全职 Senior Security Analyst 工作, 薪水, Exasoft 公司招聘中 - Ricebowl

Role Summary

The Vulnerability Management Analyst will support the AWPT program through vulnerability triage, remediation validation, stakeholder coordination, and vulnerability lifecycle management. The role will ensure timely assessment, tracking, and closure of security findings generated through AI-powered penetration testing platforms.

Key Responsibilities

Vulnerability Triage & Analysis

Review and triage findings from AI-based penetration testing tools.

Assess exploitability, severity, technical impact, and business risk.

Identify false positives and duplicate vulnerabilities.

Recommend severity adjustments and risk acceptance decisions.

Remediation Validation

Coordinate with application teams on remediation plans.

Review code changes, logs, and supporting evidence.

Retest vulnerabilities and validate fixes.

Recommend closure upon successful remediation.

Automation & Reporting

Enhance Jira-based triage workflows and automation.

Develop dashboards and lifecycle tracking reports.

Improve vulnerability correlation and tracking capabilities.

Support integration with AI-powered testing platforms.

Governance & Stakeholder Management

Manage vulnerability lifecycle tracking through Jira.

Coordinate stakeholders and facilitate issue resolution.

Escalate critical or overdue vulnerabilities.

Produce governance metrics and executive reports.

Required Skills

Vulnerability Management and Risk Assessment.

Penetration Testing concepts and OWASP Top 10.

Jira workflow management and reporting.

Application Security and Secure Coding principles.

Security analytics and dashboarding.

Strong communication and stakeholder management skills.

Preferred Qualifications

CEH, GWAPT, OSCP, CISSP, or equivalent certifications.

Experience in vulnerability governance for large enterprises.