> Markdown version of [/jobs/ext/138140-cyber-security-analyst](https://www.wearedevelopers.com/jobs/ext/138140-cyber-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Security Analyst - **Company:** Utilities Service, LLC - **Location:** Horsham, PA, United States - **Experience:** Starter - **Contract:** Permanent contract - **Skills:** Microsoft Windows, IBM AIX, Antivirus Softwares, Application Firewall, Software System Penetration Testing, Microsoft Azure, Cloud Computing, Cyber Security, Linux, Intrusion Detection and Prevention, Routing, Oracle (Applications), Security Information and Event Management, Mobile Security, TCP/IP, Software Vulnerability Management, Web Applications, Privacy Controls, Cloud Platform System, Software Security, QRadar, Microsoft InTune, Network Server, Qualys - **Published:** May 14, 2026 - **Apply:** https://www.techcareers.com/job.asp?id=3264185527&tx=JR9387FFQ&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54 ## About the Role * 1-3 years of information security experience. * Solid grasp of application security issues relevant to web applications. * Penetration and vulnerability management knowledge. * Strong verbal and written communication, and the ability to tailor your message to audiences across and beyond the organization. * Knowledge of penetration testing and vulnerability management. * Experience in Cyber Risk analysis (threat assessments). * Knowledge of TCP/IP, system networking, routing, and switching. * Knowledge of Next-generation firewall, intrusion detection/prevention, and web application firewalls. * Management and of Security Information and Event Management solutions, prefer (QRadar). * Experience in on-premises (Windows / AIX / Linux) and cloud environments (Azure, IBM, Oracle). * Knowledge of Cloud Computing (dev/ops, sec/dev/ops). * ISC2 CISSP or similar certification desired. Additional Preferred Skills * Experience in collaborating with third-party managed security services * Experience in large geographically dispersed companies. * Familiarity with NIST and other security/risk frameworks., This position requires a bachelor's degree, working towards a bachelor's degree, or equivalent experience in a technical field. ## Description The Cyber Security Analyst will report directly to the Cyber Security Team Lead and will be responsible for security operations of the entire organization. He/she will operate and maintain security solutions that are strategic for the business using the latest technologies and techniques. He/she will be a key contributor in a growing team that is transforming with the business, addressing new technical challenges by implementing, enhancing, and monitoring security tools and privacy controls to support Asplundh's strategic growth objectives. We are looking for a motivated and dedicated information security practitioner to expand and evolve our existing security program. If this sounds like you, we look forward to seeing your application. Vulnerability Management - Servers & Endpoints * Administer the vulnerability management platform (e.g., Qualys VMDR/TruRisk) to ensure complete coverage and accurate asset inventory across on?prem and cloud servers and all managed endpoints. * Run authenticated scans on a defined cadence (e.g., weekly for high-risk segments; at minimum monthly enterprise-wide) and validate scan integrity (credentials, reachability, agent health). * Triage and prioritize findings using severity, exploitability, and business context; translate findings into actionable remediation steps for server and endpoint owners. * Coordinate patching and remediation with Infrastructure, Endpoint, and Application teams; track progress to closure and verify fixes through re-scan/validation. * Manage patch and remediation jobs for endpoints (e.g., via Intune/third?party tooling) and support server patch cycles aligned to maintenance windows; partner with teams to address reboot compliance that impacts patch effectiveness. * Maintain an exception and risk acceptance process for legacy/mission?critical systems, ensuring compensating controls and leadership approval are documented. * Produce recurring vulnerability and patch compliance reporting (dashboards, trends, aging, SLA adherence) and present risk summaries to leadership and audit stakeholders. * Support investigation and response to high-profile vulnerabilities/zero?days by coordinating rapid assessment, mitigations, and communications (tech alerts) until permanent fixes are deployed., * Operating and maintaining security tools such as SIEM, antivirus, and mobile security solutions. * Continually assess our products and our organization for risks and vulnerabilities. * Detect, assess, investigate, and resolve security incidents. * Effectively communicate security requirements and operational needs to management and others in the organization. * Work with development teams to ensure that new features are designed and implemented securely. * Be a resource for all employees to consult about security and privacy issues. * Investigate and respond appropriately to third-party vulnerability reports. * Assist in the process of defining, executing and continuously improving our internal security architecture processes. * Support and enhance the current technical and business security posture, helping to ensure all staff are aware of the part they play in securing the company's security awareness. ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Discover the open source trio you didn’t expect: .NET and PostgreSQL on Linux](https://www.wearedevelopers.com/videos/2042-discover-the-open-source-trio-you-didn-t-expect-net-and-postgresql-on-linux) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)