Security Operations Vulnerability Analyst II

United States

Full-time

Remote

$81K/yr - $119K/yr

Entry, Mid Level

Credit Acceptance is an award-winning company recognized for its workplace culture and dedication to professional development. As a Security Operations Vulnerability Analyst II, you will identify, assess, and mitigate security vulnerabilities while collaborating with various teams to ensure the security of enterprise systems.

Apply Now

Responsibilities

Perform ongoing vulnerability scans to enable risk management and mitigation
Maintain the unified vulnerability platform
Validate scan results and assist in remediation coordination with engineering teams
Apply CVSS scoring and risk prioritization based on exploitability and business impact.
Maintain an accurate asset inventory for vulnerability tracking
Collaborate with Threat Intelligence to integrate attacker TTPs into vulnerability prioritization
Prepare operational reports and escalate high-risk findings
Support compliance checks against internal and regulatory standards
Support implementing secure configuration baselines for specific technologies.
Participate in incident investigations to provide vulnerability context and recommendations.
Leverage multiple vulnerability data sources – including scans, penetration tests, and compliance reports – to analyze and prioritize risks
Collaborate with DFIR and threat intel analysts to enable treat hunting
Monitor and respond to alerts as part of a 24/7 Security Operations Center
Report outages or incidents following guidelines and procedures
Detect, analyze, and respond to incidents; coordinate containment, eradication, and recovery
Serve on the rotational 24/7 escalation point for the team

Qualification

Required

Bachelor’s degree in computer science, Information Systems, or closely related field of study or equivalent experience
Minimum 2 years of experience in vulnerability management, security operations, or related cybersecurity roles
Hands-on experience with vulnerability scanning tools and reporting platforms
Proficiency with vulnerability scanning tools such as Qualys, Nessus, Rapid7 and SOC workflows
Strong understanding of CVSS scoring, patch management, and risk assessment methodologies
Familiarity with security frameworks such as NIST CSF, CIS Benchmarks, and MITRE ATT&CK
Knowledge of vulnerability management lifecycle, remediation best practices, and asset inventory tracking
Experience with Threat Intelligence and attacker TTPs integration
Ability to interpret data from discovery and vulnerability scans, penetration tests, and compliance reports
Familiarity with DFIR (Digital Forensics and Incident Response) and threat hunting methodologies
Experience in incident detection, analysis, and response protocols
Strong analytical thinking, documentation, and cross-functional communication
Ability to work in a fast-paced, collaborative Security Operations environments

Preferred

CompTIA: Cybersecurity Analyst (CySA), Security +, CompTIA Advanced Security Practitioner (CASP+), or equivalent
Prior experience as a SOC Analyst or in Security Operations
Exposure to Threat Hunting or proactive detection activities
Familiarity with SIEM platforms and alert triage processes
Knowledge of scripting for automation (Python, PowerShell)
Experience collaborating with Incident Response and Threat Intelligence teams