Find Jobs
Find Jobs Near You – Available Work in Your Location
Engineer
Career Insights for Vulnerability Analyst / Penetration Tester
See where this job fits in the broader career landscape. Knowing your career path helps you see what's possible from here.
Scorecard
Based on Delaware data
Review key factors to help you decide if this role fits your goals. How is this calculated?
What they do
A Vulnerability Analyst or Penetration Tester probes for and exploits security vulnerabilities in web-based applications, networks and systems. Penetration Tests are designed to achieve a specific, attacker-simulated goal and should be requested by customers who are already at their desired security posture. A typical goal could be to access the contents of the prized customer database on the internal network, or to modify a record in an HR system. Vulnerability Assessments are designed to yield a prioritized list of vulnerabilities and are generally for clients who already understand they are not where they want to be in terms of security. The customer already knows they have issues and simply need help identifying and prioritizing them.
$123,817 / year median in Delaware
+3% projected growth
Job Description
- Manage the vulnerability remediation lifecycle, ensuring timely patching and mitigation across servers, applications, databases, and endpoints.
- Analyze vulnerability scan results, prioritize remediation based on risk, and track fixes through closure.
- Collaborate on patch deployments, addressing failures, system dependencies, and post-deployment validation. Security Risk & Incident Support
- Partner with engineering, infrastructure, and application teams to identify and mitigate security risks.
- Conduct root cause analysis (RCA) for security incidents and recurring vulnerabilities, driving permanent fixes.
- Assist in security incident response activities and remediation recommendations as needed. Automation & Process Improvement
- Identify opportunities to automate repetitive security and operational processes, improving efficiency and consistency.
- Support continuous improvement of remediation workflows, escalation processes, and SLAs. Metrics, Reporting & Governance
- Maintain vulnerability metrics, dashboards, and reports to track remediation status, aging vulnerabilities, and compliance.
- Provide regular status updates to security leadership and technology stakeholders.
- Support audit, risk, and compliance activities related to vulnerability management. Collaboration & Communication
- Act as a liaison between security and technology teams to ensure smooth remediation execution.
- Clearly communicate technical risks, remediation plans, and timelines to diverse stakeholders. Required Qualifications
- 4-10 years of experience in Information Security, Cybersecurity, or IT Risk Management.
- Hands-on experience with vulnerability management tools (e.g., Qualys, Tenable, Rapid7).
- Strong understanding of patch management processes across Windows, Linux, and application environments.
- Experience performing root cause analysis and implementing corrective actions.
- Strong analytical, problem-solving, and documentation skills.