Vulnerability/Threat Management Analyst

Role Overview:

• Take ownership of the vulnerability management pipeline, from scan to ticket to fix, as the second dedicated member of the security team.
• Shrink the attack surface of a cloud-based hospitality SaaS platform trusted by more than 12,500 hotels.
• Build automation that turns noise into action, with success measured by scan coverage, clean prioritization, and vulnerabilities that actually get fixed.

What You'll Do:

• Run continuous vulnerability scanning across the public cloud environment and inventory every asset.
• Prioritize findings with exploitability, threat intelligence, and asset context, not just CVSS scores.
• Automate the path from finding to ticket and follow up through remediation teams via Jira workflows.

What You'll Bring:

• Hands-on experience with vulnerability management tools like Tenable, plus public cloud experience in AWS, Azure, or GCP.
• Strong scripting skills for automating scan-to-ticket workflows, with Python as a plus.
• Working knowledge of offensive security techniques at the level of PenTest+ or OSCP, and experience with remediation ticketing workflows and endpoint security tooling.

People Describe You As:

• A self-starter who can read documentation, ask the right questions, and run with the pipeline without step-by-step direction.
• Someone who closes the loop, finding satisfaction in seeing fixes shipped and dashboard trends moving in the right direction.
• An automator at heart, calm and dependable under pressure, and a pragmatic partner that engineering teams trust.