Vulnerability Management Analyst

$$
🪖 DefTech Product

We are looking for a Vulnerability Management Analyst to support and improve the company’s vulnerability management program across cloud platforms, identity systems, endpoint security solutions, and business-critical environments. 
This role focuses on the full vulnerability lifecycle — from identification and risk assessment to remediation tracking and reporting — ensuring vulnerabilities are managed in a structured, risk-based, and auditable manner.

You will work closely with SOC, Security & Risk, IT, DevOps, and Engineering teams to reduce security exposure and improve the organization’s overall security posture.

Responsibilities:

  • Manage the vulnerability lifecycle, including identification, analysis, prioritization, remediation tracking, and validation
  • Review vulnerability scan results, identify real risks, and eliminate false positives
  • Assess vulnerabilities based on exploitability, business impact, and environmental context
  • Coordinate remediation activities with IT, Engineering, DevOps, and asset owners
  • Track remediation progress and maintain accurate documentation and reporting
  • Collaborate with SOC and Security teams on active threats, exploitation risks, and incident correlation
  • Maintain dashboards, vulnerability backlogs, and operational/security reports
  • Monitor threat intelligence and public advisories for emerging vulnerabilities
  • Contribute to improving vulnerability management processes, tooling, and reporting standards

Required Skills & Experience:

  • 3+ years of experience in Vulnerability Management, Security Operations, or Cybersecurity
  • Experience working with vulnerability scanning and management tools
  • Strong understanding of vulnerability assessment, remediation, and risk prioritization
  • Knowledge of cloud environments, identity platforms, endpoint security, and modern infrastructure
  • Understanding of CVSS, threat intelligence, and vulnerability exploitation concepts
  • Experience collaborating with technical and non-technical stakeholders
  • Strong analytical, organizational, and communication skills

The company offers:

  • Official employment with a competitive salary and clear, transparent terms of cooperation.
  • Paid vacation (24 calendar days per year) and paid sick leave.
  • Support for your professional growth — the company is actively expanding, and you’ll have the opportunity to grow together with it.
  • An atmosphere of trust, open communication, and leadership — initiative is welcomed, ideas are brought to life, and the team supports your progress.

Required languages

English B1 - Intermediate
Ukrainian Native
SIEM, cybersecurity, information security, Vulnerability Management, Network Security, Incident Response, Incident investigation
Published 2 June
17 views
·
0 applications
To apply for this and other jobs on Djinni login or signup.
Loading...