Vulnerability Analyst

Role Description

The Vulnerability Analyst is responsible for operating vulnerability management activities by identifying, validating, prioritizing, and tracking vulnerabilities.

The Vulnerability Analyst translates vulnerability data into actionable risk insights and supports remediation planning, reporting, and continuous exposure reduction.

Responsibilities

Performs vulnerability scanning and assessment for infrastructure, applications, cloud assets, endpoints, and other agreed targets.

Validates scan results, removes false positives, and enriches findings with asset criticality, exploitability, exposure, and business impact.

Prioritizes vulnerabilities using CVSS, threat intelligence, exploit availability, asset criticality, and customer risk context.

Maintains vulnerability backlog, aging, remediation status, exception tracking, and risk acceptance evidence.

Works with Penetration Tester to validate exploitable vulnerabilities and suspected attack paths.

Provides remediation guidance, mitigation options, and risk-based recommendations to customer stakeholders.

Produces periodic vulnerability reports, metrics, and trend analysis for service review and governance meetings.

Supports retesting and closure validation after remediation completion.

Maintains vulnerability management runbooks, templates, and knowledge base articles.