Vulnerability Analyst

Duties & Responsibilities:

• Analysis, assessment, evaluation, and documentation of incoming issues/security reports from various resources like HackerOne, our penetration testers, customer tickets, and internal tools.
• Manage and monitor tools related to the cloud technologies that play a vital role in protecting the organization's and customers data.
• Verify security fixes and solutions implemented by teams in response to found issues and vulnerabilities.
• Create vulnerability risk overview reporting for each release cycle.
• Thrive for continuous improvements to processes and automate wherever it makes sense.

Skills & Qualifications:

• Bachelor's degree in Computer Science or comparable experience and knowledge.
• High level of initiative and self-direction.
• Sound knowledge, skills, and confidence in using scripting languages (e.g., Python) and web-based testing frameworks.
• Solid analytical skills, ability to reproduce and pinpoint issues, and validate fix implementations in various stacks and technologies.
• Solid understanding of vulnerability calculation methods like CVSS.
• Excellent communicator in English, both written and spoken, with the ability to convey information effectively at multiple levels of sensitivity and for various audiences.
• Teamwork abilities, willingness to help and assist colleagues.
• An independent and active security certification is a plus but not required, for example:
• Certified Security Analyst (ECSA).
• Licensed Penetration Tester (LPT).
• Offensive Security Certified Professional (OSCP).
• Offensive Security Certified Web Expert (OSWE).
• GIAC Penetration Tester (GPEN).