IT Threat and Vulnerability Management Analyst

AFL

. Execute AFL's continuous threat exposure management program across the corporate network and manufacturing environments .

Posted 10/3/2026full-timeDuncan • South Carolina • United StatesJuniorMid-LevelWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in vulnerability management and security operations, with a strong focus on executing threat exposure management programs and providing actionable remediation guidance. Proficient in using vulnerability scanning platforms and understanding patch management across various operating systems.

Highest-signal resume keywords

Vulnerability ManagementSecurity OperationsWindows And Linux PatchingVulnerability Scanning PlatformsClear Written Communication

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementSecurity OperationsWindows PatchingLinux PatchingCVSS UnderstandingNetworking FundamentalsScripting AutomationReporting AutomationAttack Path ValidationRemediation Guidance

Soft Skills

Clear Written CommunicationPersistenceCollaboration

Tools & Technologies

Horizon3 NodeZeroCrowdStrike Falcon Exposure ManagementTaniumQualysTenableRapid7ServiceNow

Certifications & Qualifications

Security+GCIHGFACTGEVA

Industry Keywords

Continuous Threat Exposure ManagementManufacturing EnvironmentsAudit And ComplianceIT InfrastructureOT Patching

Tech Stack

Tools & technologies

Cyber SecurityLinuxPythonServiceNowSQL

About the role

Key responsibilities & impact

Execute AFL's continuous threat exposure management program across the corporate network and manufacturing environments
Run scheduled discovery, scanning, and assessment cycles across the environment
Maintain scan schedules, credential health, sensor coverage, asset coverage, and data accuracy
Investigate gaps where systems appear in one data source and not another
Triage findings daily and rank exposures by exploitability, asset criticality, and network exposure
Reconcile duplicate or conflicting findings before assigning work
Execute attack path validation assessments on defined scopes and schedules
Translate validated attack paths into prioritized remediation work
Confirm exploitability in the AFL environment before escalating severity
Create and track remediation tickets with clear technical guidance for owning teams
Drive remediation to closure, follow up on aging findings, escalate service level breaches, and verify fixes through retest
Maintain the exception and risk acceptance queue, including expiration tracking and renewal review
Identify recurring exposures and root cause patterns and raise them for upstream correction
Produce exposure metrics and dashboards for IT leadership and technical teams
Prepare exposure data for audit and compliance requests
Follow remediation work to closure across teams outside the security function
Build credibility with systems, network, and application engineers
Write actionable remediation guidance

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity or equivalent work experience
Two or more years in vulnerability management, security operations, systems administration, or IT infrastructure
Hands-on use of a vulnerability management or scanning platform
Working knowledge of Windows and Linux patching, including how updates deploy and why they fail
Understanding of CVSS, and awareness of EPSS and the CISA Known Exploited Vulnerabilities catalog
Ability to read a vulnerability finding and explain the actual risk in plain terms
Networking fundamentals, including segmentation and firewall rule review
Clear written communication and persistence in a matrixed environment
Preferred: Horizon3 NodeZero, CrowdStrike Falcon Exposure Management, Tanium, Qualys, Tenable, or Rapid7
Preferred: scripting or reporting automation in Python, PowerShell, or SQL
Preferred: ServiceNow
Preferred: manufacturing or OT patching experience
Certifications in one of the following preferred, but not required: Security+, GCIH, GFACT, GEVA, or vendor certifications for the deployed security platforms
Occasional availability outside standard business hours to support patch windows and production maintenance schedules
Flexibility to travel to AFL sites if needed

Benefits

Comp & perks

A hybrid in office schedule for qualifying employees
Flexible time off policy
401K Company match (up to 4% - dollar for dollar)
Professional development, training, and tuition reimbursement programs
Excellent medical, dental, vision, and life insurance policy options
Opportunities for career advancement with an industry leading company