Vulnerability Analyst

About Intermedia
Are you looking for a company where YOUR VOICE is heard? Where you can MAKE A DIFFERENCE? Do you THRIVE in a FAST-PACED work environment? Do you wake every morning EXCITED to work with GREATPEOPLE and create SUCCESSTOGETHER? Then Intermedia is the place for you.
Intermedia has established itself as a leading provider of cloud communications and collaboration tech that allows companies to connect better. We have a strong track record of growth, profitability, and creating an environment where everyone matters. Everyone. While we are fast-paced and admittedly a bit intense, we promise that you won’t be bored. You will find Intermedia is a place where you can indulge your passion for creating and supporting great cloud technology. What’s more, we always look to promote from within and have many employees who have been with us 10, 15, and 20+ years!
Culture at Intermedia is built on teamwork and transparency. We hold each other accountable and always have each other’s back!
Are you ready to make your mark?
About the Role:Intermedia’s Security team is seeking a Vulnerability Analyst to support and advance our enterprise Vulnerability Management program.This role is responsible for identifying, analyzing, prioritizing, and driving remediation of vulnerabilities across enterprise infrastructure, cloud platforms, operating systems, applications, virtualization platforms, and externally exposed services. The analyst will work closely with system owners and engineering teams to reduce organizational risk through risk-based vulnerability management practices.
The Vulnerability Analyst will regularly assess vulnerability exposure using commercial and open-source security tools, monitor threat intelligence sources for emerging vulnerabilities and active exploitation, coordinate remediation efforts with technical teams, and maintain visibility into remediation progress against established SLAs.This position requires strong analytical skills, technical understanding of enterprise infrastructure and cloud environments, and the ability to communicate security risk clearly to both technical and non-technical stakeholders.

What you will be doing:

• Manage and maintain vulnerability scanning operations using commercial and open-source security tools across enterprise infrastructure, cloud environments, operating systems, applications, and externally exposed services
• Monitor threat intelligence feeds, vendor advisories, security research, and emerging vulnerabilities to identify risks impacting Intermedia systems and escalate critical threats appropriately
• Work directly with infrastructure, operations, engineering, and application teams to develop practical remediation and mitigation plans for identified vulnerabilities
• Track remediation progress against defined SLAs, follow up on overdue items, and communicate risk and remediation status to leadership through metrics and reporting
• Maintain and support vulnerability management platform, scanner infrastructure, cloud integrations, asset inventory integrations, and related automation workflows
• Maintain vulnerability management procedures, standards, documentation, and operational processes to ensure accuracy, consistency, and alignment with security best practices
• Collaborate with Security Operations and Incident Response teams during security investigations, threat analysis, incident response activities, and remediation efforts
• Assist with identifying unmanaged, unsupported, or non-compliant systems through asset inventory analysis and vulnerability assessment activities
• Support audit, compliance, and governance activities by maintaining accurate remediation records, exception tracking, and supporting documentation

What you will bring to the role:

• Bachelor’s Degree or equivalent combination of education and experience
• Minimum 2 years of relevant experience
• Experience with Vulnerability Management and related processes and procedures
• Experience utilizing Qualys for the following: Scans servers, desktops, cloud workloads, and network devices to identify security vulnerabilities
• Fundamental Information Security knowledge and general understanding of systems and networking fundamentals
• Experience with Microsoft technologies and Linux operating systems
• Understanding of OWASP Top 10 and familiarity with vulnerability management concepts such as CVE, CVSS, and emerging threat intelligence
• Excellent written and verbal communication skills with the ability to work effectively across teams
• Demonstrates resourcefulness, teamwork, strong ownership, and the ability to manage priorities with urgency
• Knowledge of cloud platforms and related technologies; Python and PowerShell experience is a plus, but not required

Diversity, Inclusion, and Equal Opportunity

We hire, promote, and compensate employees based on their ability to perform their job responsibilities, without regard to race, color, creed, religion, sex, gender, marital status, national origin, ancestry, age, citizenship, physical or mental disability, sexual orientation, or any other basis protected by applicable law (collectively referred to in our Code of Conduct as “Protected Classes”). We do not tolerate employment discrimination in the workplace, and we are committed to making reasonable accommodations for identified disabilities or other limitations as required by all applicable laws. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Originally posted on Himalayas