Vulnerability Analyst

• The Endpoint Vulnerability Analyst supports endpoint vulnerability remediation efforts across enterprise endpoint environments. This role executes the vulnerability remediation lifecycle for assigned work—triage, risk-based prioritization, root-cause analysis, solution validation, deployment coordination, and reporting—partnering with security, operations, engineering, and application teams. The ideal candidate demonstrates endpoint technical depth, works independently on complex issues, contributes to automation and process improvements, and supports governance activities (SLAs, exception handling, and risk reporting) that improve the firm’s overall risk posture.

-

• Key Responsibilities

• Monitor and analyze endpoint vulnerability findings using Tenable/Nessus

• Assess findings to determine business impact, root cause, and remediation requirements

• Apply risk-based prioritization aligned to vulnerability severity, exploitability, asset criticality, and remediation SLAs

- Coordinate endpoint remediation activities, including:

• Windows and macOS updates and configuration changes

• Patch management activities (OS and third-party applications)

• Application and browser updates and configuration changes

• Driver, firmware, and UEFI/BIOS updates

• Removal, upgrade, or retirement of outdated applications

• Develop, test, and troubleshoot PowerShell scripts to support remediation and automation