> Markdown version of [/jobs/ext/4322688-senior-vulnerability-management-security-analyst](https://www.wearedevelopers.com/jobs/ext/4322688-senior-vulnerability-management-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Vulnerability Management Security Analyst

- **Company:** University of Colorado
- **Location:** Aurora, CO, United States
- **Experience:** Expert
- **Salary:** $81,050 - $90,000
- **Contract:** Permanent contract
- **Skills:** Information Systems, PCI Data Security Standards, Software Vulnerability Management, IT General Controls (ITGC), Cyber Threat Analysis, Information Technology
- **Published:** October 31, 2026
- **Apply:** https://diversityjobs.com/career/18798781/Senior-Vulnerability-Management-Security-Analyst-Colorado-Aurora

## About the Role

* Expert-level proficiency in a variety of vulnerability management technologies and principles.
 * Knowledge of regulatory requirements related to security, privacy, and data protection.
 * Excellent written and verbal communication skills.
 * Strong analytical and problem-solving skills, including interpersonal problem resolution.
 * Exhibits intellectual curiosity and a commitment to continuous professional development.
 * Values collaboration and recognizes the importance of building strong professional relationships., * Bachelor's degree in Information Systems, Computer Science, Engineering, Business, Education, or a closely related field
 + Substitution: 4 years of professional or high-level technical work experience may be substituted for the bachelor's degree. An associate's degree with two years of relevant work experience may be substituted for the bachelor's degree

Experience:

 * 2-4 years of relevant experience configuring and administering enterprise security vulnerability management tools and conducting cyber threat intelligence. Experience must include:
 * Overseeing security threat and vulnerability management programs.
 * Monitoring IT controls for regulatory and compliance requirements such as: NIST, CIS, SOX, HIPAA, HITRUST, SSAE 16 - SOC 1 & SOC 2, PCI compliance - PCI DSS / PA-DSS., * Applicants must be legally authorized to work in the United States without requiring sponsorship. We are unable to provide work visa sponsorship or employment authorization for this position now or in the future., * Expert-level proficiency in a variety of vulnerability management technologies and principles.
 * Knowledge of regulatory requirements related to security, privacy, and data protection.
 * Excellent written and verbal communication skills.
 * Strong analytical and problem-solving skills, including interpersonal problem resolution.
 * Exhibits intellectual curiosity and a commitment to continuous professional development.
 * Values collaboration and recognizes the importance of building strong professional relationships.
 * Demonstrates initiative and a proactive approach to workload management.
 * Works collaboratively with stakeholders to develop solutions that meet defined requirements and desired outcomes.
 * Curiosity, motivation, and a desire for continuous learning.
 * A belief that strong relationships are key to success.
 * A self-starter with a can-do attitude.
 * An effective servant leader and manager of people who begins interactions by listening.
 * A collaborator with a focus on providing solutions based on the requirements and necessary outcomes of those whom we serve.
 * Demonstrates a high degree of integrity and ethical conduct and consistently applies secure, responsible practices in professional activities, decision-making, and the use of information and technology.

## Description

* Lead and oversee the enterprise threat and vulnerability management program, ensuring effective risk reduction across environments.
 * Evaluate and interpret threat data to assess risk and communicate recommended actions to stakeholders.
 * Drive remediation efforts by collaborating with IT teams, developers, and system owners.
 * Design and implement a vulnerability management strategy across on-prem and cloud environments and track program metrics and outcomes.
 * Collaborate with incident response, vendors, and stakeholders to identify and address emerging threats and vulnerabilities.
 * Demonstrates a high degree of integrity and ethical conduct and consistently applies secure, responsible practices in professional activities, decision-making, and the use of information and technology.