Job Description:
- Role Summary
- The IT Data Vulnerability Analyst is responsible for identifying assessing prioritizing and tracking vulnerabilities across Danone s IT infrastructure cloud environments endpoints applications and digital assets
- The role supports proactive cyber risk reduction by ensuring timely remediation of vulnerabilities and providing visibility into the organization s threat exposure
Key Responsibilities:
- Key Responsibilities
- Vulnerability Management Operations
- Execute vulnerability scanning activities across infrastructure applications cloud and endpoints
- Analyze vulnerability assessment results and determine risk levels
- Validate remediation activities and vulnerability closure
- Risk Assessment Prioritization
- Assess vulnerability severity using CVSS business criticality threat intelligence and exploitability
- Prioritize remediation actions based on risk exposure
- Support risk acceptance and exception management processes
- Reporting Metrics
- Maintain vulnerability management dashboards and KPIs
- Produce regular reports for technical teams and management
- Track remediation performance against agreed SLAs
- Stakeholder Collaboration
- Collaborate with infrastructure cloud application and security teams
- Support vulnerability remediation planning and execution
- Provide guidance on remediation best practices
- Continuous Improvement
- Support implementation of Threat Exposure Management capabilities
- Improve vulnerability management processes and reporting
- Monitor emerging threats and critical vulnerabilities
- Required Skills Competencies
- Must Have
- Functional Technical Skills
- Vulnerability Management processes and tools
- Vulnerability assessment methodologies
- CVSS scoring and risk prioritization
- Knowledge of operating systems networks databases and cloud environments
- Understanding of threat intelligence and cyber risk concepts
- Reporting analytics and dashboard management
- Behavioral Competencies
- Strong analytical skills
- Attention to detail
- Stakeholder engagement capabilities
- Problem solving mindset
- Ability to manage multiple priorities
Technical Requirements:
- Ability to manage multiple priorities
- Good to Have
- Functional Technical Skills
- Tenable Qualys Rapid7 Microsoft Defender Vulnerability Management
- Vulnerability remediation and patch management processes
- Attack Surface Management ASM
- Exposure Management platforms
- Automation and scripting PowerShell Python
- Behavioral Competencies
- Project coordination experience
- Process improvement mindset
Preferred Skills:
Technology->Cloud Security->AWS - Vulnerability Management,Technology->Application Security->Vulnerability Management,Technology->Cloud Security->Microsoft Azure - Infrastructure security->Microsoft Defender ATP,Technology->Risk Management->Risk Management System,Technology->Security Operations->SOAR