Senior Vulnerability Management Security Analyst
Read straight from University of Colorado's careers page, verified 12h ago.Seekless can tailor your résumé to it.
Seekless can write your résumé for this posting first.
Before you apply
Salary$81k – $90k
LocationHybrid – Colorado Mountain Time
Work modehybrid
Typefull-time
SenioritySenior
Experience2–4 yrs
DepartmentInformation Strategy and Services
Company size10,000+ people
First seenOct 30, 2026 · 4d ago
Verified live12h ago
At a glanceSummarised by Seekless from the posting.
Bachelor’s degree in Information Systems, Computer Science, Engineering, Business, Education, or a closely related field (or substitution: 4 years of professional or high-level technical work experience, or associate's degree with 2 years experience)
2-4 years of relevant experience configuring and administering enterprise security vulnerability management tools and conducting cyber threat intelligence
Overseeing security threat and vulnerability management programs
Monitoring IT controls for regulatory and compliance requirements such as: NIST, CIS, SOX, HIPAA, HITRUST, SSAE 16 - SOC 1 & SOC 2, PCI compliance - PCI DSS / PA-DSS
Expert-level proficiency in a variety of vulnerability management technologies and principles
Knowledge of regulatory requirements related to security, privacy, and data protection
Excellent written and verbal communication skills
Strong analytical and problem-solving skills, including interpersonal problem resolution
Exhibits intellectual curiosity and a commitment to continuous professional development
Values collaboration and recognizes the importance of building strong professional relationships
Experience deploying, integrating, and managing Rapid7 InsightVM
Advanced degree in Computer Science, Information Security, or related field
CISSP, GIAC (GSEC, GCIH, GCIA, GPEN) or other technical security certifications
Penetration testing experience
Applicants must be legally authorized to work in the United States without requiring sponsorship
Skills
Rapid7 InsightVM
NIST
CIS
SOX
HIPAA
HITRUST
SSAE 16
SOC 1
SOC 2
PCI DSS
PA-DSS
Benefits
Health insurance
Dental insurance
Life insurance
Vision insurance
Retirement plan
Paid vacation
Paid sick leave
Holiday pay
Tuition reimbursement
Eco pass
University of Colorado Anschutz
Department: Information Strategy and Services
Job Title: Senior Vulnerability Management Security Analyst
Position #: 00800716 – Requisition #: 41571
Job Summary:
Does this describe you? Are you motivated by staying ahead of evolving threats and building smarter, more proactive security practices? Join Information Strategy and Services as our Senior Vulnerability Management Security Analyst, where you will lead and continuously improve the university’s enterprise vulnerability management program. In this role, you’ll apply threat intelligence, influence security-by-design, and lead initiatives that strengthen defenses across a dynamic, enterprise environment. You’ll join a collaborative Security Operations team focused on proactively reducing risk and strengthening the university’s security posture through partnership, innovation, and continuous improvement. This role offers the opportunity to influence enterprise-wide security practices, work across diverse teams, and help protect critical systems that support education, research, and patient care. If you’re passionate about staying ahead of cyber threats and making a meaningful impact, we encourage you to apply! Key Responsibilities: * Lead and oversee the enterprise threat and vulnerability management program, ensuring effective risk reduction across environments. * Evaluate and interpret threat data to assess risk and communicate recommended actions to stakeholders. * Drive remediation efforts by collaborating with IT teams, developers, and system owners. * Design and implement a vulnerability management strategy across on-prem and cloud environments and track program metrics and outcomes. * Collaborate with incident response, vendors, and stakeholders to identify and address emerging threats and vulnerabilities. * Demonstrates a high degree of integrity and ethical conduct and consistently applies secure, responsible practices in professional activities, decision-making, and the use of information and technology. What You’ll Bring: * Expert-level proficiency in a variety of vulnerability management technologies and principles. * Knowledge of regulatory requirements related to security, privacy, and data protection. * Excellent written and verbal communication skills. * Strong analytical and problem-solving skills, including interpersonal problem resolution. * Exhibits intellectual curiosity and a commitment to continuous professional development. * Values collaboration and recognizes the importance of building strong professional relationships.
Work Location:
Hybrid – This position is eligible for a hybrid work environment. AMC ISS strives for a high-flex work environment, meaning although this role may predominately be executed effectively with a remote schedule, there may be instances where in-person meetings and/or activities are needed. There is no minimum or prescribed in-person requirement. The work schedule will be based around core working hours in Colorado Mountain Time.
Why Join Us:
Information Strategy and Services (ISS) partners across the campus to deliver information technology services that empower teaching, learning, research, and patient care. ISS brings together expertise across four key areas: Technology & Infrastructure, Security & Compliance, Information & Data Enablement, and Business Strategy. Together, we [connect service and technology](https://nam02.safelinks.protection.outlook.com/?url=https://www.cuanschutz.edu/offices/iss/about-us&data=05
Qualifications:
Minimum Qualifications: Education: * Bachelor’s degree in Information Systems, Computer Science, Engineering, Business, Education, or a closely related field + Substitution: 4 years of professional or high-level technical work experience may be substituted for the bachelor’s degree. An associate’s degree with two years of relevant work experience may be substituted for the bachelor’s degree Experience: * 2-4 years of relevant experience configuring and administering enterprise security vulnerability management tools and conducting cyber threat intelligence. Experience must include: * Overseeing security threat and vulnerability management programs. * Monitoring IT controls for regulatory and compliance requirements such as: NIST, CIS, SOX, HIPAA, HITRUST, SSAE 16 - SOC 1 & SOC 2, PCI compliance - PCI DSS / PA-DSS. Applicants must meet minimum qualifications at the time of hire. Preferred Qualifications: * Experience deploying, integrating, and managing Rapid7 InsightVM. * Advanced degree in Computer Science, Information Security, or related field. * CISSP, GIAC (GSEC, GCIH, GCIA, GPEN) or other technical security certifications. * Penetration testing experience Conditions of Employment: * Applicants must be legally authorized to work in the United States without requiring sponsorship. We are unable to provide work visa sponsorship or employment authorization for this position now or in the future. Knowledge, Skills and Abilities: * Expert-level proficiency in a variety of vulnerability management technologies and principles. * Knowledge of regulatory requirements related to security, privacy, and data protection. * Excellent written and verbal communication skills. * Strong analytical and problem-solving skills, including interpersonal problem resolution. * Exhibits intellectual curiosity and a commitment to continuous professional development. * Values collaboration and recognizes the importance of building strong professional relationships. * Demonstrates initiative and a proactive approach to workload management. * Works collaboratively with stakeholders to develop solutions that meet defined requirements and desired outcomes. * Curiosity, motivation, and a desire for continuous learning. * A belief that strong relationships are key to success. * A self-starter with a can-do attitude. * An effective servant leader and manager of people who begins interactions by listening. * A collaborator with a focus on providing solutions based on the requirements and necessary outcomes of those whom we serve. * Demonstrates a high degree of integrity and ethical conduct and consistently applies secure, responsible practices in professional activities, decision-making, and the use of information and technology.
How to Apply:
We value the thoughts you put into a Cover Letter and would like to see your Resume, and List of References. For full consideration, please submit the following document(s): 1. A letter of interest describing relevant job experiences as they relate to listed job qualifications and interest in the position 2. Resume 3. Three to five professional references, including name, address, phone number (mobile number if appropriate), and email address Questions should be directed to: ISS Human Resources [email protected]
Screening of Applications Begins:
Immediately and continues until position is filled. For best consideration, apply by 11/15/2026.
Anticipated Pay Range:
The starting salary range (or hiring range) for this position has been established as $81,050 - $90,000. The above salary range (or hiring range) represents the University’s good faith and reasonable estimate of the range of possible compensation at the time of posting. This position may be eligible for overtime compensation, depending on the level. Your total compensation goes beyond the number on your paycheck. The University of Colorado provides generous leave, health plans and retirement contributions that add to your bottom line. Total Compensation Calculator
Equal Employment Opportunity Statement:
CU is an Equal Opportunity Employer and complies with all applicable federal, state, and local laws governing nondiscrimination in employment. We are committed to creating a workplace where all individuals are treated with respect and dignity, and we encourage individuals from all backgrounds to apply, including protected veterans and individuals with disabilities.
ADA Statement:
The University will provide reasonable accommodations to applicants with disabilities throughout the employment application process. To request an accommodation pursuant to the Americans with Disabilities Act, please contact the Human Resources ADA Coordinator at [email protected].
Background Check Statement:
The University of Colorado Anschutz is dedicated to ensuring a safe and secure environment for our faculty, staff, students and visitors. To assist in achieving that goal, we conduct background investigations for all prospective employees.
Vaccination Statement:
CU Anschutz strongly encourages vaccination against the COVID-19 virus and other vaccine preventable diseases. If you work, visit, or volunteer in healthcare facilities or clinics operated by our affiliated hospital or clinical partners or by CU Anschutz, you will be required to comply with the vaccination and medical surveillance policies of the facilities or clinics where you work, visit, or volunteer, respectively. In addition, if you work in certain research areas or perform certain safety sensitive job duties, you must enroll in the occupational health medical surveillance program.