Sr. Vulnerability Management Analyst - GE Healthcare Wauwatosa, WI, USA Bookmark Share Print 758 4 1

Listing Description

The Sr. Vulnerability Management Analyst will facilitate the timely mitigation of system vulnerabilities discovered within the organization and additionally will work to continuously improve the processes, procedures, metrics, and tools of the Vulnerability Management (VM) program.

You will help grow and mature our VM program by extending capabilities further into functional areas such as OT, manufacturing, and cloud. You will not be the person patching the systems, rather instead you will work with our functional counterparts, stakeholders and system owners to help them succeed at reducing their vulnerability footprint in an expedient manner using your influencing skills. You will create dashboards to help visualize complex data sets, illustrate trends, and describe the state of our program. You will help lead a small team of dedicated contract resources supporting our objectives. You will gain exposure to many facets of our business and their leaders as well as present the state of our program to key stakeholders and senior leadership alike.

Eligibility Requirements:

• Legal authorization to work in the U.S. is required. We will not sponsor individuals for employment visas, now or in the future, for this job

• Any offer of employment is conditioned upon the successful completion of a background investigation and drug screen// Essential Responsibilities //

Influence system owners, IT custodians, and operations support teams to understand vulnerability impact and implement vulnerability mitigations in the most expedient manner possible

Quickly discern accuracy of reported vulnerability dispositions and when appropriate reprioritize criticality, remove false positives and work to address root cause of misaligned dispositions

Develop metrics within our dashboarding solution that visually describe the state of our VM program and that meet our constituents reporting requirements

Identify and resolve gaps related to our vulnerability lifecycle reporting toolset and overall program processes

Provide consultancy to constituents and develop technical documentation to support our VM program

Provide technical support and direction for VM-based projects

Develop and mature operations in support of the overall VM strategy

// Desired Characteristics //

Experience coordinating vulnerability remediation activities in a larger corporate environment

Experience using network vulnerability scanning toolsets such as Qualys, Nessus, Saint, etc.

Experience building visualization metrics and reports based on SQL-like language

Experience using IT asset management toolsets (CMDB) such as ServiceNow CMDB, CA CMDB, etc.

Familiarity with server-runtimes in cloud environments such as AWS, Azure, etc.

Strong analytical skills, attention to detail and ability to methodically troubleshoot complex issues

Strong influencing and negotiation skills

Strong communication and presentations skills

CISSP or vulnerability management related certifications not required but preferred