Senior Security Analyst

Overview

The Senior Security Analyst will play an integral role in the Vulnerability Management team by supporting the Automated Web Penetration Testing (AWPT) program. This position focuses on managing vulnerabilities from detection through to remediation, ensuring efficient and effective resolution of security issues identified by AI-driven penetration testing tools.

Key Duties

• Review and prioritize vulnerabilities detected by AI-based penetration tools.
• Evaluate risks including exploitability, technical impact, and business implications.
• Identify false positives and duplicate findings, and propose appropriate severity adjustments and risk acceptance.
• Collaborate with application teams to define remediation strategies.
• Verify remediation by analysing code changes, logs, and other evidence; retest vulnerabilities to confirm fixes.
• Recommend closing vulnerabilities post-successful remediation.
• Enhance automation of triage workflows using Jira and develop dashboards for tracking the vulnerability lifecycle.
• Improve correlation and tracking of security issues and support integration with AI testing platforms.
• Manage governance by tracking vulnerabilities in Jira, facilitating stakeholder coordination, and escalating critical or overdue issues.
• Generate governance metrics and executive-level reporting.

Required Expertise

• Experience in vulnerability management and conducting risk assessments.
• Understanding of penetration testing methodologies, especially OWASP Top 10 vulnerabilities.
• Proficient in Jira workflow configuration and security reporting.
• Knowledge of application security concepts and secure coding practices.
• Experience in security data analytics and dashboard creation.
• Excellent communication and ability to coordinate among diverse stakeholders.

Preferred Credentials

• Certifications such as CEH, GWAPT, OSCP, CISSP, or similar qualifications.
• Prior experience leading vulnerability governance initiatives within large enterprises.