> Markdown version of [/jobs/ext/2617890-cyber-security-vulnerability-management-specialist-associate](https://www.wearedevelopers.com/jobs/ext/2617890-cyber-security-vulnerability-management-specialist-associate). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Vulnerability Management Specialist - Associate

- **Company:** ICAPITAL LLC
- **Location:** Salt Lake City, UT, United States (Remote available)
- **Salary:** $70,000.0 - $90,000.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Open Web Application Security, Secure Coding, Software Vulnerability Management, Scripting, Software Security, Security Orchestration, Automation & Response
- **Published:** August 3, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=c8e60b25720e34c8

## About the Role

* Curiosity and adaptability to tackle technical and security challenges
 * Demonstrated interest in security concepts
 * Familiar with scripting or basic development experience
 * Understanding of vulnerability management concepts (EPSS, CVSS) and exposure management
 * Experience with secure coding practices, OWASP Top 10, and API security
 * Hands-on security certifications are a plus

## Description

iCapital is looking to hire a Cyber Security Vulnerability Management Specialist Associate to join the Information Security team. This role is responsible for supporting the identification, triage, prioritization, and remediation of security vulnerabilities across applications and infrastructure. This position will help strengthen secure design practices, improve vulnerability management workflows, and support the implementation of security automation and tooling. This individual will collaborate closely with Information Security, engineering, and development teams to embed secure practices, document security workflows, and drive timely remediation of security findings.

Responsibilities

 * Support security automation and tooling across vulnerability management and secure design.
 * Work closely with InfoSec and Development teams to embed secure practices.
 * Triage and prioritize vulnerabilities using risk-based approaches.
 * Track and drive remediation of security findings across applications and infrastructure.
 * Document security workflows and guidelines for engineering teams.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [ Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together](https://www.wearedevelopers.com/videos/422-secure-code-superstars-empowering-developers-and-surpassing-security-challenges-together)
- [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)