IN
Job Description
Job Overview:
- Position Summary
- The IT Data Vulnerability Analyst plays a crucial role in identifying, assessing, prioritizing, and monitoring vulnerabilities within Danone's IT infrastructure, cloud environments, endpoints, applications, and digital assets.
- This position is integral to the proactive reduction of cyber risks by facilitating timely remediation of vulnerabilities and enhancing visibility into the organization’s threat landscape.
Core Responsibilities:
- Primary Duties
- Vulnerability Management Operations
- Conduct vulnerability scanning across infrastructure, applications, cloud environments, and endpoints.
- Evaluate vulnerability assessment findings and identify risk levels.
- Confirm remediation efforts and ensure closure of vulnerabilities.
- Risk Assessment Prioritization
- Evaluate vulnerability severity using CVSS, business criticality, threat intelligence, and exploitability factors.
- Prioritize remediation tasks based on overall risk exposure.
- Assist in the risk acceptance and exception management processes.
- Reporting Metrics
- Manage vulnerability management dashboards and key performance indicators (KPIs).
- Generate regular reports for technical teams and management stakeholders.
- Monitor remediation progress against established service level agreements (SLAs).
- Stakeholder Collaboration
- Engage with infrastructure, cloud, application, and security teams.
- Support the planning and execution of vulnerability remediation efforts.
- Offer insights on best practices for remediation.
- Continuous Improvement
- Assist in the deployment of Threat Exposure Management capabilities.
- Enhance vulnerability management processes and reporting mechanisms.
- Stay informed on emerging threats and significant vulnerabilities.
- Essential Skills and Competencies
- Must-Have
- Functional Technical Skills
- Proficiency in vulnerability management processes and tools.
- Experience with vulnerability assessment methodologies.
- Knowledge of CVSS scoring and risk prioritization techniques.
- Familiarity with operating systems, networks, databases, and cloud platforms.
- Understanding of threat intelligence and cyber risk principles.
- Ability in reporting, analytics, and dashboard management.
- Behavioral Competencies
- Exceptional analytical skills.
- Meticulous attention to detail.
- Strong stakeholder engagement abilities.
- Proactive problem-solving attitude.
- Capability to manage multiple priorities effectively.
Technical Qualifications:
- Ability to handle multiple priorities simultaneously.
- Nice to Have
- Functional Technical Skills
- Experience with Tenable, Qualys, Rapid7, and Microsoft Defender Vulnerability Management.
- Familiarity with vulnerability remediation and patch management processes.
- Understanding of Attack Surface Management (ASM).
- Experience with exposure management platforms.
- Automation and scripting skills in PowerShell and Python.
- Behavioral Competencies
- Experience in project coordination.
- Mindset focused on process improvement.