Vulnerability Management Analyst
Offer summary
Qualifications:
Minimum of three years experience in vulnerability or risk management., Experience collaborating with software engineering or DevOps teams on vulnerability remediation., Knowledge of cloud environments such as EKS, ECS, or Kubernetes is beneficial., Strong organizational skills and attention to detail, with the ability to work independently or in a team..Key responsibilities:
- Review and evaluate deviation and risk acceptance requests related to vulnerabilities.
- Collaborate with engineering teams to understand technical constraints and document remediation plans.
- Maintain and update exception registers, policies, and procedures for vulnerability management.
- Support audits by providing necessary evidence and context.
Job description
ABOUT WorldLink:
• Receive and evaluate deviation and risk acceptance requests; confirm CVSS scores, affected assets, and proposed compensating controls.
• Meet with engineers and developers to understand technical constraints, agree on remediation timelines, and document alternative solutions that satisfy FedRAMP Moderate or High requirements.
• Draft or refine risk acceptance forms and POA&M entries; shepherd each request through security, compliance, and Authorizing Official approval.
• Maintain an up to date exception register with owners, due dates, and re validation checkpoints; remind stakeholders as deadlines approach.
• Update vulnerability management runbooks, service level agreements, and playbooks to reflect the approved deviation handling process and any new tooling integrations.
• Help integrate scanners or ticketing systems such as Prisma Cloud, Tenable, Qualys, and Jira so deviation status is captured and tracked automatically.
• Advise engineering teams on FedRAMP control requirements, acceptable compensating controls, and best practices for patching or mitigating findings.
• Support audits by supplying requested evidence and context prepared by the compliance team.