Vulnerability Management Analyst

Vanguard

. Identify, prioritize, and manage vulnerabilities across Vanguard’s hybrid infrastructure .

Posted 10/26/2026full-timeUnited StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in vulnerability management across hybrid infrastructures, with a strong focus on automation, security frameworks, and effective communication with stakeholders. Proven ability to lead cross-functional initiatives and drive continuous process improvement in security operations.

Highest-signal resume keywords

Vulnerability ManagementSecurity FrameworksCloud Service Provider ExpertiseScripting and AutomationRisk Controls

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability AssessmentSecurity Hardening StandardsCVSS FrameworkAutomation ProcessesThreat ModelingRisk AcceptanceZero-Day Escalation HandlingConfiguration ManagementContinuous Process ImprovementAsset Monitoring

Soft Skills

Problem-SolvingCommunication SkillsStakeholder InfluenceCross-Functional LeadershipExecution Planning

Tools & Technologies

AquaPalo Alto PrismaWizCrowdStrikeTenable NessusQualysAI-Assisted Remediation ToolingExposure Assessment PlatformsScanning ToolsTelecom/Networking Configurations

Industry Keywords

CybersecurityVulnOpsCTEM ImplementationCVE VulnerabilitiesInternal/External Audit

Tech Stack

Tools & technologies

CloudLinux

About the role

Key responsibilities & impact

Identify, prioritize, and manage vulnerabilities across Vanguard’s hybrid infrastructure
Ensure adherence to security hardening standards and integration with AI-assisted remediation tooling
Leverage exposure assessment platforms to monitor assets for vulnerabilities and security configuration weaknesses as part of CTEM implementation
Automate aspects of VulnOps to help defend against AI-driven threats
Partner with the SOC, Cyber Threat Intel, Offensive Security Team, and other stakeholders to refine prioritization and validate vulnerability impact
Advise owners on mitigation strategies or compensating controls
Provide accurate and timely reporting on remediation progress
Investigate false positives and requests for risk acceptance or risk-rating adjustment
Shape enforcement controls and guardrails
Handle time-sensitive zero-day escalations, develop custom reports, and perform special investigations
Coordinate with the Engineering platform team to tune scanning tools and improve visibility
Drive continuous process improvement, automation, source fusion, and consistent remediation-owner experiences

Requirements

What you’ll need

Minimum of 4 years of related work experience
Experience managing vulnerabilities at scale
Understanding of security frameworks
Expertise in at least 1 major cloud service provider
Experience with CVSS or other frameworks for rating CVE vulnerabilities
Prior experience automating processes
Undergraduate degree in a related field or equivalent combination of training and experience
Strong problem-solving ability
Solid communication skills and ability to influence stakeholders
Ability to own and lead cross-functional initiatives with limited oversight, including planning, execution, and outcome tracking
Sponsorship is not offered; candidates must not require visa sponsorship
Experience with scripting and automation is a way to stand out
Experience with telecom/networking, Windows, or Linux configurations is a way to stand out
Experience with Aqua, Palo Alto Prisma, Wiz, CrowdStrike, Tenable Nessus, or Qualys is a way to stand out
Experience with Claude Code/Codex or threat modeling is a way to stand out
Experience with risk controls and internal/external audit is a way to stand out

Benefits

Comp & perks

Hybrid working model with enhanced flexibility
In-person learning, collaboration, and connection
Continuous learning and development opportunities
Long-term financial wellbeing mission and employee-focused culture