Security Analyst
Security Analyst
risewave consulting, inc.4-6 Years
- Posted 18 hours ago
- Be among the first 10 applicants
Job Description
As a Security Analyst, you will be a key member of our Global Cybersecurity Team, helping to strengthen cybersecurity posture. This role involves monitoring tools and dashboards, identifying and mitigating security vulnerabilities, and collaborating with teams to address risks effectively. You will also contribute to continuously improving our vulnerability management processes and play an active role in ensuring our IT systems remain secure.
Key Responsibilities:
- Monitor security tools and dashboards to identify vulnerabilities, assess risks, and propose compensating controls to reduce risk.
- Assess risks across IT infrastructure and cloud platforms.
- Communicate findings to appropriate teams and track vulnerabilities through resolution.
- Create detailed vulnerability reports for technical teams and summary reports for management.
- Collaborate with IT and development teams to prioritize and remediate vulnerabilities.
- Contribute to the development and improvement of vulnerability management processes and tools.
Qualifications
- At least 4 years of experience in vulnerability assessment, penetration testing, or cybersecurity.
- Hands-on experience with vulnerability scanning tools and remediation processes.
- Hands-on experience with cloud platforms (preferably Azure & AWS)
- Knowledge of networking, operating systems (Windows, Linux), and application security.
- Experience with vulnerability frameworks (NIST, CVSS, etc.)
- Some experience with programming or scripting and familiarity with DevSecOps practices.
- Strong communication skills, with the ability to deliver clear oral, written, and visual presentations.
- Strong organizational skills, with the ability to plan, prioritize, and align tasks effectively.
- Customer-focused mindset with a strong eagerness to learn and grow.
- SANS GIAC, Network+, Security+, AZ-500 or other industry certifications preferred.
More Info
Key Skills
Network plus
cloud platforms
DevSecOps practices
CVSS
AZ-500
vulnerability scanning tools
vulnerability frameworks
Windows


