Cloud Vulnerability Management Analyst

About the role

Rockwell Automation is seeking a Cloud Vulnerability Management Analyst to join its growing team in North America. The analyst reports to the manager of the Attack Surface Reduction team and works within the CISO organization, which protects the company's security across cloud and on-premise networks. The role involves identifying vulnerabilities, assessing vendor and third-party security advisories and advising system owners on patching and mitigation.

Key responsibilities

• Stay up to date on vulnerabilities that could affect Rockwell Automation systems
• Triage vulnerabilities by criticality
• Research, identify, assess and prioritize vendor and third-party security advisories
• Advise system owners on completing patching and mitigation activities
• Help identify areas to improve security posture following security incidents
• Contribute to the development of the vulnerability management process
• Carry out remediation activities with company partners
• Develop, research and maintain proficiency in vulnerability analysis tools, techniques and trends
• Identify root causes of cybersecurity incidents and build statistical methods to display cybersecurity risk
• Hunt for new vulnerabilities and perform security penetration tests on networks, web applications and computer systems
• Create findings and reports for application owners and management, and consult them on remediation best practices

Required profile

• Bachelor's degree in Computing Systems, Informatics or a related field
• At least 5 years of related experience
• Professional fluency in English
• Ability to manage dynamic, matrix-style relationships with people at different levels of the company

What we offer

• Comprehensive mindfulness programs with a premium membership to Calm
• Paid volunteer time off after 6 months of employment for eligible employees
• Volunteer and donation matching program
• Employee Assistance Program
• On-demand digital course library for professional development
• Hybrid work: at least three days per week in the office unless there is a business reason to be out