Security Analyst - North Central region

Role overview

A Security Analyst role within a North Central vulnerability and exposure management practice, serving enterprise customers across retail, finance, healthcare, and other verticals. The position focuses on the design, deployment, and ongoing optimization of vulnerability management programs, helping organizations reduce risk through advisory work, assessments, and managed service engagements. Candidates should be comfortable juggling multiple client projects while staying current on a fast-moving vendor landscape.

Responsibilities

- Run and manage vulnerability scanning across internal, external, and cloud networks - Plan, design, and deploy enterprise scanning infrastructure in hybrid and multi-cloud environments - Stand up vulnerability management components such as scanners, sensors, and agents on premises and in the cloud - Advise customers on vulnerability management best practices and conduct formal gap assessments - Collaborate with peers across the practice team and act as a trusted advisor to client stakeholders - Track emerging technologies, including AI-enabled tooling, to improve delivery and outcomes

Requirements

- Bachelor's degree plus at least one year of information security experience and one year of vulnerability engineering experience - Practical experience with at least one major vulnerability management platform: Rapid7, Tenable, or Qualys - Working knowledge of operating systems including Windows Server, Windows workstations, macOS, RHEL, and Ubuntu Linux, with comfort at the command line - Ability to manage multiple concurrent projects independently - Strong written and verbal communication skills

Nice to have

- Scripting experience with Bash, PowerShell, Python, or other native scripting languages - Familiarity with asset management tools such as Axonius or Armis - Exposure to risk aggregation platforms like Zafran or Nucleus - Experience with AWS, Azure, or Google Cloud Platform - Understanding of Kubernetes, containers, CI/CD pipelines, or serverless architectures

Benefits and work setup

- Primarily remote work within the United States, with up to ten percent travel - Group medical insurance options including a zero-deductible PPO plan and a high-deductible plan with HSA contributions - Group dental insurance with employer-paid premiums for employees - Twelve corporate holidays plus a flexible time off program - Mobile phone and home internet allowance - Retirement plan eligibility after two months - Pet benefit option