Security Vulnerability Analyst

Job Description

• Work with infrastructure, application, and cloud teams to assess and maintain the usability and efficacy of vulnerability reporting.
• Assist in prioritizing remediation efforts using frameworks such as CVSS, EPSS, and organizational risk criteria.
• Work with infrastructure, application, and cloud teams to coordinate vulnerability remediation and verify fixes.
• Advise on the feasibility of remediation efforts within established service-level agreements (SLAs).
• Monitor emerging vulnerabilities, zero-day threats, and vendor security advisories.
• Produce reports and dashboards that communicate vulnerability trends, risk metrics, and remediation status to technical teams and leadership.
• Assist with vulnerability exception reviews and risk acceptance documentation.
• Maintain vulnerability management processes, documentation, and standard operating procedures.
• Support compliance initiatives including PCI DSS, ISO 27001, SOC 2, NIST, HIPAA, or CIS Controls, as applicable.
• Participate in incident response by providing vulnerability analysis and remediation recommendations when needed.
• Recommend security reporting improvements that reduce recurring vulnerabilities and improve overall security posture.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience.
• 2-5+ years of experience in vulnerability management, cybersecurity, or information security.
• Experience with vulnerability management tools such as:
  • Tenable Nessus
  • Qualys VMDR
  • Rapid7 InsightVM
  • Microsoft Defender Vulnerability Management
  • Wiz.IO
  • Axonius
  • Panaseer
• Understanding of:
  • CVSS scoring
  • CWE
  • CVE
  • MITRE ATT&CK Framework
  • OWASP Top 10
  • Common operating systems (Windows, Linux, macOS)
  • Cloud platforms (AWS, Azure, or GCP)
• Understanding of patch management cycles and how they tie to remediation SLAs.
• Ability to analyze technical data and communicate risk effectively to both technical and non-technical stakeholders.
• Strong analytical, documentation, and problem-solving skills.
• Experience working across security domains (vuln management, plus possibly identity, endpoint, or compliance metrics) is a plus.

Additional Information

Preferred Qualifications

• Security certifications such as:
  • CompTIA Security+
  • CySA+
  • GSEC
  • CISSP
  • GIAC certifications
• Experience with scripting using PowerShell, Python, or Bash.
• Familiarity with SIEM, EDR, and SOAR platforms.
• Experience working in Agile or DevSecOps environments.
• Knowledge of vulnerability prioritization using threat intelligence and exploit data.

Our uniqueness is that we celebrate yours. Experian's people first, inclusive and purpose driven culture is multi award-winning World's Best Workplaces™ 2025 (Fortune Global Top 25), Great Place To Work™ in 26 countries to name a few. Check out Experian Life on social or explore our Careers Site to understand why. Experian is also proud to be an Equal Opportunity and Affirmative Action employer. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.

Recruitment Fraud Awareness- Experian's recruitment process is conducted only through authorised channels. Recruitment communications will only be sent from an @experian.com email address. Experian will never ask candidates to make any payment as part of an application, interview, assessment, onboarding, or recruitment process. To apply for roles or verify opportunities, please visit experian.com/careers.

Experian Careers - Creating a better tomorrow together