Vulnerability Analyst

Description

It4us is a cybersecurity specialist and a national reference in implementing, operating, and evolving high-complexity Security Operations Centers (SOCs). We have delivered over 1,000 projects with excellence, serve a customer base of more than 100 active clients, and work directly with leading market solutions, including SIEM, SOAR, EDR, and global leader platforms. We operate at the core of corporate security, supporting organizations in protecting their digital assets through structured SOC operations, continuous monitoring, and strategic incident response. If you seek to work in real-world, complex, and highly critical environments, this is your opportunity to join a team that lives and breathes cybersecurity every day. **Responsibilities and Duties** We are seeking a **Vulnerability Analyst** to manage the vulnerability lifecycle, ensuring identification, analysis, prioritization, and tracking of remediations with responsible teams. We seek an analytical, organized professional with strong communication skills to collaborate effectively across various technical and business areas. **Key Responsibilities** * Fully manage the vulnerability lifecycle across operating systems, applications, and other assets. * Identify, analyze, and prioritize vulnerabilities using industry-recognized methodologies. * Assess impact, criticality, and risk associated with vulnerabilities, translating these into clear, actionable risk indicators for decision-making. * Assign vulnerabilities to responsible teams and track remediation plans and associated deadlines. * Provide technical support to teams during the vulnerability remediation process. * Monitor key performance indicators (KPIs), track SLAs, and escalate to leadership when necessary. * Support the continuous improvement of Vulnerability Management processes and the organization’s overall security posture. **Requirements and Qualifications** **Vulnerability Management** * Practical experience identifying, prioritizing, and managing the vulnerability lifecycle across diverse platforms (e.g., operating systems, applications, etc.). **Vulnerability Assessment Frameworks and Standards** * Experience with: * CVSS (Common Vulnerability Scoring System); * EPSS (Exploit Prediction Scoring System); * SSVC (Stakeholder\-Specific Vulnerability Categorization); * CISA KEV (Known Exploited Vulnerabilities). **Impact and Risk Analysis** * Ability to conduct detailed impact and threat analysis related to vulnerabilities, translating findings into clear, actionable risk indicators. **Prioritization and Assignment** * Capability to assign vulnerabilities to remediation teams based on technical criteria and strategic prioritization. **Technical Support** * Technical support to teams for understanding and remediating vulnerabilities, covering both operating systems and applications. **Escalation and Tracking** * Proactivity in engaging and following up with leadership in cases where established timelines for vulnerability mitigation or remediation are not met. **Desirable Skills** -------------------------- * Strong interpersonal communication skills to facilitate alignment among technical teams and leadership. * Organizational ability and capacity to handle multiple concurrent tasks. * Familiarity with vulnerability management tools, preferably **ManageEngine**, and ticketing platforms for tracking remediations. ******Bonus** -------------------- * Languages: English or Spanish. **Additional Information** 100% Remote Contract Model: PJ (Individual Entrepreneur) Immediate Start **Benefits and Incentives** * Structured career path (semi-annual and/or annual reviews) * Incentives for technical courses and certifications * 100% online health assistance (telemedicine, specialists, nutrition, and psychology) * Life insurance * Ongoing accounting support for MEI (Microentrepreneur) * Birthday day off * Paid leave after one year **It4us Cyber Security** is a corporate-market company with a successful track record in executing cybersecurity and infrastructure projects. With certified professionals, extensive experience in the technology market, and a commitment to quality and reliability, our team has completed over 900 projects for major enterprises, achieving high satisfaction rates regarding delivery and timeliness. In the meantime, we have helped build more than 15 of Brazil’s largest Security Monitoring Centers, including TIM, Claro, CIP, PMSP, Itaú… Our differentiator lies in investing in and delivering information security projects and solutions—understanding the complexity of large enterprises, environments, and people. It4us Cy