Cyber Security Vulnerability Analyst 2

Overview

Garmin seeks a full-time Cyber Security Vulnerability Analyst 2 to operate independently configuring vulnerability scanning and assessments supporting risk identification analysis and remediation across networks operating systems applications and information system components. This role requires ownership of scanning processes stakeholder collaboration and execution of remediation plans based on data and experience.

What You'll Do37

• 1Essential Functions Review/configure automated tools analyze threat feeds and monitor disclosure programs to identify prioritize vulnerabilities
• 2Work with stakeholders to determine implement remediation timelines and align remediation plans using experience and data on Garmin risks
• 3Operate independently to configure and perform vulnerability scanning and assessments to support identification analysis and remediation of risk
• 4Responsible for reviewing/configuring automated tools analyzing threat feeds and monitoring disclosure programs to identify prioritize vulnerabilities
• 5Work with stakeholders to help determine implement remediation timelines/plans
• 6Independently analyze results from internal external vulnerability scans and charged with using experience and skills to prioritize risk-based remediation plans
• 7Coordinate establish proper scan timelines to avoid service interruption ensuring complete accurate results
• 8Establish strong relationships with business stakeholders to facilitate prioritization and timely remediation
• 9Develop metrics/timelines in support of monitoring vulnerability management program health
• 10Work with Cyber Security System Administration and System Owners to establish vulnerability mitigations and plans of action
• 11Independently build performance metrics providing advanced detailed views of remediation performance
• 12Ensure external vulnerability disclosures are assigned to proper teams and facilitate communications with vulnerability reporters and finders
• 13Analyze compliance requirements and develop scanning plans and procedures to test and report on results
• 14Coordinate efforts with compliance teams to develop vulnerability and scanning processes supporting governance compliance requirements
• 15Perform system administration activities on vulnerability management systems and applications
• 16Communicate in written and verbal form effectively in large team or departmental setting
• 17Authorized to formulate remediation plans and timelines following vulnerability scans using input from system owners
• 18Establishcreate vulnerability documentation mitigations and remediations
• 19Develop create reports of vulnerability scan results in consumable consistent format
• 20Establishtrack compliance with vulnerability management policies standards procedures
• 21Demonstrate proficient use and knowledge of standards and procedures
• 22Understand vulnerability tool configurations and provide guidance or remediation
• 23Possess analytical skills and strong ability to maintain composure and remain diplomatic under stress
• 24Familiarity with Common Vulnerability Scoring System CVSS framework National Vulnerability Database NVD
• 25Strong multitasking skills to effectively manage multiple activities including cross-team dependent activities simultaneously
• 26Consistently demonstrates quality effectiveness in work documentation and organization
• 27Demonstrated ability to exercise strong verbal written and interpersonal communication skills in small team setting
• 28Team-oriented positive attitude works well with others
• 29Familiarity with defensive security techniques and implementation of mitigating security controls
• 30Working experience with automated vulnerability scanning tools including implementation configuration maintenance
• 31Information security related experience in areas such as security operations incident analysis system patching endpoint protection
• 32Ability to work in fast paced dynamic environment
• 33Experience with NIST 800-53 and/or NIST Cyber Security Framework CSF
• 34Familiarity with SIEM platforms
• 35BI tools for data analytic reporting and KPIs
• 36System administration experience Windows and Linux Unix Scripting OR development experience Python JavaScript PowerShell C# Perl
• 37Garmin International equal opportunity employer

Salary Insight