1

Associate Vulnerability Management Analyst Jobs in New York

* A Vulnerability Analyst II with a data focus is responsible for improving the quality, consistency, and usability of vulnerability management data across multiple sources by developing harmonized ...

Be Seen First

More than three years of experience in Application Security, Vulnerability Management, Security ... analysis CI/CD security integration Secure coding reviews The interview process will include an ...

Sr Vulnerability Management Engineer

New York, NY ยท Remote

$114K - $157K/yr

Analyze findings, validate exploitability, and provide clear, actionable remediation guidance to ... Bachelor's Degree or higher and 7+ years of vulnerability management experience Experience ...

next page

Showing results 1-20

Associate Vulnerability Management Analyst information

What cities in New York are hiring for Associate Vulnerability Management Analyst jobs?

Cities in New York with the most Associate Vulnerability Management Analyst job openings:

Infographic showing various Associate Vulnerability Management Analyst job openings in New York as of August 2026, with employment types broken down into 1% As Needed, 82% Full Time, 15% Part Time, and 2% Contract. Highlights an 84% Physical, 2% Hybrid, and 14% Remote job distribution.

W2 Contract || Vulnerability Management || Somerset, NJ || (Day-1-Oniste)

Somerset, NJ โ€ข On-site

Noblesoft Technologies
Software Developmentย โ€ขย 51 - 200 employees

$40 - $50/hr

Contractor

Re-posted 11 days ago


Job description

Job Title: Vulnerability Management

Location: Somerset, NJ (Onsite)

Look for profiles with vulnerability management, Rapid7, Qualys, Attack Surface Management, OWASP ZAP, Burp Suite etc.

Job Description

We are seeking a technically strong Vulnerability Management Analyst / Engineer to lead vulnerability identification, prioritization, and remediation across infrastructure, web applications, and cloud environments. This role combines hands-on scanning, threat-informed prioritization, and cross-functional remediation coordination to reduce risk and improve time to remediation.

Experience

•           5+ years of vulnerability management, application security, or penetration testing experience preferred.

Required Skills

  • 5+ years of experience in Vulnerability Management, Application Security, or Penetration Testing
  • Hands-on experience with:
    • Qualys VMDR
    • Rapid7 InsightVM
    • Tenable / Nessus
    • Wiz
    • Burp Suite
    • OWASP ZAP
    • Veracode
    • Checkmarx
    • InsightAppSec
  • Strong understanding of:
    • Vulnerability Management Lifecycle
    • Attack Surface Management (ASM)
    • Web Application Security
    • DAST Testing
    • OWASP Top 10
    • SANS Top 25
    • CVSS, EPSS, and CISA KEV
  • Experience performing manual validation of vulnerabilities including:
    • SQL Injection (SQLi)
    • Cross-Site Scripting (XSS)
    • CSRF
    • SSRF
    • IDOR
    • Authentication Bypass
  • Experience with cloud security across AWS, Azure, and GCP
  • Strong scripting experience with Python, PowerShell, or Bash
  • Experience with vulnerability remediation tracking, reporting, and executive dashboards

Preferred Qualifications

  • OSCP, GWAPT, CEH, CSSLP, or equivalent certifications
  • Experience with penetration testing and application security assessments
  • Knowledge of PCI-DSS, NIST, CIS Controls, ISO 27001, HIPAA, and GDPR
  • Experience with external attack surface monitoring and exposure management tools such as Shodan, SecurityScorecard, BitSight, and SSLScan
  • Experience with container security and CI/CD security integrations

Responsibilities

  • Manage the end-to-end vulnerability management lifecycle
  • Conduct vulnerability assessments across infrastructure, cloud, applications, and web environments
  • Perform DAST and manual web application security testing
  • Prioritize vulnerabilities using CVSS, EPSS, threat intelligence, and business impact
  • Partner with Infrastructure, DevOps, Engineering, and Security teams to drive remediation
  • Develop executive-level risk and remediation reporting
  • Respond to critical and zero-day vulnerabilities
  • Improve vulnerability management processes and security posture across the organization

Keywords

Vulnerability Management, Attack Surface Management, ASM, Qualys, Rapid7, InsightVM, Tenable, Nessus, Wiz, Burp Suite, OWASP ZAP, Veracode, Checkmarx, InsightAppSec, DAST, Application Security, Web Security, Cloud Security, AWS, Azure, GCP, CVSS, EPSS, CISA, Python, Penetration Testing, OWASP Top 10.