Vulnerability Management Analyst with (CVE) & (CPE)

Job Title: Vulnerability Management Analyst with (CVE) & (CPE)

Location: Remote

Duration: 12 Months

Job Description:

Position Overview:

The Vulnerability Management Analyst will support vulnerability triage and risk assessment activities for customers enterprise applications and technology asset. This role will evaluate newly disclosed vulnerabilities determine potential exposure and exploitability assign appropriate severity and risk ratings and maintain clear audit-ready documentation. The position requires a strong operational mindset and the ability to support business-as-usual activities as well as urgent vulnerability escalations.

Responsibilities:

• Triage newly disclosed vulnerabilities and determine their relevance and potential impact to enterprise applications and assets.
• Assess vulnerability exploitability using threat intelligence exploit and proof-of-concept information and likely attack paths.
• Clearly document potential exposure impact and risk.
• Assign firm-aligned severity and risk ratings mapped to recognized industry standards including Common Vulnerabilities and Exposures (CVE) Common Platform Enumeration (CPE) and Common Vulnerability Scoring System (CVSS) with clear supporting rationale.
• Maintain high-quality audit-ready case notes and supporting documentation.
• Support follow-the-sun business-as-usual vulnerability management operations and urgent escalations.
• Prioritize multiple vulnerabilities and operational activities based on risk and urgency.

Qualifications:

• Strong hands-on experience with vulnerability triage and risk assessment across the end-to-end vulnerability management lifecycle.
• Strong working knowledge of CVE CPE and CVSS.
• Demonstrated ability to interpret vulnerability disclosures security advisories threat intelligence and exploit information to assess real-world risk.
• Strong technical writing and communication skills with the ability to clearly document impact recommended actions priorities and risk rationale.
• Broad familiarity with enterprise technology platforms and associated patch and release lifecycle considerations.
• Experience working with cloud environments and large-scale open-source technology usage within enterprise environments.
• Strong prioritization and multitasking skills with an operations-focused mindset.

Tools and Technologies:

• CVE CPE and CVSS vulnerability standards
• Vulnerability management and risk assessment processes
• Threat intelligence and exploit/proof-of-concept analysis
• Microsoft technologies
• VMware
• Oracle and Java
• Citrix
• F5
• Cloud environments
• Enterprise open-source technologies

Required Skills:

Common Vulnerabilities and ExposuresCVECommon Platform EnumerationCPE