{"id":2811865,"url":"https://alion.io/job/sysco-vulnerability-analyst-2","title":"Vulnerability Analyst 2","company":{"id":1771007,"name":"Sysco","domain":"sysco.com","url":"https://alion.io/company/sysco-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":99000,"max_usd":190000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":460},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CVSS","optional":false},{"name":"GCP","optional":false},{"name":"ISO 27001","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Tanium","optional":false},{"name":"Wiz","optional":false}],"status":"live","first_seen_at":"2026-10-13T00:00:00Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-20T10:57:00Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"Company:\nUS6469 Sysco Payroll, Division of Sysco Resources Services, LLCSales Territory:\nNoneZip Code:\n77077Travel Percentage:\n0COMPENSATIONINFORMATION:\nThe pay range provided is not indicative of Sysco’s actual pay range but is merely algorithmic and provided for generalized comparison. Factors that may be used to determine rate of pay include specific skills, work location, work experience and other individualized factors\nJob Summary:\nThe vulnerability analyst is a key member of the vulnerability & threat management team responsible for identifying, analyzing, prioritizing, and driving remediation of security vulnerabilities across Sysco's global technology environment. This role partners closely with infrastructure, cloud, application, and security teams to reduce organizational cyber risk through proactive vulnerability management, asset discovery, threat analysis, and continuous improvement of security controls.\nThe ideal candidate will have experience in vulnerability management processes, security tools, remediation coordination, and risk-based prioritization. This position requires strong analytical skills, technical knowledge, and the ability to collaborate effectively with stakeholders across the enterprise.\nDuties and Responsibilities:\nConduct vulnerability assessments across on-premises, cloud, network, endpoint, and application environments using enterprise security tools.\nAnalyze vulnerability scan results, validate findings, and assess business risk to support remediation prioritization.\nMonitor and evaluate emerging threats, vulnerabilities, exploit trends, and security advisories to determine organizational impact.\nPartner with infrastructure, cloud, application, and business teams to drive timely remediation of identified vulnerabilities.\nTrack remediation efforts and provide reporting on vulnerability trends, risk reduction, SLAs, and key program metrics.\nCollaborate with technology teams to identify and decommission end-of-life (EOL) and unsupported systems that create security risk.\nPerform asset discovery activities and leverage reconnaissance tools to identify unknown, rogue, internet-facing, and newly discovered assets.\nConfigure, maintain, and optimize vulnerability scanning and discovery platforms to ensure accurate visibility and coverage.\nAnalyze security logs, scan data, and threat intelligence sources to identify potential security exposures and attack vectors.\nAssist with vulnerability exception reviews and risk acceptance processes, ensuring appropriate documentation and risk justification.\nSupport incident response and threat hunting activities by providing vulnerability context and exposure analysis when needed.\nDevelop and maintain vulnerability management documentation, procedures, standards, and operational runbooks.\nParticipate in continuous improvement initiatives focused on enhancing vulnerability management effectiveness, automation, and reporting. \nWork closely with threat intelligence and security operations teams to identify vulnerabilities actively targeted by threat actors and prioritize response efforts.\nProvide guidance and best practices to technology teams regarding vulnerability \nEducation Required:\nSecurity Certification\nBachelor’s degree in computer science, business administration, information systems, or a related field, or equivalent work experience.\nExperience Required:\n3-5 years of experience in cybersecurity, vulnerability management, security operations, or a related information security discipline.\nExperience working with enterprise vulnerability management platforms such as Tenable, Qualys, Wiz, Sentinal1 or similar technologies.\nStrong understanding of vulnerability management frameworks, CVSS scoring, risk-based prioritization, and remediation workflows.\nKnowledge of operating systems, networking concepts, cloud technologies, and common security architectures.\nExperience interpreting vulnerability scan results and communicating technical findings to both technical and non-technical stakeholders.\nFamiliarity with security monitoring, log analysis, and security event investigation.\nUnderstanding of common security vulnerabilities, attack techniques, and industry-standard mitigation strategies.\nExcellent problem-solving, analytical, and organizational skills.\nStrong verbal and written communication skills with the ability to influence remediation efforts across multiple teams.\nLead cross-functional vulnerability remediation meetings with business stakeholders, application owners, infrastructure teams, and technical teams to communicate vulnerability risk, validate findings, define remediation strategies, establish ownership and timelines, resolve remediation blockers, and drive security findings through closure\nExperience Preferred:\nExperience with cloud platforms such as AWS, Azure, or GCP.\nFamiliarity with threat intelligence platforms and security operations workflows.\nKnowledge of scripting or automation technologies such as PowerShell, Python, Bash, or APIs.\nExperience with asset management and CMDB platforms.\nUnderstanding of security frameworks and standards such as NIST, CIS Controls, ISO 27001, or PCI-DSS.\nIndustry certifications such as Security+, CySA+, GSEC, SSCP, CEH, or similar security certifications.\nLicenses/Certification Required:\nSecurity Certification\nLicenses/Certification Preferred:\nCloud, Security+, Network +, Tenable.io VM or OT, Tanium Comply or Patch\nSkills and Abilities:\nWide knowledge of application and IT product diversity, interoperability, and extensive knowledge in IT security\nAbility to configure and conduct vulnerability scans using VM tools such as Tenable.io and Tanium\nUnderstanding of VM lifecycle within cloud environment for discovering, scanning, analyzing, and triage\nAbility to interpret threat and vulnerability data using Sysco’s vulnerability scanning tools\nProvide patching teams details needed for prioritized remediation leveraging Kenna\nPhysical Demands:\nReasonable accommodations will be made to enable individuals with disabilities to perform the essential functions of this job.'\nWork Environment:\nHybrid Role-Based Houston\nBENEFITS INFORMATION:\nFor information on Sysco’s Benefits, please visit https://SyscoBenefits.comOVERVIEW:\nSysco is the global leader in foodservice distribution. With over 71,000 colleagues and a fleet of over 13,000 vehicles, Sysco operates approximately 333 distribution facilities worldwide and serves more than 700,000 customer locations.\nWe offer our colleagues the opportunity to grow personally and professionally, to contribute to the success of a dynamic organization, and to serve others in a manner that exceeds their expectations. We’re looking for talented, hard-working individuals to join our team. Come grow with us and let us show you why Sysco is at the heart of food and service.\nAFFIRMATIVE ACTION STATEMENT:\nApplicants must be currently authorized to work in the United States.\nWe are proud to be an Equal Opportunity and Affirmative Action employer, and consider qualified applicants without regard to race, color, creed, religion, ancestry, national origin, sex, sexual orientation, gender identity, age, disability, veteran status or any other protected factor under federal, state or local law.\nThis opportunity is available through Sysco Corporation, its subsidiaries and affiliates.","description_format":"text","description_chars":7352,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Wholesale","Food Logistics"],"lifecycle":[{"event":"open","at":"2026-10-18T09:45:58Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 5 · green card filings: 3","filings_12m":5,"filings_prev_12m":2,"green_card_filings_12m":3,"median_offered_wage_usd":139375,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":2}],"liveness":{"score":41,"band":"fade","label":"Fading","p_open":1,"p_active":0.748,"p_room":0.55,"age_days":7,"expected_fill_days":7,"reasons":["conf:11","velocity","win:tail","comp:brand"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/sysco-vulnerability-analyst-2","json_url":"https://alion.io/job/sysco-vulnerability-analyst-2.json","meta":{"generated_at":"2026-10-20T20:21:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23553,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1771007},"rest":"https://alion.io/mcp/rest/get_company?id=1771007"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsysco-vulnerability-analyst-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsysco-vulnerability-analyst-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsysco-vulnerability-analyst-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sysco-vulnerability-analyst-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsysco-vulnerability-analyst-2"}]}