Note: The job is a remote job and is open to candidates in USA. Loenbro is a construction lifecycle partner serving customers across the United States. The Cyber Security Analyst & Vulnerability Management Engineer will oversee the enterprise vulnerability management program, support security operations and MDR response, manage cybersecurity aspects of change management, and coordinate risk remediation across technical and business teams.
Responsibilities
- Serve as the primary owner of the enterprise Vulnerability Management Program
- Administer and maintain Tenable vulnerability management platforms
- Conduct regular vulnerability assessments across servers, workstations, cloud services, applications, and network infrastructure
- Analyze vulnerability scan results and determine business risk, exploitability, and remediation priorities
- Establish and maintain vulnerability remediation timelines based on risk severity and organizational requirements
- Coordinate remediation efforts with infrastructure, application, cloud, and operations teams
- Validate remediation activities and perform rescanning to confirm closure
- Develop vulnerability metrics, dashboards, KPIs, and executive reporting
- Track vulnerability trends and identify recurring weaknesses requiring strategic improvement
- Manage vulnerability exception and risk acceptance processes
- Support internal and external audits related to vulnerability management and remediation activities
- Monitor and respond to Managed Detection and Response (MDR) alerts and findings
- Investigate security incidents identified through MDR services, Threat Intelligence feeds, and internal monitoring systems
- Coordinate containment, eradication, and recovery activities when cybersecurity incidents occur
- Perform triage and analysis of suspicious activity, malware events, unauthorized access attempts, and security anomalies
- Document investigations, findings, root cause analysis, and corrective actions
- Collaborate with MDR providers to improve detection capabilities and response procedures
- Assist in maintaining incident response documentation, playbooks, and escalation procedures
- Participate in after-action reviews and lessons learned activities
- Review, evaluate, and approve cybersecurity-related change requests
- Assess proposed infrastructure, application, network, and cloud changes for security risks and compliance impacts
- Ensure security requirements are incorporated into organizational change management processes
- Participate in Change Advisory Board (CAB) meetings and provide security recommendations
- Identify potential security concerns before system implementations and production deployments
- Communicate security risks, mitigation requirements, and recommended controls to stakeholders
- Track security-related action items resulting from changes and project initiatives
- Identify, assess, and communicate cybersecurity risks throughout the organization
- Work closely with business and technical teams to ensure timely remediation of identified issues
- Develop and deliver security reports for operational teams, management, and executive leadership
- Escalate critical vulnerabilities and security concerns according to established procedures
- Assist with policy development, standards maintenance, and security program enhancements
- Provide security awareness and guidance regarding vulnerabilities, threats, and remediation best practices
Skills
- 5-10+ years of experience in Cyber Security, Vulnerability Management, Security Operations, or Information Security
- Experience managing enterprise vulnerability management programs
- Experience reviewing and approving technology-related change requests
- Experience responding to security incidents and MDR findings
- Experience working with infrastructure, cloud, networking, and endpoint technologies
- Experience producing risk and remediation reports for technical and non-technical audiences
- Advanced experience with Tenable Vulnerability Management solutions
- Strong experience with CrowdStrike Falcon
- Experience with vulnerability prioritization methodologies and risk-based remediation
- Understanding of Windows and Linux operating systems
- Knowledge of Active Directory, Azure AD/Entra ID, and identity security
- Understanding of network security concepts
- Experience with vulnerability scanning, remediation validation, and risk tracking
- Experience with security incident investigation and response
- Experience with ticketing and change management systems
- Field & Site Visits (Up to 50% Travel): Frequent, regular travel to job sites and data centers nationwide. This includes spending significant time at active outdoor construction sites with exposure to weather extremes, noise, and dust
Benefits
- Medical, dental, and vision insurance
- 401(k) retirement plan with company match
- Paid time off (PTO) and holiday pay
- Life and disability insurance
- Professional development and training opportunities
- Employee assistance program (EAP)
- Benefits eligibility may vary based on employment classification and hours worked.
Company Overview
Company H1B Sponsorship