Vulnerability Management Analyst
North - Remote
North is seeking a detail-oriented Vulnerability Management Analyst to join our Cybersecurity team. In this role, you will help protect our payment processing platform, cloud environments, and internal infrastructure by identifying, analyzing, and prioritizing technical vulnerabilities.
Working closely with engineering, cloud infrastructure, and IT teams, you will leverage enterprise security tools (such as Wiz and Tenable) to track risk and diplomatically advocate for timely remediation. This role is ideal for an early-to-mid career cybersecurity professional with strong analytical and interpersonal skills who enjoys turning security data into actionable fixes.
What you'll do:
Vulnerability Identification & Scanning: Operate, maintain, and assist in configuring scanning platforms (Wiz, Tenable) across cloud assets, containers, data centers, network infrastructure, and endpoints.
Analysis & Prioritization: Review vulnerability data, reduce false positives, and prioritize risks based on business context, CVSS scores, threat intelligence, and payment industry risk factors.
Remediation Advocacy: Act as a liaison to engineering, IT, and operations teams to champion patching initiatives, explain technical risks, and follow up on overdue SLAs.
Tracking & Metrics: Track remediation progress, communicate risk posture to leadership, and maintain dashboards, reports, and key performance indicators (KPIs).
Compliance Support: Support security audit and compliance efforts (such as PCI-DSS) by providing evidence of regular vulnerability scanning and remediation.
Continuous Improvement: Refine vulnerability management processes, playbooks, and automated workflows to reduce exposure windows.
What we need from you:
Education and Experience
Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related technical field (or equivalent practical experience).
3 years of hands-on experience in cybersecurity, IT, system administration, or risk management.
Hands-on experience operating enterprise scanning platforms, specifically Wiz and Tenable.
Knowledge, Skills & Abilities
Core Vulnerability Concepts: Solid understanding of the vulnerability management lifecycle, Common Vulnerabilities and Exposures (CVEs), CVSS scoring, and common attack vectors and vulnerability exploitation.
Tooling Familiarity: Exposure to enterprise scanner technologies (Tenable) and cloud security/exposure management tools (Wiz).
Analytical Mindset: Ability to analyze large datasets of vulnerability scans, identify trends, and translate raw data into clear, actionable reporting.
Interpersonal & Communication Skills: Excellent verbal and written communication skills while building relationships across teams and encouraging patch completion.
Technical Foundations: Understanding of core OS concepts (Windows, Linux), cloud security fundamentals (AWS, Azure, or GCP), and enterprise networking.
How to stand out (Preferred):
5 years of relevant or hands-on experience in cybersecurity, IT, system administration, or risk management
Experience within fintech, payment processing, or another highly regulated, fast-paced environment.
Familiarity with payment industry standards and security frameworks (PCI-DSS, NIST Cybersecurity Framework, CIS Benchmarks).
Experience using ticketing and project tracking tools such as Jira to track vulnerability work items.
Basic scripting knowledge (Python, PowerShell, Bash, or API queries) to automate reporting or routine tasks.
Certifications such as CompTIA Security+, Network+, or eJPT are a plus, but not required.
Salary range: $70,000-$110,000
Pay within this range varies by work location and on job-related knowledge, skills, and experience. We look forward to discussing your salary expectations and our full total rewards offerings throughout the interview process.
Please note: North is a US based company and no sponsorship is available for this position at this time.
Who we are:
North, and our family of companies, are committed to helping entrepreneurs grow their businesses. As an end-to-end payment solutions company, we provide everything business owners need to get paid, whether they serve customers in a physical storefront, online, or both. We pride ourselves on being large enough to offer customized solutions to our enterprise-level clients while remaining agile enough to take an award-winning, hands-on approach to personal service that our merchants won’t find anywhere else.
Let’s go North, together! Our most important resource is our people. Join our diverse team of innovators and do-ers and make your mark on the future of payments technology. We're proud to offer benefits that help our team members further their overall well-being through unique initiatives that are both personally and professionally fulfilling.
At North, we celebrate diversity and create an inclusive environment for everyone. We are an equal opportunity employer.To learn more about North, and our family of companies, visit our website: north.com
Skills Required
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related technical field, or equivalent practical experience
- Three years of hands-on experience in cybersecurity, IT, system administration, or risk management
- Hands-on experience operating Wiz and Tenable enterprise scanning platforms
- Understanding of the vulnerability management lifecycle, CVEs, CVSS scoring, attack vectors, and vulnerability exploitation
- Ability to analyze vulnerability scan datasets, identify trends, and produce actionable reporting
- Excellent verbal and written communication skills
- Understanding of Windows, Linux, cloud security fundamentals, and enterprise networking
- Five years of relevant cybersecurity, IT, system administration, or risk management experience
- Experience in fintech, payment processing, or another highly regulated environment
- Familiarity with PCI-DSS, NIST Cybersecurity Framework, and CIS Benchmarks
- Experience using Jira or similar ticketing and project tracking tools
- Basic scripting knowledge in Python, PowerShell, Bash, or API queries
- CompTIA Security+, Network+, or eJPT certification
What We Do
NorthAB, LLC (North) and its subsidiaries are committed to helping entrepreneurs grow their businesses. As an end-to-end payment solutions company, we provide everything business owners need to get paid, whether they serve customers in a physical storefront, online, or both. We pride ourselves on being large enough to offer customized solutions to our enterprise-level clients while remaining agile enough to take an award-winning, hands-on approach to personal service that our merchants won’t find anywhere else. At North, we point the way to smarter, faster, and just plain better payment solutions. Let’s go North, together!
Why Work With Us
At North, we put a clear focus on team member well-being, both personally and professionally. We offer Flexible PTO and Work by Choice policies (i.e. work remotely, in office, or hybrid) that create the flexibility our team members need to do their best work.
Gallery
