Job Title: Senior Analyst, Vulnerability Management
Experience: 5-7 Years
Job Location: Remote, India
Company Overview:
As fifthnote – An Ensemble Health Partners Company, we're at the forefront of innovation, leveraging cutting-edge technology to drive meaningful impact in the Revenue Cycle Management landscape. Our future-forward technology combines tightly integrated data ingestion, workflow automation and business intelligence solutions on a modern cloud architecture. We have the second-largest share in the RCM space in the US Market with 10000+ professionals working in the organization. With 10 Technology Patents in our name, we believe the best results come from a combination of skilled and experienced team, proven and repeatable processes, and modern and flexible technologies. As a leading player in the industry, we offer an environment that fosters growth, creativity, and collaboration, where your expertise will be valued, and your contributions will make a difference.
Position Overview:
The Senior Vulnerability Management Analyst will be responsible for overseeing and managing vulnerabilities identified by various platforms, including Tenable, Wiz, Defender for Cloud, and other vulnerability sources. This role involves leading the assessment reported vulnerabilities, triaging and ranking them by risk and other mitigating control factors, and setting a strategic prioritization schedule for remediation. The candidate will collaborate with patching teams to provide expert guidance and ensure timely patching according to company policies. If timely patching is not feasible, the analyst will coordinate risk exception procedures and ensure that tools exclude findings with granted risk exceptions. Additionally, the analyst will stay at the forefront of vulnerability trends and manage Cloud Security Posture Management (CSPM) components to ensure the security of cloud environments.
Roles & Responsibilities
- Independent monitor and manage vulnerabilities across Tenable, Wiz, Defender for Cloud, and other platforms.
- Lead the assessment of reported vulnerabilities, triage them, and rank them by risk and other mitigating control factors.
- Set a strategic prioritization schedule for remediation and work with patching teams to ensure timely patching.
- Proficiency with ticketing tools, raising appropriate patch requests, keeping record of the pending requests, following them up on regular basis and tracking them down till resolution.
- Manage risk exception procedures and ensure tools exclude findings with granted risk exceptions.
- Stay at the forefront of vulnerability trends and provide recommendations for improving vulnerability management processes.
- Manage CSPM components to ensure the security of cloud environments, including continuous security assessments, risk prioritization, compliance monitoring, and configuration management.
- Detect and address gaps in scan coverage to ensure comprehensive vulnerability assessments.
- Generate reports and deliver presentations on vulnerability assessments and remediation progress.
- Mentor and train junior team members, fostering skill development and knowledge-sharing.
- Contribute to the overall security strategy and engage with executive leadership to enhance security resilience.
- Collaborate with cross-functional teams to address complex security issues and ensure effective vulnerability management.
- This document is not an exhaustive list of all responsibilities, skills, duties, requirements, or working conditions associated with the job. Associates may be required to perform other job related duties as required by their supervisor, subject to reasonable accommodation.
Required Skills
- Experience with vulnerability management tools and platforms.
- Experience in assessing and prioritizing vulnerabilities and managing remediation efforts.
- Experience with CSPM tools and practices.
- Strong understanding of risk management and mitigation strategies.
- Familiarity with security frameworks and standards (e.g., NIST, ISO 27001).
- Experience with cloud security and understanding of cloud service provider ecosystems (e.g., AWS, Azure).
- Ability to create and maintain scripts for automation (e.g., PowerShell, Python).
- Excellent problem-solving and analytical skills.
- Strong collaboration and teamwork skills.
Why Join US?
- We adapt emerging technologies to practical uses to deliver concrete solutions that bring maximum impact to providers’ bottom line. We currently have 10 Technology Patents in our name.
- We offer you a great organization to work for, where you will get to do best work of your career and grow with the team that is shaping the future of Revenue Cycle Management.
- We have our strong focus on Learning and development. We have the best Industry standard professional development policies to support the learning goals of our associates.
- We have flexible/ remote working/ working from home options
Benefits
- Health Benefits and Insurance Coverage for family and parents. Accidental Insurance for the associate.
- Compliant with all Labor Laws- Maternity benefits, Paternity Leaves.
- Company Swags- Welcome Packages, Work Anniversary Kits
- Exclusive Referral Policy
- Professional Development Program and Reimbursements.
- Remote work – flexibility to work from home.