Security Analyst

WE are looking for a Vulnerability Management Analyst supports the AWPT program by triaging vulnerabilities, validating remediation, coordinating stakeholders, and managing the vulnerability lifecycle to ensure timely closure of security findings from AI-powered penetration testing tools. Responsibilities • Review and triage findings from AI-based penetration testing tools to assess exploitability, severity, technical impact, and business risk • Identify false positives and duplicate vulnerabilities to improve accuracy of vulnerability data • Recommend severity adjustments and risk acceptance decisions based on thorough risk assessment • Coordinate with application teams to develop and validate remediation plans • Review code changes, logs, and supporting evidence to confirm remediation effectiveness • Retest vulnerabilities and validate fixes to ensure successful remediation before closure • Enhance Jira-based triage workflows and automation to streamline vulnerability management processes • Develop dashboards and lifecycle tracking reports to monitor vulnerability status and trends • Improve vulnerability correlation and tracking capabilities for comprehensive risk visibility • Support integration efforts with AI-powered testing platforms to optimize security assessments • Manage vulnerability lifecycle tracking through Jira to ensure timely issue resolution • Coordinate stakeholders and facilitate resolution of vulnerability-related issues across teams • Escalate critical or overdue vulnerabilities to appropriate leadership for prompt action • Produce governance metrics and executive reports to inform decision-making and compliance Required competencies and certifications • Vulnerability Management and Risk Assessment • Penetration Testing concepts and OWASP Top 10 knowledge • Jira workflow management and reporting skills • Application Security and Secure Coding principles • Security analytics and dashboard development • Strong communication and stakeholder management skills Preferred competencies and qualifications • CEH, GWAPT, OSCP, CISSP, or equivalent certifications • Experience in vulnerability governance for large enterprises • Knowledge of AI-assisted security testing platforms