CSS Vulnerability Analyst

About the role

Stefanini Group is looking for a Cyber Security Services (CSS) Vulnerability Analyst to join its Security Operations Center (SOC) operating as a Managed Security Service Provider. The analyst will be the technical point of contact for vulnerability management, delivering assessments, supporting client interactions and providing risk‑based insights.

Key responsibilities

• Act as escalation point for client vulnerability‑related issues.
• Perform vulnerability scanning, false‑positive validation, compliance checks and policy configuration using leading tools.
• Analyse security findings across diverse technologies to identify high‑risk assets.
• Conduct risk, threat and vulnerability analysis, including exploitation techniques and attack paths.
• Provide remediation guidance, prioritize findings and support patch‑management tracking.
• Integrate and communicate vulnerability metrics, trends and risk posture to clients and internal management.
• Ensure activities meet SLAs, processes and client requirements.
• Contribute to process improvement and mentor junior analysts.

Required profile

• 3‑5 years of cybersecurity operations experience, with at least 2 years in vulnerability or patch management.
• High school diploma minimum; Bachelor’s degree in Computer Science, IT, Engineering or related field preferred.
• Excellent written and verbal English communication skills.

Required skills

• Hands‑on experience with vulnerability assessment tools such as Microsoft Defender Vulnerability Management, Nessus, Qualys or Rapid7.
• Strong knowledge of vulnerability classification schemes (CVE, CVSS v2/v3, CWE, CPE).
• Understanding of networks, firewalls, operating systems and enterprise environments.
• Familiarity with related security domains like Incident Response, Identity & Access Management and Threat Assessment.