Job Title: Security Analyst / Engineer Vulnerability Management
Location: Houston, TX
Overview
We are looking for a skilled Security Analyst/Engineer specializing in Vulnerability Management to strengthen our organization's cybersecurity by identifying, assessing, prioritizing, and driving remediation of security vulnerabilities across systems, networks, and applications.
You will work closely with IT, cloud, and application teams to reduce risk exposure and support a proactive security program aligned with industry Cybersecurity Framework and ISO/IEC 27001.
Key Responsibilities
Vulnerability Assessment
Conduct regular vulnerability scans across infrastructure, networks, cloud environments, and applications
Utilize automated tools and manual techniques to identify security weaknesses
Validate scan results to eliminate false positives and ensure accuracy
Risk Analysis & Prioritization
Assess the potential impact and exploitability of identified vulnerabilities
Prioritize remediation based on severity, business impact, and threat intelligence
Align findings with risk management frameworks and organizational priorities
Remediation Planning & Execution
Develop actionable remediation plans in collaboration with system owners and engineering teams
Recommend solutions such as patching, configuration changes, or compensating controls
Track remediation progress and ensure timely closure of vulnerabilities
Required Qualifications
7+ years of experience in cybersecurity, with a focus on vulnerability management
Hands-on experience with vulnerability scanning tools (e.g., Tenable Nessus, Qualys, or similar)
Strong understanding of:
o Common vulnerabilities and exposures (CVEs)
o Patch management processes
o Network and system security fundamentals
Familiarity with risk scoring methodologies such as CVSS
Ability to analyze and interpret scan results and security data
Preferred Qualifications
Experience with cloud environments (especially Microsoft Azure or AWS)
Knowledge of container and application security
Security certifications such as CEH, Security+, or CISSP
Experience supporting compliance and audit activities
Key Skills
Strong analytical and problem-solving abilities
Effective communication and stakeholder engagement
Attention to detail with a risk-based mindset
Ability to manage multiple priorities in a fast-paced environment