Job Description:

We are seeking aSenior Security Analyst to join our Vulnerability Management team. The successful candidate will have experience in Application Security and be ready to branch out to vulnerability management across a landscape of application, infrastructure, cloud, and special assessment security observations. This role will be responsible for identifying, assessing, and managing vulnerabilities across our technology landscape. This role involves working closely with infrastructure, application, and cloud engineering teams to provide recommendation for remediating security observations and ensuring timely remediation of security risks and alignment with industry best practices and regulatory requirements.
Role Overview
In this role you will be responsible for the following:
Use existing tools to conduct automated vulnerability assessments
Interpret and risk assess scan results from software applications, cloud resources, and infrastructure systems
Collaborate with various teams within Fitch to assist with prioritization of vulnerabilities and ensure remediation occurs within the expected timelines
Ensure all detected vulnerabilities either from manual or automated testing process are accurately logged and tracked in a ticketing system to facilitate remediation, leadership metrics reporting, and audit readiness
Bring an AI-first mindset; be able to identify and act upon opportunities to automate vulnerability analysis and prioritization, as well as administrative tasks, while improving the quality of the output to help developers achieve remediation as easily as possible.
Perform validation testing of remediated vulnerabilities using automated testing tools and manual testing techniques such as with python scripting or otherwise
Research and analyze vulnerabilitiesto determine their true risk to Fitch, considering factors such as exploitability, asset exposure, business impact, and compensating controls
Apply cyber risk quantification techniques to analyze vulnerability severities
Create and maintain metrics and dashboardsusing data from the ticketing system or other sources to support reporting to various stakeholders across Fitch