Vulnerability Management Analyst - Cyber Security

Cybersecurity Vulnerability Management Analyst

SailPoint's Cybersecurity organization is seeking a Cybersecurity

Vulnerability Management Analyst with a passion for cybersecurity. role ensures the continuous discovery, accurate assessment, risk-based

misconfigurations across all IT assets, directly reducing the organization's

exposure and maintaining regulatory compliance.

business acumen, and a proven track record of working in security

team securing SailPoint's production environments from misconfigurations

and software vulnerabilities, cross-functional collaboration, and ensuring

Our new Vulnerability Management Analyst will join a growing and capable

threat and vulnerability management team of both emerging and

established talent. 4 I's at SailPoint (individual, Impact, Innovation, and Integrity) even if

work culture and environment.

IT, DevOps, Product engineering, Security engineering, and Compliance.

This role reports directly to the Head of Vulnerability Management and will

be remote. Candidae must go to Pune office once a quarter.

3-5 years experience, preferably in vulnerability management.

 Strong engineering experience with cloud, containers, open-source

code, deployment and misconfigurations.

 Intermediate experience with scripting languages (e.g., Python,

PowerShell) for automating data ingestion, reporting, or integrating

VM data into other security tools (SIEM/SOAR).

 Experience with regulatory frameworks (e.g., GDPR) and providing evidence for compliance and audit needs.  Experience tracking trends and configure systems as required to

Influence & Collaboration – Demonstrable experience building strong

modern software development (fully

automated CI/CD, REST, OAuth2) including multi-cloud (AWS, Azure,

GCP, Containers, Kubernetes) architectures, particularly Amazon Web

Services, Kubernetes, and Docker.

 Risk-Based Decision Making – Experience making informed decisions

through balancing business priorities, technical constraints, and risk

Certifications like CISSP, CISA, CySA+, AWS Certs, or CCNSE , or

If the candidate does not have the AWS Certified Cloud Practitioner or

AWS Certified Cloud Security – Specialty, they must take these

strategy, aligning with business goals and regulatory requirements.

 Partnering with Dev/Ops, engineering, product management, and

infrastructure teams to integrate vulnerability management practices

Identifying risk in a production environment comprised of a

threat intelligence analysis and adversarial tactics.

 Explaining risks, identifing dependencies, and facilitating the

Enforce a prioritization framework that utilizes risk context beyond

standard CVSS scores, factoring in asset criticality, exposure to the

public internet, and internal threat intelligence (e.g., Drive the adoption of security automation, vulnerability management

Providing program performance reporting and metrics per business

unit and product. Complete all tooling platform specific training assigned.

Take ownership of vulnerability analysis and reporting for a

Manage full lifecycle for all production environment

• our cloud architecture.
• SailPoint is an equal opportunity employer and we welcome all qualified candidates to apply to join our team. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other category protected by applicable law.

Alternative methods of applying for employment are available to individuals unable to submit an application through this site because of a disability. Contact [HIDDEN TEXT] or mail to 11120 Four Points Dr, Suite 100, Austin, TX 78726, to discuss reasonable accommodations. NOTE: Any unsolicited resumes sent by candidates or agencies to this email will not be considered for current openings at SailPoint.