{"id":1982170,"url":"https://alion.io/job/stonex-group-cyber-security-analyst-vulnerability-management","title":"Cyber Security Analyst - Vulnerability Management","company":{"id":2646,"name":"StoneX Group","domain":"stonex.com","url":"https://alion.io/company/stonex","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":{"grade":"A","score":100,"open_postings":4,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":13,"computed_at":"2026-10-19T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Bogotá, Colombia"],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":26000,"max_usd":63000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":714},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CVSS","optional":false},{"name":"EPSS","optional":false},{"name":"GCP","optional":false},{"name":"ISO 27001","optional":false},{"name":"Jira","optional":false},{"name":"KEV","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Red Teaming","optional":false},{"name":"ServiceNow","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-07T00:19:20Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-19T04:08:55Z","board_verified":true,"closed_at":null,"days_open":12,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":12},"description":"Overview\nThis role can be located in Sao Paulo (Brazil) or Bogota (Colombia)\nConnecting clients to markets - and talent to opportunity. With 5,400+ employees and over 80,000 institutional, commercial, and payments clients, we operate from more than 80 offices spread across six continents. As a Fortune 100, Nasdaq-listed provider, we connect clients to the global markets - focusing on innovation, human connection, and providing world-class products and services to all types of investors.Whether you want to forge a career connecting our retail clients to potential trading opportunities, or ingrain yourself in the world of institutional investing, StoneX Group is made up of four business segments that offer endless potential for progression and growth.\nBusiness Segment Overview: Engage in a deep variety of business-critical activities that keep our company running efficiently. From strategic marketing and financial management to human resources and operational oversight, you’ll have the opportunity to optimize processes and implement game-changing policies.\nPosition Purpose:\nThe Senior Vulnerability Management Analyst is responsible for the technical ownership, reliability, and continuous improvement of the organization’s vulnerability and exposure management capabilities across infrastructure, applications, and cloud environments. This role focuses on ensuring accurate visibility, high-fidelity data, and well-integrated tooling to support risk-based decision making and effective remediation.\nTechnology Ecosystem:\n Front-End: Vulnerability dashboards and reporting platforms (Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management, Armis VIPR)\n Back End: Vulnerability scanners, data pipelines, integrations, and ticketing platforms (ServiceNow, Jira)\n Exposure Management & Asset Intelligence: Armis Centrix, Axonius, External Attack Surface Management tools, Continuous Threat Exposure Management (CTEM) tools\nCloud: AWS, Azure, GCP\nResponsibilities\nPrimary duties will include:\nAnalyze vulnerability and exposure data across infrastructure, endpoints, applications, cloud environments, and externally exposed assets to identify security weaknesses, assess potential impact, and determine remediation priority.\nCorrelate vulnerability findings with asset criticality, threat intelligence, exploitability, external exposure, CVSS, EPSS, CISA KEV, and other contextual information to support risk-based vulnerability prioritization.\nCoordinate with Infrastructure, Cloud, Application, Network, and other technology teams to communicate vulnerability findings, provide remediation guidance, monitor progress, and support timely remediation of critical and high-risk exposures.\nInvestigate significant vulnerability and exposure findings, validate available evidence, identify potential mitigating controls, provide remediation or mitigation recommendations, and support root cause analysis when appropriate.\nMonitor vulnerability posture and remediation performance, identify emerging risks or trends, and prepare reports, dashboards, metrics, and presentations for technical and non-technical stakeholders.\nSupport vulnerability management processes including vulnerability intake, prioritization, remediation tracking, exception management, validation, audit requests, security assessments, Patch Tuesday activities, and exposure management initiatives.\nPartner with Threat Intelligence, Security Operations, vulnerability management engineering, and other security teams to evaluate emerging vulnerabilities, active exploitation, threat actor activity, and potential impact to StoneX environments.\nThis list of duties and responsibilities is not intended to be all-inclusive and can be expanded to include other duties or responsibilities that management deems necessary.\nThis list of duties and responsibilities is not intended to be all-inclusive and can be expanded to include other duties or responsibilities that management deems necessary.\nQualifications\nTo land this role you will need:\n4-6+ years of cybersecurity or information technology experience, including demonstrated experience in vulnerability management, vulnerability analysis, security operations, infrastructure security, or a related security discipline.\nWorking knowledge of vulnerability management technologies such as Rapid7 InsightVM, Microsoft Defender Vulnerability Management, Tenable, Qualys, or comparable vulnerability and exposure management platforms.\nStrong understanding of vulnerability risk and prioritization concepts, including CVSS, EPSS, CISA Known Exploited Vulnerabilities, exploitability, asset criticality, external exposure, and compensating controls.\nStrong analytical, investigative, and critical-thinking skills, including the ability to work through ambiguous technical problems, research unfamiliar vulnerabilities, and translate technical findings into actionable recommendations.\nStrong written and verbal communication skills with the ability to clearly explain vulnerability risk, remediation requirements, and technical findings to both technical and non-technical stakeholders while collaborating effectively \nWhat makes you stand out:\nExperience working with exposure management, external attack surface management, CTEM, asset intelligence, or vulnerability prioritization platforms.\nExperience collaborating with Threat Intelligence, Security Operations, Incident Response, penetration testing, red teams, or other cyber defense functions to evaluate exploitability and organizational risk.\nFamiliarity with enterprise operating systems, networking, cloud environments, identity technologies, and infrastructure concepts across Windows, Linux, macOS, AWS, Azure, or GCP.\nFamiliarity with security frameworks and regulatory requirements such as CIS Controls, NIST CSF, PCI DSS, ISO 27001, SOX, FINRA, or similar standards.\nExperience preparing vulnerability reports, remediation metrics, executive summaries, audit evidence, or other security communications for diverse audiences.\nEducation / Certification Requirements:\nBachelor's, or Master's degree in Information Security, Cybersecurity, Information Technology, Information Systems, Computer Science, Engineering, STEM, or a related discipline; equivalent relevant professional experience may also be considered.\nRelevant cybersecurity certifications such as CompTIA Security+, CySA+, SANS/GIAC certifications, Certified Vulnerability Assessor, or comparable vulnerability/security certifications are preferred.\nAdditional relevant industry certifications or demonstrated vulnerability management training may be considered.\nWork environment:\nFTE type of contract\nOffice location in São Paulo - Rua Joaquim Floriano - Rua Joaquim Floriano 413 SAO PAULO, São Paulo 04534-011 Brazil \nOffice location in Bogota - Avenida Carrera 9A - Avenida Carrera 9A # 115-06/30 Edificio Torre Tierrafirme Bogotá, 110111 Colombia \nHybrid model (4 days/week in the office, 1 day/week remote\nBenefits:\nMedical and life insurance\nPublic Transportation support\nMeal and food allowances","description_format":"text","description_chars":7068,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Life insurance"],"hiring_locations":[{"name":"Brazil","iso":"BR","kind":"country"},{"name":"Colombia","iso":null,"kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Endpoint Security","Information Security","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-10-07T00:19:20Z"}],"visa":[],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.714,"p_room":0.75,"age_days":12,"expected_fill_days":13,"reasons":["conf:1","velocity","win:late"],"computed_at":"2026-10-19T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/stonex-group-cyber-security-analyst-vulnerability-management","json_url":"https://alion.io/job/stonex-group-cyber-security-analyst-vulnerability-management.json","meta":{"generated_at":"2026-10-19T06:25:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4079,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-20T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2646},"rest":"https://alion.io/mcp/rest/get_company?id=2646"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstonex-group-cyber-security-analyst-vulnerability-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstonex-group-cyber-security-analyst-vulnerability-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstonex-group-cyber-security-analyst-vulnerability-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/stonex-group-cyber-security-analyst-vulnerability-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstonex-group-cyber-security-analyst-vulnerability-management"}]}