• Execute the Vulnerability Management lifecycle: analyze scan results, prioritize based on risk, and coordinate and track remediation with the responsible teams (Infrastructure, Systems, etc.). • Maintain, update and improve operational indicators and remediation workbooks (agent coverage, severity, monitoring of remediation SLAs). • Operate Identity and Access Management (IAM) processes: provisioning, deprovisioning, privilege granting, periodic access reviews and support for MFA mechanisms. • Actively support corporate access review campaigns and validation of segregation of duties (SoD). • Monitor, classify and investigate alerts generated by the security tools within your scope. • Perform initial triage and analysis of security incidents, escalating to a Specialist when necessary. • Produce periodic operational reports and security metrics for your area of responsibility. • Prepare and keep technical documentation and Standard Operating Procedures (SOPs) up to date.

• Operate and support the maintenance of the SIEM platform, ensuring correct collection of log sources, and the integrity and quality of received data. • Support the creation, review and fine-tuning of detection rules and use cases to reduce false positives and optimize alerts. • Operate and administer Next-Generation Firewalls (NGFW): controlled implementation of access rules, NAT, VPNs, justification documentation, and periodic review of orphaned rules. • Actively support network segmentation activities, traffic rules, and perimeter hardening. • Monitor, classify and investigate security alerts generated by the SIEM, firewalls and other perimeter tools. • Perform triage and initial analysis of perimeter security incidents, carrying out structured escalation to a Specialist when necessary. • Produce operational reports, traffic maps and indicators of security incidents/blocks. • Create and keep up-to-date technical documentation of topologies, network flows and operational procedures (SOPs).

• GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. • Seeking a Security Analyst with a proactive mindset to prevent incidents rather than just respond. • Collaborating as a team player and willingness to learn from constructive criticism to stay ahead of emerging threats and innovative threat actors. • Looking for a candidate currently living in the eastern time zone (EST)

• Manage and maintain vulnerability scanning operations using commercial and open-source security tools across enterprise infrastructure, cloud environments, operating systems, applications, and externally exposed services • Monitor threat intelligence feeds, vendor advisories, security research, and emerging vulnerabilities to identify risks impacting Intermedia systems and escalate critical threats appropriately • Work directly with infrastructure, operations, engineering, and application teams to develop practical remediation and mitigation plans for identified vulnerabilities • Track remediation progress against defined SLAs, follow up on overdue items, and communicate risk and remediation status to leadership through metrics and reporting • Maintain and support vulnerability management platform, scanner infrastructure, cloud integrations, asset inventory integrations, and related automation workflows • Maintain vulnerability management procedures, standards, documentation, and operational processes to ensure accuracy, consistency, and alignment with security best practices • Collaborate with Security Operations and Incident Response teams during security investigations, threat analysis, incident response activities, and remediation efforts • Assist with identifying unmanaged, unsupported, or non-compliant systems through asset inventory analysis and vulnerability assessment activities • Support audit, compliance, and governance activities by maintaining accurate remediation records, exception tracking, and supporting documentation