Cybersecurity Analyst - Vulnerability Management

A Society US • San Francisco, CA, US • 5m ago

We are looking for a Cybersecurity Analyst to join our Product Security team. This role is responsible for identifying, triaging, remediating, and reporting on vulnerabilities in software and cloud infrastructure of self-driving vehicle product.

What You Will Do (Responsibilities)

Own the vulnerability management lifecycle end-to-end, from detection through triage, ownership identification, validation, resolution, and process improvement
Gather context about vulnerabilities to make accurate determination of severity and risk
Participate in refining and automating our vulnerability management workflows
Work with product teams to communicate identified risks, make recommendations on appropriate controls, advocate towards a fix
Gather and refine metrics related to vulnerability management and changes in risk posture

Requirements

What do you know (Qualifications)

4+ years of experience in the cybersecurity field
Bachelor's degree in a relevant field (Cybersecurity, Computer Science/Engineering, Electrical Engineering, Information Systems), or equivalent combination of experience, certification, and formal or informal education
Strong problem solving, troubleshooting, and communication skills
Tools of the trade: vulnerability scanners, code scanners (static analysis), dependency scanners (SBOM/SAST) and similar
General understanding of vulnerability scoring/prioritization frameworks and general cybersecurity frameworks: CVE, NIST, CIS, ISO

Nice To Have (Bonus Qualifications)