> Markdown version of [/jobs/ext/1881110-senior-vulnerability-management-security-analyst](https://www.wearedevelopers.com/jobs/ext/1881110-senior-vulnerability-management-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Vulnerability Management Security Analyst - **Company:** CU Denver - **Location:** Aurora, CO, United States - **Experience:** Expert - **Salary:** $81,050.0 - $90,000.0 - **Contract:** Permanent contract - **Skills:** Software System Penetration Testing, Cyber Security, Information Systems, PCI Data Security Standards, Systems Integration, Software Vulnerability Management, IT General Controls (ITGC), Information Technology, Vulnerability Analysis - **Published:** August 1, 2026 - **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/17777325?backUrl=%2Fcareer%2F17777325%2FSenior-Vulnerability-Management-Security-Analyst-Colorado-Aurora ## About the Role * Expert-level proficiency in a variety of vulnerability management technologies and principles. * Knowledge of regulatory requirements related to security, privacy, and data protection. * Excellent written and verbal communication skills. * Strong analytical and problem-solving skills, including interpersonal problem resolution. * Exhibits intellectual curiosity and a commitment to continuous professional development. * Values collaboration and recognizes the importance of building strong professional relationships., * Bachelor's degree in Information Systems, Computer Science, Engineering, Business, Education, or a closely related field + Substitution: 4 years of professional or high-level technical work experience may be substituted for the bachelor's degree. An associate's degree with two years of relevant work experience may be substituted for the bachelor's degree Experience: * 2-4 years of relevant experience configuring and administering enterprise security vulnerability management tools and conducting cyber threat intelligence., * Experience deploying, integrating, and managing Rapid7 InsightVM. * Advanced degree in Computer Science, Information Security, or related field. * CISSP, GIAC (GSEC, GCIH, GCIA, GPEN) or other technical security certifications. * Experience in IT controls monitoring for regulatory and compliance requirements like NIST, CIS, SOX, HIPAA, HITRUST, SSAE 16 - SOC 1 & SOC 2, PCI compliance - PCI DSS / PA-DSS, and NIST is a plus. * Penetration testing experience Knowledge, Skills and Abilities: * Expert-level proficiency in a variety of vulnerability management technologies and principles. * Knowledge of regulatory requirements related to security, privacy, and data protection. * Excellent written and verbal communication skills. * Strong analytical and problem-solving skills, including interpersonal problem resolution. * Exhibits intellectual curiosity and a commitment to continuous professional development. * Values collaboration and recognizes the importance of building strong professional relationships. * Demonstrates initiative and a proactive approach to workload management. * Works collaboratively with stakeholders to develop solutions that meet defined requirements and desired outcomes. * Curiosity, motivation, and a desire for continuous learning. * A belief that strong relationships are key to success. * A self-starter with a can-do attitude. * An effective servant leader and manager of people who begins interactions by listening. * A collaborator with a focus on providing solutions based on the requirements and necessary outcomes of those whom we serve. This position is not eligible for university-sponsored work authorization. Candidates must be authorized to work in the U.S. without current or future university sponsorship. Individuals with existing, valid U.S. work authorization are welcome to apply. ## Description * Lead and oversee the enterprise threat and vulnerability management program, ensuring effective risk reduction across environments. * Evaluate and interpret threat data to assess risk and communicate recommended actions to stakeholders. * Drive remediation efforts by collaborating with IT teams, developers, and system owners. * Perform vulnerability scanning across on-prem and cloud environments and validate remediation outcomes. * Collaborate with incident response, vendors, and stakeholders to identify and address emerging threats and vulnerabilities. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Microservices? Monoliths? An Annoying Discussion!](https://www.wearedevelopers.com/videos/970-microservices-monoliths-an-annoying-discussion) - [AI Agents & Agentic AI](https://www.wearedevelopers.com/videos/2017-ai-agents-agentic-ai) - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)