Mid-Level Vulnerability Management Analyst
Company | The Boeing Company |
---|---|
Location | Mesa, AZ, USA, Kent, WA, USA, North Charleston, SC, USA, Hazelwood, MO, USA |
Salary | $104550 – $151800 |
Type | Full-Time |
Degrees | Bachelor’s |
Experience Level | Mid Level |
Requirements
- 3+ years of experience in vulnerability management, risk assessment, and/or security analytics
- 3+ years of experience with analytics tools including: Tableau, SQL, R, and Python
- 3+ years of experience preparing and presenting to executives, senior leadership, and external customers
- 3+ years of experience leading teams
Responsibilities
- Lead the development and implementation of vulnerability management analytics and visualizations to effectively identify and vulnerability risks/findings in cloud and on-prem IT environments
- Collaborate with Boeing Enterprise Security (BES), IT, and risk management teams to identify and address critical vulnerabilities based on risk prioritization
- Lead and manage complex vulnerability management analytics projects, ensuring timely execution and successful outcomes
- Liaise with, inspire and motivate business leaders, their delegates, and cross-functional teams to meet strategic goals and address emerging security challenges
- Provide regular reports on vulnerability management metrics, highlighting risk trends, remediation progress, and areas requiring attention
- Leverage threat intelligence feeds and vulnerability scanning tools to identify and assess potential vulnerabilities in systems, applications, and networks
- Stay up to date with the latest vulnerability management trends, emerging threats, and technologies to enhance Boeing’s vulnerability management capabilities
Preferred Qualifications
- Bachelor’s degree or equivalent work or military experience
- Advanced certifications in vulnerability management or cybersecurity (e.g., CISSP, CISM, CISA, etc.)
- 5+ years of experience working in a cross-functional environment with stakeholders at all levels, from individual contributors to executive leadership
- Experience with Vulnerability risk ratings and CISA Stakeholder Specific Vulnerability Categorization (SSVC)
- Experience in cloud security and vulnerability management within cloud environments (e.g., AWS, Azure, GCP)
- Experience identifying complex vulnerability issues, analyzing data, and implementing solutions that improve operational efficiency
- Experience with cybersecurity frameworks, standards, and regulations (e.g., NIST, ISO 27001, etc.)