Senior Vulnerability Analyst
Confirmed on the employer's own hiring board on Oct 14, 2026. First seen by Alion on Oct 2, 2026.
Join Cboe, a leading global markets operator, as a Senior Vulnerability Analyst. In this role, you will be responsible for reducing risk to Cboe's global IT infrastructure by executing and continuously improving the Vulnerability Management Program. You will analyze vulnerability scan results, assess risk, coordinate remediation, and serve as a senior technical escalation point for vulnerability-related security tickets. Additionally, you will design, operate, and maintain the vulnerability scanning and assessment infrastructure, drive automation and integration efforts, and partner cross-functionally with infrastructure, application, and platform teams.
Missions
- Reducing risk to Cboe’s global IT infrastructure by executing and continuously improving the Vulnerability Management Program using a risk-based vulnerability management (RBVM) approach.
- Analyzing vulnerability scan results, assessing risk within the context of the enterprise environment, and coordinating remediation with global infrastructure and application teams.
- Driving automation and integration efforts to improve the efficiency, scalability, and accuracy of vulnerability detection, analysis, remediation tracking, and reporting.
Profil recherché
- Availability to participate in a 24/7 on-call rotation and periodic flexibility in working hours to accommodate collaboration with a global team- Strong, practically-used scripting and automation skills, using Python to automate security operations, integrate tools, and perform data analysis
- Senior-level experience in information security, with a minimum of 5 years in security, or 3 years in security plus 2-3 years in core IT roles such as system or network administration, and a strong emphasis on engineering and operational security
- Hands-on expert level experience with vulnerability management and cloud/SaaS security tooling, including platforms such as Qualys, Tenable, Rapid7, Wiz, Reco, Obsidian, AppOmni, and Aqua, with the ability to install, configure, and operate platforms of this type in an enterprise environment
- Experience using Atlassian Jira and Confluence, including workflow design and automation, to track vulnerabilities, remediation efforts, and security initiatives
- Solid systems and identity administration background, including Linux/Unix and Windows environments, Active Directory, and Entra ID, as well as experience with managed network devices
- Experience creating reporting visualizations using tools such as Power BI, Sigma, Snowflake
- Demonstrated ability and willingness to mentor junior team members, sharing technical expertise, operational knowledge, and best practices
- Deep understanding of security vulnerabilities, threats, and attack techniques, with at least 2 years of experience in vulnerability monitoring, threat detection, event monitoring, or incident response
- Familiarity with the Microsoft Security stack, including Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, Purview DLP, and Intune
- Strong English communication skills, with the ability to clearly and professionally convey technical risk, remediation guidance, and impact analysis to both technical teams and key stakeholders
- Advanced AI usage skills to supercharge productivity including chatbots such as Copilot or ChatGPT, but also demonstrated success with code and workflow creation tooling like Claude Code, Cursor, N8N
- Bachelor's degree in Cybersecurity, Computer Science, Engineering or other technical field
- Centralized System Administration experience in Windows, Linux, Network or Firewall management
- Proven ability to script and automate tasks
- Information security certifications such as GPEN, Security+, CISSP, OSCP, CEH, LPT
- Experience writing and leveraging AI tooling to solve problems creatively and efficiently