Information Security Analyst

Lead vulnerability management, prioritization, remediation tracking, and reporting Reduce vulnerability aging, backlog, and overall security exposure Monitor and report exposure to CISA Known Exploited Vulnerabilities (KEV) Support security risk governance, exceptions, risk acceptance, and compensating controls Evaluate security controls across cloud, identity, endpoint, data, and application environments Support security architecture, threat modeling, DevSecOps, IAM/PAM, and third-party risk reviews Provide audit, compliance, regulatory, and due diligence support Build security dashboards, metrics, executive summaries, and risk reports

Must-Have / Preferred Technical Skills Microsoft Defender: Endpoint, Identity, Office 365, Cloud Microsoft Sentinel & Microsoft Purview Microsoft Entra ID Qualys ServiceNow: ITSM, CMDB, IRM, Vulnerability Response Azure strong experience AWS working knowledge Splunk SonarQube Power BI & Power Automate Vulnerability Management / DLP / Cloud Security CIS Controls & SOC 2, Timely vulnerability remediation | Reduction of vulnerability aging & backlog | Overall vulnerability reduction | CISA KEV exposure monitoring | Security risk metrics & reporting | Audit readiness | Control effectiveness

7 12 years of progressive Information Security experience Strong background in vulnerability management, security operations, cloud security, GRC, compliance, and audit support Bachelor s degree in Cybersecurity, IT, Computer Science, or related field preferred CISSP, CCSP, SSCP, GCED or similar certifications are a plus