Threat & Vulnerability Analyst

Vaga não está no LinkedIn

🕒 Agosto 7

🦌 Connecticut, New Jersey, +2 estados a mais – Remoto

🦌 Connecticut – Remote 🏖️ New Jersey – Remote 🗽 New York – Remote 🔔 Pennsylvania – Remote

💵 $97.800 - $133.455 / ano

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

🔐 Analista de Segurança da Informação

👻 Score fantasma 59%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Por que essa pontuação:

• Aberta há 97 dias.
• As vagas desta empresa costumam ser preenchidas em 21 dias.
• Repostada uma vez.

Candidatar-se

Encontrar Vagas Remotas Similares

Horizon Connect @ Wall BCBSNJ

SiteLinkedInTodas as Vagas

2 - 10 funcionários

⚕️ Seguro de Saúde

🏥 Saúde

Healthcare Insurance • Healthcare

Horizon Connect @ Wall BCBSNJ é uma presença no LinkedIn ou programa/escritório local associado ao Horizon Blue Cross Blue Shield de New Jersey (BCBSNJ). Com base no nome e no contexto, parece estar conectado às operações de seguro de saúde do Horizon BCBSNJ e ao alcance local ou envolvimento de membros/provedores na área de Wall, NJ. As informações disponíveis publicamente são limitadas e consistem principalmente na interface do site do LinkedIn em vez de um perfil da empresa, então essa descrição é conservadora e baseada na afiliação indicada pelo nome.

Descrição

• Develop and enhance vulnerability scanning strategies across Horizon’s enterprise environment. • Conduct internal and external vulnerability assessments and validate scan results. • Classify vulnerabilities based on severity, exploitability, and business risk. • Categorize and prioritize assets according to criticality and organizational impact. • Partner with EBTS teams to execute vulnerability remediation plans according to SLAs. • Track and report remediation activities to ensure timely resolution. • Analyze emerging cyber threats and assess impacts to Horizon’s technology environment. • Communicate risk exposure, remediation efforts, and security recommendations to senior leadership and stakeholders. • Develop, maintain, and present vulnerability management metrics and executive reports. • Create and maintain vulnerability management and threat intelligence policies, standards, procedures, and documentation. • Ensure security controls, policies, and standards satisfy audit and regulatory requirements. • Assist in developing a threat hunting program, including threat scenarios, response playbooks, and use cases. • Investigate, validate, and resolve vulnerability findings, false positives, and remediation exceptions. • Support continuous improvement initiatives strengthening Horizon’s cybersecurity posture.

🎯 Requisitos

• High School Diploma or GED required. • Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Technology, or a related field preferred. • Relevant experience may be considered in lieu of a degree. • Minimum of five (5) years of Information Security experience required. • At least three (3) years of experience focused on vulnerability identification, assessment, and remediation. • Experience working within a large enterprise environment preferred. • Experience supporting security audits, regulatory compliance reviews, and risk management programs preferred. • One or more of the following certifications is required or strongly preferred: CISSP, GCTI, GIAC certifications, CompTIA Security+, Certified Ethical Hacker (CEH). • Strong understanding of cybersecurity frameworks and methodologies, including Cyber Kill Chain, Defense-in-Depth, and related security models. • Comprehensive knowledge of vulnerability management and patch management processes and remediation approaches. • Deep understanding of IOCs, APTs, cybercrime techniques, and attacker TTPs. • Knowledge of Windows, Linux/Unix, and macOS. • Experience with vulnerability management platforms such as Nessus, Qualys, InsightVM (Nexpose), or similar solutions. • Knowledge of CIS benchmarks and Critical Security Controls. • Familiarity with threat intelligence platforms and sources such as Recorded Future, ThreatConnect/ThreatStream, H-ISAC, NJCCIC, and similar resources. • Understanding of audit, regulatory, and compliance requirements related to cybersecurity programs. • Proven ability to prioritize vulnerabilities and systems based on risk, asset criticality, and business impact. • Experience utilizing CVSS scoring and risk-based vulnerability management methodologies. • Strong analytical, investigative, and problem-solving skills. • Excellent verbal and written communication skills, including presenting technical information to technical and non-technical audiences. • Experience creating executive-level dashboards, scorecards, and presentations using Microsoft PowerPoint, Visio, and Excel. • Experience developing and documenting security processes, standards, and procedures. • Ability to facilitate cross-functional collaboration and drive vulnerability remediation across multiple teams. • Experience negotiating remediation plans, exception requests, SLA extensions, and false-positive determinations. • Strong project management, organizational, and time-management skills. • Ability to manage multiple priorities in a fast-paced environment. • Demonstrated attention to detail and commitment to operational excellence. • Ability to work independently while maintaining effective stakeholder communication. • Strong interpersonal skills with the ability to build partnerships and influence outcomes across the organization.

🏖️ Benefícios

• Comprehensive health benefits (Medical/Dental/Vision) • Retirement Plans • Generous PTO • Incentive Plans • Wellness Programs • Paid Volunteer Time Off • Tuition Reimbursement

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo