**Vulnerability Management Analyst (remote from MX)**
**Role Description**:
The Vulnerability Management Analyst will design, implement and monitor the organizational Security
**Job Duties**:
- Identify security flaws and weaknesses in the systems that can be exploited to cause business risk,
- Provide crucial insights into the most pressing issues and suggest how to prioritize security resources while monitoring for and detecting security events utilizing Qualys and Nessus.
- Evaluate, rate and perform risk assessments on assets in addition to reviewing alerts escalated by end users and perform initial triage of incoming issues.
- Monitor health alerts and downstream dependencies in addition to providing limited response to end users for low complexity security events and reviewing false positive with the various Security teams to tune and provide feedback to improve accuracy of the alerts.
- Document, investigate and notify appropriate contact for security events and response while participating in the resolution of events, even after they are escalated.
- Collaborate with technical teams for security incident remediation and communication.
- Conduct proof of concepts, vendor comparisons and recommend solutions in line with business requirements and execute security research on threats and remediation methods.
- Contribute to strategic planning to evaluate, deploy or update security technologies.
- Promote cross-department collaboration and communication to ensure appropriate processes, procedures and tools are installed, monitored, and effectively operating and alerting
- Update job knowledge by tracking and understanding emerging security practices and standards while participating in educational opportunities, and reading professional publications.
**Required Qualifications & Experience**:
- Bachelor's Degree is required
- 2+ years' experience using Vulnerability Management, Detection and Response (VMDR) tools such as Qualys, Nessus is required.
- General network knowledge, TCP/IP, Internet Routing, UNIX / LINUX & Windows OS
- Understanding of common network services (web, mail, DNS, authentication)
- Knowledge of vulnerability scoring systems (CVSS/CMSS)
Ability to commute/relocate:
- Querétaro, Qro.
: Reliably commute or planning to relocate before starting work (required)