experience: Windows and Linux/Unix Scripting OR development experience (Python, JavaScript, PowerShell, C#, Perl) Company International is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, veteran's status, age or disability. Responsibilities: Essential Functions Responsible for reviewing and assessing automated tools, threat feeds, and disclosure programs to determine and classify vulnerabilities and work with stakeholders to formulate remediation timelines and plans Formulates remediation plans based on experience and available data on Company risks Independently analyzes results from internal and external vulnerability scans and charged with using experience and skills to prioritize risk-based remediation plans Authorized to formulate remediation plans and timelines following vulnerability scans using input from system owners Autonomously analyzes and implements optimal settings and configurations to perform vulnerability scans of networks, operating systems, applications, containers, cloud resources, and other information systems Sets proper scan time frames to avoid service interruption, ensuring complete and accurate results are achieved Establishes strong relationships with business stakeholders to facilitate prioritization and timely remediation Works independently to prepare remediation and mitigation actions using all available information to ensure the appropriate steps are implemented by stakeholders across all business segments Establishes and creates vulnerability documentation mitigations, and remediations Develops metrics and timelines in support of the monitoring of vulnerability management program health Works with Cyber Security, System Administration, and System Owners to establish vulnerability mitigations and plans of action Develops, creates, and provides reports of vulnerability scan results that are in a consumable and consistent format and determines the level of information and detail to provide with an eye towards intended audience Tracks vulnerability mitigations and results over time and builds performance metrics that provide advanced and detailed views of remediation performance Helps establish, and tracks compliance with vulnerability management policies, standards, and procedures Ensures that external vulnerability disclosures are assigned to the proper teams and facilitates communications with vulnerability reporters and finders Analyzes compliance requirements and develops scanning plans and procedures to test and report on results and builds and provide compliance team with customized vulnerability and scanning procedures in support of compliance efforts Performs system administration activities on vulnerability management systems and applications