Vulnerability Management Analyst

Evocs Overview

EVOCS was founded with a clear purpose: to help businesses operate more effectively, solve complex challenges, and create opportunities for growth through practical expertise and technology solutions.

As an IT consulting firm, we work with our clients to understand their needs, identify the right technologies, and deliver solutions that improve performance and support their business objectives.

Today, EVOCS is a trusted technology partner to a growing number of organizations and industry leaders. Our team combines technical expertise, business understanding, and a commitment to quality to deliver effective solutions and build lasting client relationships based on responsiveness, consistency, and results.

EVOCS Overview

EVOCS's journey began with a mission to empower businesses with advisory expertise, empowered with ideal technologies to provide them with comprehensive solutions to grow and prosper.

Founded by a team of passionate experts, EVOCS has grown into a trusted partner to a growing number of leaders across their respective industries. Our roots in employee-managed operations reflect our commitment to quality, consistency, and client success.

If you enjoy working in a hyper-fast-growing company, are eager to be part of an agile team, and want to be part of our success story, then let's talk!

Role Overview

As a Vulnerability Management Analyst, you will support targeted vulnerability scanning and patching coordination that keeps our clients' environments secure without taking over their remediation ownership.

You will be responsible for giving operational and executive stakeholders the clear, risk-prioritized reporting they need to make timely, informed decisions.

In this role, you will

• Perform vulnerability scanning support within approved scope and toolsets
• Support patching coordination, prioritization, and tracking with responsible infrastructure, application, cloud, and regional teams
• Develop recurring vulnerability and patching reports for operational and executive stakeholders
• Create, route, and track tickets for identified vulnerabilities through the applicable ITSM or remediation workflow
• Support risk-based decision making by helping prioritize vulnerabilities based on severity, exploitability, asset criticality, exposure, and business impact
• Document remediation actions, exceptions, risk decisions, and closure evidence
• Coordinate with client stakeholders while preserving client ownership of remediation decisions and operational accountability

What You Will Bring

The top candidate will have the following skills

• 5+ years' experience in vulnerability management and patch governance
• Experience with Tenable; Rapid7; Qualys; Zafran; Vulnerability scanning and reporting; Patch governance and remediation tracking; ITSM ticket creation and workflow coordination; Risk-based prioritization and exception documentation
• A passion for helping clients reduce risk through disciplined, well-documented remediation tracking
• Ability to build reporting that helps non-technical stakeholders understand risk and urgency
• An undying concern about unresolved vulnerabilities slipping through the cracks
• A willingness to coordinate across infrastructure, application, cloud, and regional teams
• Strong interpersonal and communication skills -- this is a client-facing role that involves frequent interaction via email, calls, and meetings

Ideally you have

• A degree in Cybersecurity, Information Technology, or a related field
• Ability to support multiple regional teams and scanning toolsets concurrently

Key Deliverables

• Vulnerability scanning support
• Patching coordination and tracking
• Operational and executive vulnerability reports
• Ticket creation and remediation workflow tracking
• Risk-based prioritization support
• Risk decision and exception documentation
• Closure evidence and remediation status documentation

#LI-Remote

Pay and benefits

Pay Range for jobs in the US.

The values we live by

• Customer-centric Solutions
• Innovation & Excellence
• Integrity & Transparency
• Data-driven Decision Making

Need to Know

The posting will be active for a minimum of 3 days. The active posting will continue to extend by 3 days until the position is filled.