Cybersecurity Analyst - Vulnerability Management

We are looking for a Cybersecurity Analyst to join our Product Security team. This role is responsible for identifying, triaging, remediating, and reporting on vulnerabilities in software and cloud infrastructure of self-driving vehicle product.

What you will do (Responsibilities)

● Own the vulnerability management lifecycle end-to-end, from detection through triage, ownership identification, validation, resolution, and process improvement.

● Gather context about vulnerabilities to make accurate determination of severity and risk.

● Participate in refining and automating our vulnerability management workflows.

● Work with product teams to communicate identified risks, make recommendations on appropriate controls, advocate towards a fix.

● Gather and refine metrics related to vulnerability management and changes in risk posture.

Requirements

What do you know (Qualifications)

● 4+ years of experience in the cybersecurity field.

● Bachelor’s degree in a relevant field (Cybersecurity, Computer Science/Engineering, Electrical Engineering, Information Systems), or equivalent combination of experience, certification, and formal or informal education.

● Strong problem solving, troubleshooting, and communication skills.

● Tools of the trade: vulnerability scanners, code scanners (static analysis), dependency scanners (SBOM/SAST) and similar.

● General understanding of vulnerability scoring/prioritization frameworks and general cybersecurity frameworks: CVE, NIST, CIS, ISO.

Nice to have (Bonus Qualifications)

● General automation development experience.

● Experience with AWS or other public clouds and infrastructure-as-code.

Benefits

• Health Care Plan (Medical, Dental & Vision)
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off (Vacation, Sick & Public Holidays)
• Training & Development
• Retirement Plan (401k, IRA)
• Daily free breakfasts and lunches
• Health Care Plan (Medical, Dental & Vision)
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off (Vacation, Sick & Public Holidays)
• Training & Development
• Retirement Plan (401k, IRA)