About this role

Move beyond traditional CVSS-based patching to prioritize actionable resolutions
Serve as a detective for the attack surface, correlating data to identify critical assets
Perform rapid risk assessments of newly acquired infrastructure
Support the end-to-end remediation pipeline within ServiceNow SecOps
Proactively manage the team's RAID Log and escalate blockers
Act as a bridge between Security and IT Operations to prioritize security tasks
Monitor the efficacy of scanning agents to ensure visibility across environments

1–3 years of experience in Information Security, Vulnerability Management, or Risk Advisory
Proven experience with attack characteristics & mapping, vulnerability advisories or catalogs, and dynamic risk-based prioritization
Hands-on experience with enterprise vulnerability scanners (e.g., Rapid7, Crowdstrike, Asimily, Defender) and cloud security tools
Understanding of healthcare and government mandates (e.g., PCI, NYDFS, CMS, HIPAA, NIST CSF, or NIST 800-53)
Experience performing Business Impact Analysis (BIA) or mapping "Critical to Operations" (CTO) dependencies.

Information Security Analyst – Intermediate

Key skills