Full-Time Vulnerability Data Analyst

Vulnerability Data Analyst will be joining NBCUniversal at an exciting time, transforming from an operational, tool-based cyber defense program to an intelligence and threat-based organization. The vulnerability management team is growing and transforming into a service offering for the entire company, partnering with the rest of the Cyber Security organization to shape the future of cyber defenses.

The role requires you to think like an adversary, leveraging your diverse background and IT knowledge to identify, assess, prioritize, and communicate vulnerabilities and threats across the NBCUniversal IT ecosystem.

Responsibilities:

1. Support the Vulnerability Management Team.
2. Monitor VM mailbox for customer requests.
3. Use Jira for creating tickets and tracking work.
4. Configure VM scans based on customer requirements.
5. Provide scan reports.
6. Configure and execute validation scans.
7. Research vulnerabilities in software, firmware, and devices, including modern exploits and exploitation techniques for Microsoft, Open Systems, Java, Adobe, Web Application, and other platforms.
8. Assess vulnerabilities for risk based on severity, threat likelihood, and impact.
9. Assist in designing correction plans, mitigations, and full remediation actions.
10. Understand and communicate attack chains to management.
11. Collaborate on security hotfixes and patch management validation.
12. Recommend measures to manage and remediate vulnerabilities.
13. Support the incident response team in vulnerability discovery.
14. Coordinate with stakeholders to develop service enhancements.

Basic Requirements:

• 3+ years experience in vulnerability management or related field.
• 1+ years experience with Qualys Vulnerability Scanning.
• Threat and vulnerability management experience.
• Familiarity with security best practices and compliance reporting.
• Advanced experience with vulnerability scanning tools (Qualys preferred) and other vulnerability management tools.
• Knowledge of networking concepts (Firewalls, Routers, Switches, Load Balancers).
• Understanding of network protocols (TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing).
• Experience developing and improving KPIs for vulnerability management.

Desired Characteristics:

• Python/Scripting knowledge.
• Intellectual curiosity.
• Strong collaboration skills and self-awareness.
• Integrity and ethical standards.
• Sense of urgency and sound business sense.
• Experience advising on technical issues.
• Interest in the media and entertainment industry.
• Excellent interpersonal skills.

Additional Requirements:

• Fully Remote position.

Salary Range: $70,000 - $90,000.

Benefits: Company sponsored benefits, including medical, dental, vision, 401(k), paid leave, tuition reimbursement.

What is the last date for applying to the job?

Which countries are accepted for this remote job?