Senior Vulnerability Management Analyst (CrowdStrike)

Perform risk-based prioritization of identified vulnerabilities. Collaborate with security analysts to conduct detailed assessments of critical vulnerabilities and develop mitigation strategy.​

Work with IT and cross-functional teams to develop and implement prioritized vulnerability remediation plans and timelines. Ensure timely patching or mitigation.​

Ensure that Metro's systems and applications are regularly updated with security patches to mitigate vulnerabilities and maintain a secure environment. ​

Provide risk-based mitigation and remediation recommendations and guidance. Manage tracking and reporting on remediation progress to stakeholders and leadership.​

Stay updated on emerging threats and vulnerabilities through threat intelligence sources. Integrate threat intelligence into the vulnerability management process to address high-risk areas proactively.​

Develop baseline asset inventories and maintain owners for systems in the inventory.​

Define metrics and reporting to track program effectiveness and improvement. Develop and track key performance indicators (KPIs) for the vulnerability management program.​

Cross-train and mentor wider analyst team in the development of VA Team.​

Adapts quickly to changing priorities, seeks new ideas, and re-align with team’s priority/roadmap to maximize business productivity.​

Technical & Soft Skills:​

Strong Experience in coordinating vulnerability remediation activities in a larger corporate environment​

Hands-on experience and knowledge of vulnerability management technologies.​

Extensive knowledge of OS, Application, Middleware Vulnerability Management, Container Scanning, and Patch Management.​

Well-versed in penetration testing, vulnerability scanning, and red teaming methodologies and frameworks such as OWASP Top 10 and CWE 25.​

In-depth Understanding of technical information security concepts related to threat landscapes.​

Strong understanding of network protocols, operating systems, and security technologies.​

Experience in improving vulnerability prioritization models.​

Ability to conduct independent research and analysis, identifying issues, formulating options, and making conclusions and recommendations.​

Demonstrable conceptual, analytical and innovative problem-solving and evaluative skills.​

Very high attention to detail, with strong skills in managing/presenting data and information.​

Excellent communication, collaboration, and interpersonal skills​

Capable of working collaboratively in a team environment and with the ability to work in an hybrid work environment, offering support to team members remotely along with able to work as part of a geographically separated team.​

Willingness to learn additional technologies, not focused on a single technology/application.​

Bachelor's degree in Computer Science, Information security, or in a related field. Relevant Cyber Security certifications (e.g. CompTIA PenTest+, C|PENT,OSCP, CPT, CCPT) are a plus.​

4-7 years of total experience in Cybersecurity in a large multi-national organization or in a known MSSP. The candidate should have minimum 2 years of experience in Infrastructure Vulnerability Management.​