ZipRecruiter

Log In

1

Vulnerability Management Analyst Jobs in Michigan

Zantech

OT Cybersecurity Engineer

Battle Creek, MI · On-site

Cybersecurity Web/App Vulnerability Management branch (Information System Security Engineer (ISSE ... Provide analysis of existing and emerging DLA Information Systems, OT, and IT Infrastructure to ...

Zantech

OT Cybersecurity Engineer

Battle Creek, MI · On-site

Cybersecurity Web/App Vulnerability Management branch (Information System Security Engineer (ISSE ... Provide analysis of existing and emerging DLA Information Systems, OT, and IT Infrastructure to ...

L&L Products

IT Systems Administrator

Romeo, MI · On-site

Support vulnerability management by reviewing findings, coordinating remediation efforts, and ... Participate in security incident response, root cause analysis, and post-incident reviews.

Zantech

OT Cybersecurity Engineer

Battle Creek, MI · On-site

Cybersecurity Web/App Vulnerability Management branch (Information System Security Engineer (ISSE ... Provide analysis of existing and emerging DLA Information Systems, OT, and IT Infrastructure to ...

Deloitte

Lead Cloud Security Analyst

Detroit, MI · On-site

Serve as the go-to analyst across high-impact domains, facilitating rapid adaptation as priorities ... Serve as a first-line subject matter expert in incident response, vulnerability management, and ...

Deloitte

Lead Cloud Security Analyst

Grand Rapids, MI · On-site

Serve as the go-to analyst across high-impact domains, facilitating rapid adaptation as priorities ... Serve as a first-line subject matter expert in incident response, vulnerability management, and ...

Zantech

OT R&D Cybersecurity Engineer

Battle Creek, MI · On-site

Cybersecurity Web/App Vulnerability Management branch (ISSE support), R&D-focused * R&D Information ... Provide analysis of emerging DLA R&D Information Systems, R&D OT, and R&D IT Infrastructure to ...

Zantech

OT R&D Cybersecurity Engineer

Battle Creek, MI · On-site

Cybersecurity Web/App Vulnerability Management branch (ISSE support), R&D-focused * R&D Information ... Provide analysis of emerging DLA R&D Information Systems, R&D OT, and R&D IT Infrastructure to ...

State of Michigan

Senior Business Analyst-12

Lansing, MI · On-site

$33.45 - $48.09/hr

The Senior IT Business Analyst with the Department of Technology, Management, and Budget (DTMB ... application vulnerability scanning onboarding and requests, etc. They will also assist with ...

Zantech

OT R&D Cybersecurity Engineer

Battle Creek, MI · On-site

Cybersecurity Web/App Vulnerability Management branch (ISSE support), R&D-focused * R&D Information ... Provide analysis of emerging DLA R&D Information Systems, R&D OT, and R&D IT Infrastructure to ...

DataSync Inc.

Business Analyst

Lansing, MI · On-site

Manage Agile backlogs, releases, defects, and requirements using Azure DevOps. * Collaborate with ... Support security, compliance, QA, testing, and vulnerability remediation activities. * Coordinate ...

previous page

Showing results 41-60

All JobsVulnerability Management Analyst JobsVulnerability Management Analyst Jobs in Michigan

Vulnerability Management Analyst information

See Michigan salary details

$61.5K

$109.1K

$153.2K

How much do vulnerability management analyst jobs pay per year?

As of Sep 4, 2026, the average yearly pay for vulnerability management analyst in Michigan is $109,107.00, according to ZipRecruiter salary data. Most workers in this role earn between $72,888.00 and $144,020.00 per year, depending on experience, location, and employer.

What is a vulnerability management analyst?

A Vulnerability Management Analyst is responsible for identifying, assessing, and mitigating security vulnerabilities within an organization's IT infrastructure. They use scanning tools, analyze threat data, and collaborate with teams to prioritize and remediate risks. Their role is crucial in maintaining cybersecurity by ensuring systems are patched and configured securely. Additionally, they may develop reports and provide recommendations to improve security posture. This position requires knowledge of security frameworks, risk assessment, and vulnerability management tools.

What are the typical daily responsibilities of a vulnerability management analyst?

On a typical day, a Vulnerability Management Analyst reviews system scans, analyzes reports for potential vulnerabilities, and works with IT or security teams to prioritize remediation efforts. They may also track the status of vulnerabilities, ensure timely patch application, and help develop or update security policies. Collaboration with various departments is common to coordinate testing, remediation, and communicate risk summary findings. This role requires keeping up with emerging threats and sometimes participating in security audits or compliance reviews, making it both dynamic and integral to the organization's overall cybersecurity posture.

What are the key skills and qualifications needed to thrive as a vulnerability management analyst?

A Vulnerability Management Analyst requires a strong background in cybersecurity principles, risk assessment, and IT networking, often supported by a relevant degree or certifications like CompTIA Security+, CISSP, or CEH. Experience with vulnerability scanning tools (such as Nessus, Qualys, or Rapid7) and familiarity with ticketing systems or SIEM platforms is essential. Strong analytical skills, attention to detail, effective communication, and the ability to work collaboratively help individuals succeed in this role. These capabilities are vital to proactively identify, assess, and mitigate security vulnerabilities, ensuring the organization's digital assets remain secure and compliant.

What are the most commonly searched types of Vulnerability Management Analyst jobs in Michigan?

The most popular types of Vulnerability Management Analyst jobs in Michigan are:

What are popular job titles related to Vulnerability Management Analyst jobs in Michigan?

For Vulnerability Management Analyst jobs in Michigan, the most frequently searched job titles are:

What job categories do people searching Vulnerability Management Analyst jobs in Michigan look for?

The top searched job categories for Vulnerability Management Analyst jobs in Michigan are:

Vulnerability Management Analyst jobs near you
Infographic showing various Vulnerability Management Analyst job openings in Michigan as of August 2026, with employment types broken down into 68% Full Time, and 32% Contract. Highlights an 83% In-person, 6% Hybrid, and 11% Remote job distribution, with an average salary of $109,107 per year, or $52.5 per hour.

Senior Application Security Engineer (REMOTE)

Amerisure Mutual Insurance Company

Farmington Hills, MI • On-site, Remote

$57.75 - $77.25/hr

Full-time

Medical, Retirement, PTO

Re-posted 15 days ago

Key responsibilities

  • Configure, implement, and maintain security systems to ensure the integrity, availability, and resilience of the organization's IT infrastructure, applications, and data.

  • Conduct application and API security reviews, vulnerability assessments, and penetration testing, and fine-tune security tools to identify and remediate gaps.

  • Lead incident response and digital forensics investigations, providing technical expertise to analyze cyber events and implement effective remediation actions.

Job description

Amerisure creates exceptional value for its partners, policyholders, and employees. As a property and casualty insurance company, Amerisure's promise to our partner agencies and policyholders begins with a comprehensive line of insurance products designed to protect businesses, as well as the health and safety of every employee. With an A.M. Best "A" (Excellent) rating, Amerisure serves mid-sized commercial enterprises focused in construction, manufacturing and healthcare. Ranked as one of the top 100 Property & Casualty companies in the United States, we proudly manage nearly $1 Billion of Direct Written Premium and maintain $1.21 billion in surplus.
Amerisure is hiring!! This role can sit remote. We're looking for a Senior Application Security Engineer who can take ownership of security initiatives, shape our strategy, and partner closely with engineering teams to safeguard our applications from the ground up. The ideal candidate will possess the following skill set.
Summary Statement
The Senior IT Security Engineer designs, implements, and maintains security controls to protect the organization's systems and data. This role leads security monitoring, vulnerability management, and incident response efforts, while embedding security throughout the SDLC and integrating testing capabilities into CI/CD pipelines. The engineer supports secure development practices and conducts application and API penetration testing. Working closely with development, QA, DevOps, and architecture teams, this role strengthens the security posture of mission-critical SaaS and hybrid cloud applications. The Senior Engineer also advises leadership on security strategies, emerging technologies, and alignment with business goals, ensuring innovative, compliant, and effective security solutions.
Essential Tasks/Major Duties
  • Configure, implement, and maintain security systems with a hands-on approach to ensure the integrity, availability and resilience of the organization's IT infrastructure, applications and data.
  • Serve as a subject matter expert for application, API, and integration security across the enterprise. Establish and embed secure development requirements, best practices, patterns, and guardrails (Left Shift) across platforms, technology stacks, and development teams to enhance the overall application and API security posture.
  • Define, design, implement, and continuously improve application security processes, tools, and metrics. Integrate and optimize SAST, SCA, IAST, DAST, and secrets detection tools within CI/CD pipelines, and monitor, track, and report application and API security metrics to leadership.
  • Conduct comprehensive application and API security reviews, vulnerability assessments, and penetration testing, actively configuring and fine-tuning security tools to identify and remediate gaps.
  • Collaborate with cross-functional teams to enforce security best practices and ensure compliance with relevant standards and frameworks (e.g., NIST CSF, NY DFS, MI DIFS, OWASP, HIPAA/HTRUST), configuring security solutions to meet evolving business and regulatory requirements.
  • Lead incident response and digital forensics investigations, providing technical expertise to analyze cyber events and implement effective remediation actions that minimize operational impact.
  • Mentor and guide security team members, sharing knowledge and expertise in application and API security, threat analysis, vulnerability management, cloud security, and cryptography, while fostering a collaborative, learning-driven team culture.

Knowledge, Skills & Abilities
  • Bachelor's degree or equivalent combination of education and experience.
  • 7+ years of experience in Application and API Security within a DevSecOps environment.
  • Required certifications include at least one CISSP, CSSLP, CCSP, GSEC, CEH, CISM, or CRISC, in addition to platform-specific certifications (AWS, Microsoft, Cisco, etc.) or domain specific certifications (OSWE, OSCP, GWAPT, or GWEB).
  • Experience in Property & Casualty insurance or other regulated industries preferred.
  • Proven experience securing SaaS and custom applications in complex multi-cloud environments, applying security best practices and compliance frameworks.
  • Expert knowledge of secure SDLC principles, application and API security, container security, and secure coding practices. Deep familiarity with OWASP Top 10, OWASP API Security Top 10, and CWE in DevOps environments using TeamCity, Azure Pipelines, GitHub Actions, and Bitbucket Pipelines.
  • Extensive experience automating security scans and integrating SAST, SCA, IAST, DAST, and secrets detection tools into CI/CD pipelines.
  • Proficiency in managing application security tools, including SonarQube, Black Duck, Synopsys Seeker, Snyk, and Wiz Code.
  • Strong understanding of modern authentication and authorization protocols, including OAuth2, OIDC, JWT, and mTLS.
  • Knowledge of cryptographic protocols and standards such as SSL/TLS, SSH, PKI, and emerging quantum-resistant encryption techniques.
  • Solid understanding of security standards and frameworks, including NIST CSF, NY DFS, MI DIFS, HIPAA/HITECH, MITRE ATT&CK, and domain-specific regulatory requirements.
  • In-depth knowledge of common attack vectors and tactics, with a focus on proactive defense and risk mitigation.
  • Proficient in vulnerability assessment and penetration testing tools, capable of identifying, analyzing, and remediating vulnerabilities across applications and systems.
  • Familiarity with enterprise platforms such as Guidewire, Salesforce, Databricks, and SnapLogic is preferred.
  • Skilled in leading team initiatives using project management and Agile methodologies.
  • Excellent communication skills to clearly articulate security risks, policies, and remediation strategies to both technical and non-technical stakeholders.

#LI-Remote
Just as we are committed to creating exceptional value for our Partners For Success® agencies and policyholders, Amerisure also remains committed to being an employer of choice. We reinforce this commitment by adhering to an Employee Value Proposition that, in part, is provided through a competitive total rewards package. This package includes competitive base pay, performance-based incentive pay, comprehensive health and welfare benefits, a 401(k) savings plan with profit sharing, and generous paid time off programs. We also offer flexible work arrangements to promote work-life balance. Recognized as one of the Best and Brightest® Companies to Work For in the Nation and one of Business Insurance magazine's Best Places to Work in Insurance, we provide a workplace that fosters excellence and professional growth. If you are looking for a collaborative and rewarding career, Amerisure is looking for you.
Amerisure Mutual Insurance Company is an Equal Employment Opportunity employer. Amerisure provides equal employment opportunities to all employees and applicants without regard to race, color, religion, sex (to include sexual orientation and gender identity), national origin, age, disability, genetic information, veteran status, or any other protected characteristic under applicable federal, state, or local laws. Amerisure complies with all applicable laws governing nondiscrimination in employment in all locations where the company operates. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. Amerisure prohibits harassment or discrimination of any kind and is committed to maintaining a workplace free from unlawful harassment or discrimination. Amerisure prohibits retaliation against anyone who reports discrimination, participates in an investigation, or opposes unlawful practices. Any improper interference with an employee's ability to perform their job duties may result in disciplinary action, up to and including termination.

Apply