Vulnerability Management Analyst / Hybrid Onsite in Chicago

About the job

This employer is seeking a Vulnerability Management Analyst for a hybrid onsite role in Chicago. The analyst will be responsible for analyzing, validating, categorizing, and prioritizing security vulnerabilities across a large enterprise technology environment. Acting as a trusted security partner to infrastructure, application, and technology teams, this individual will provide risk-based remediation guidance, track remediation against established SLAs, and help reduce the organization’s overall cyber risk exposure.

This is an excellent opportunity for a vulnerability management professional who enjoys combining hands-on technical analysis with enterprise-level risk management. The ideal candidate understands that vulnerability severity alone does not determine risk and can bring together CVSS, CWE, MITRE ATT&CK, threat intelligence, exploitability, asset exposure, business criticality, and compensating controls to determine what should be remediated first. The role also offers visibility across security operations and technology teams through executive reporting, threat research, exception management, and ongoing improvements to the vulnerability management program.

Required Skills & Experience

• Expert experience working with enterprise vulnerability management platforms and vulnerability scanning programs.
• Hands-on experience performing or managing recurring vulnerability scans across applications, servers, endpoints, infrastructure, and network environments.
• Strong ability to validate vulnerability findings, identify potential false positives, and accurately determine whether identified vulnerabilities are present and exploitable.
• Expert understanding of vulnerability classification and risk-scoring methodologies, including CVE/CWE, CVSS, and MITRE ATT&CK.
• Working experience with threat intelligence, attack surface management, and exposure management platforms.
• Ability to correlate vulnerability findings with threat intelligence, exploitability, asset criticality, and organizational risk to prioritize remediation.

Desired Skills & Experience

• Previous experience working within or closely alongside an enterprise Security Operations Center (SOC).
• Experience monitoring the evolving threat landscape and adapting vulnerability prioritization based on adversary tactics, techniques, active exploitation, and emerging threats.
• Experience with enterprise attack surface or exposure management programs.
• CISSP certification.
• GIAC vulnerability assessment/security operations certification, including GMON or GVCA.
• Microsoft Security certifications, particularly SC-900 or SC-200.
• CompTIA Security+ certification.
• Certified Ethical Hacker (CEH) certification.
• Exposure to common enterprise vulnerability and exposure management technologies such as Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management, or comparable platforms is beneficial.
• Familiarity with prioritization signals such as CISA KEV, EPSS, active exploitation, internet exposure, and asset/business criticality is beneficial.

What You Will Be Doing

Tech Breakdown

• 35% Vulnerability scanning, validation, and technical analysis
• 25% Risk-based vulnerability prioritization and remediation management
• 15% Threat intelligence and emerging vulnerability research
• 15% Vulnerability reporting, dashboards, metrics, and SLA tracking
• 10% Risk exceptions, documentation, and stakeholder communication

Daily Responsibilities

• 30% Analyze, categorize, validate, and prioritize vulnerability findings generated by enterprise security tooling.
• 25% Partner with application, infrastructure, and technology owners to drive remediation and monitor progress against vulnerability remediation SLAs.
• 15% Perform vulnerability and threat research using security advisories, threat intelligence, vendor notifications, and information about emerging exploitation.
• 10% Validate vulnerability findings to improve detection accuracy and reduce false positives.
• 10% Create and maintain vulnerability dashboards, operational reporting, executive-level metrics, and remediation status reporting.
• 5% Review and manage vulnerability exceptions, compensating controls, and risk-acceptance processes.
• 5% Support vulnerability management documentation, process improvements, and internal security training materials.

The Offer

• Hybrid work environment with an onsite presence in Chicago
• Opportunity to work within a large, structured enterprise security environment
• Exposure to enterprise-scale vulnerability, exposure, threat intelligence, and cyber risk management initiatives
• Opportunity to collaborate with security, infrastructure, application, and technology stakeholders
• Professional development and continued cybersecurity learning opportunities