Senior Security Analyst - Threat and Vulnerability Management

Co będziesz robić

Job Description

The Senior Security Analyst in Active Threat and Vulnerability Defense will play a key role in strengthening our organization’s cybersecurity posture by integrating real-time threat intelligence and adaptive risk prioritization across enterprise assets. You will be responsible for identifying, assessing, and communicating vulnerabilities across P&G systems, enhancing our security toolkit through automation and technology integration, and collaborating with threat-informed defense teams, patching teams, application owners, development teams, and security leaders throughout the organization.

Key Responsibilities

• Proactive Vulnerability Assessment: Conduct thorough assessments of vulnerabilities across endpoints, servers, networks, and cloud assets. Utilize advanced tools and techniques to identify weaknesses before they can be exploited.
• Continuous Threat and Vulnerability Monitoring: Implement continuous monitoring processes to track vulnerabilities and threats in real time, leveraging threat intelligence feeds and automated tools to maintain an up-to-date understanding of the threat landscape.
• Automation and Orchestration: Lead initiatives to develop and enhance automated vulnerability detection, reporting, and remediation workflows. Collaborate with cross-functional teams to streamline processes that reduce the attack surface effectively.
• Collaborative Remediation Management: Engage with security, infrastructure, and development teams to validate findings, provide risk context, and support coordinated remediation efforts. Track and report on remediation progress, ensuring timely and effective mitigation of identified vulnerabilities.
• Threat Intelligence Integration: Work closely with Threat Intelligence and Threat Hunting teams to incorporate actionable insights into vulnerability assessments. Utilize this intelligence to inform vulnerability management strategies and decision-making.
• Stakeholder Communication and Reporting: Develop and present clear, actionable reports on vulnerability posture and risk management efforts to both technical and non-technical stakeholders, including executive leadership.
• Tool and Process Optimization: Continuously assess and improve internal tools and processes for tracking threats, exposures, and mitigation activities. Stay abreast of industry best practices and emerging technologies to enhance operational efficiency.
• Ongoing Professional Development: Maintain current knowledge of global threat trends, security advisories, and zero-day vulnerabilities. Actively engage in learning opportunities related to vulnerability management frameworks, solutions and emerging security practices.
• Leadership and Mentorship: Provide guidance and mentorship to junior analysts and team members, fostering a culture of knowledge sharing and continuous improvement within the team.

Wymagania

Job Qualifications

• Bachelor’s degree or above in Computer Science, Cyber Security, or a related field, or equivalent practical experience.
• 3+ years of experience in Cyber Defense, with a strong emphasis on vulnerability management, threat intelligence, incident response, or offensive security.
• Proven experience in a vulnerability management role or cyber defense team, demonstrating a comprehensive understanding of the vulnerability management lifecycle and relevant frameworks.
• Strong ability to correlate threat intelligence with vulnerability data, asset management, network, and incident data to prioritize risks effectively.
• Excellent communication skills, capable of articulating complex technical information to diverse audiences, including executive and non-technical stakeholders.
• Advanced technical skills, including proficiency in scripting (Python, Bash, PowerShell, or equivalent) and experience with API integration, automation, and security tools.
• Ability to work with different groups such as SOC analysts, application owners, patching teams, security leaders in order to mitigate a security threat.

Deep technical knowledge of the following:

• Vulnerability Analysis – ability to perform complex analysis to understand properties and behaviors of exploit code and propose effective countermeasures and mitigation strategies.
• Vulnerability Management Platform – ability to model vulnerability data and build workflows.
• Vulnerability Identification – ability to set up or troubleshoot vulnerability scans for networks, endpoints, optionally Cloud and SAP.
• Network Security (IPS/IDS), Security Protocols and Operating Systems (Windows, Unix, Linux), Log Analysis and Correlation.
• Solid understanding of the security threat landscape.

Co oferujemy

What we offer

• Responsibilities as of day 1. You will have project ownership and autonomy to deliver change and results from the beginning
• Dynamic and encouraging work environment. At P&G our employees are at the core, we value every individual and encourage initiatives, promoting agility and work/life balance
• Continuous mentoring, you will work with hardworking people and receive ongoing coaching and mentoring from your line manager and other colleagues. Corporate and functional training will enable you to succeed and develop from day one
• Industry Certifications (ITIL, DevOps, MS portfolio etc), full additional benefit program like private health care, P&G Dynamic Living programs like sport cards, in-office fitness center, PG stock options, saving plans, lunch subsidy, regular salary increases and possible promotions, flexible work arrangements, mentoring programs & trainings
• Big Picture understanding of P&G IT and Product Supply organization and its Services in global multi-functional teams with several locations across continents
• At Procter & Gamble, we embrace a hybrid work model that combines the flexibility of remote work with the collaborative benefits of in-office engagement. Employees can enjoy the option to work from home two days a week while also spending time in the office to foster teamwork and enhance communication.