3M is seeking a skilled and motivated security analyst to join our Enterprise Vulnerability Management team. The successful candidate will leverage enterprise-grade tools to conduct large-scale vulnerability discovery processes, evaluate and mitigate risks, and collaborate with cross-functional teams to enhance our security posture.
Compensation
The expected compensation range for this position is $164,612 - $201,193, which includes base pay plus variable incentive pay, if eligible.
Responsibilities
Execute authenticated and unauthenticated scans on IT, OT, and cloud assets using enterprise-grade tools
Perform triage and validation of vulnerability data to reduce false positives
Analyze vulnerabilities using CVSS, EPSS, threat intelligence, and business impact scoring
Collaborate with asset owners to assess exposure and propose remediation options
Track remediation efforts and engage with system owners to ensure timely patching or mitigation
Requirements
Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or technology field
Support the organization’s Continuous Threat Exposure Management program by identifying, validating, prioritizing, and tracking security exposures across the enterprise.
Responsibilities
Maintain visibility of the enterprise exposure inventory across cloud environments, identities, endpoints, applications, infrastructure, and external attack surfaces.
Perform vulnerability assessments to identify vulnerabilities, security weaknesses, misconfigurations, and other security exposures.
Analyze vulnerability, asset, threat intelligence, attack-path, and configuration data to identify areas of elevated risk.
Prioritize exposures using business risk, exploitability, asset criticality, and threat intelligence to support risk-based decision making.
Validate exposures to determine realistic exploitation potential while following approved and safe assessment practices.
Requirements
Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field, or equivalent practical experience.
Nice to have: Continuous Threat Exposure Management (CTEM) initiatives
Nice to have: cloud-native security tools across Microsoft Azure, Microsoft 365, AWS, or hybrid cloud environments
Accompagner les clients dans la conception d'une démarche de gestion des vulnérabilités de bout en bout, la mise en place et la configuration de solutions VOC, et la recherche de technologies innovantes.
Responsibilities
Réaliser des études techniques et préconiser des choix de solutions en fonction des besoins et contraintes des clients
Valider les architectures et les produits de sécurité en maquettant les solutions et en réalisant des tests de performance et de conformité fonctionnelle
Définir les conditions et les procédures d’intégration technique, et préparer l’industrialisation du développement
Participer aux intégrations et apporter un support aux équipes d’exploitation
Transférer les connaissances auprès des équipes de nos clients
Au sein de l’équipe spécialisée dans les Technologies et Produits de Sécurité, vous accompagnez nos clients dans la conception d'une démarche de gestion des vulnérabilités de bout en bout, la mise en place et la configuration de solutions VOC, et la recherche de technologies innovantes.
Responsibilities
Vous réalisez des études techniques et préconisez des choix de solutions en fonction des besoins et contraintes de nos clients.
Vous validez les architectures et les produits de sécurité en maquettant les solutions et en réalisant des tests de performance et de conformité fonctionnelle.
Vous définissez les conditions et les procédures d’intégration technique, et préparez l’industrialisation du développement.
Vous participez aux intégrations et apportez un support aux équipes d’exploitation.
Vous transférez vos connaissances auprès des équipes de nos clients.
Accompagner les clients dans la conception d'une démarche de gestion des vulnérabilités de bout en bout, la mise en place et la configuration de solutions VOC, et la recherche de technologies innovantes.
Responsibilities
Réaliser des études techniques et préconiser des choix de solutions en fonction des besoins et contraintes des clients
Valider les architectures et les produits de sécurité en maquettant les solutions et en réalisant des tests de performance et de conformité fonctionnelle
Définir les conditions et les procédures d’intégration technique, et préparer l’industrialisation du développement
Participer aux intégrations et apporter un support aux équipes d’exploitation
Transférer les connaissances auprès des équipes des clients
The Threat & Vulnerability Analyst will help Nominet reduce real-world cyber exposure across its critical services, cloud platforms, infrastructure, applications, suppliers and data systems. This is a hands-on analytical role that brings together vulnerability data, threat intelligence, attack-surface context and business criticality to identify what matters most and drive prioritised remediation action.
Responsibilities
Own vulnerability triage and exposure tracking, ensuring material weaknesses are assessed, prioritised and driven through to closure.
Monitor vulnerability data, threat intelligence, vendor advisories and known exploited vulnerabilities to identify emerging risks relevant to Nominet.
Assess exposure across cloud, applications, APIs, endpoints, identities, networks, infrastructure, suppliers and externally exposed services.
Prioritise remediation using exploitability, external exposure, asset criticality, service impact, attacker behaviour and business context.
Work with Technology, Engineering, service owners and suppliers to agree proportionate remediation or mitigation and track actions through to completion.
Lead complex vulnerability assessments and response activities across hybrid infrastructure, endpoints, networks, cloud platforms, containers, data platforms, and externally accessible services.
Locations (2)
Live Oak, Texas, United States
Texas, United States
Responsibilities
Lead complex vulnerability assessments and exposure analysis across hybrid infrastructure, endpoints, networks, cloud platforms, containers, data platforms, and externally accessible services.
Validate and contextualize high-risk findings using exploit intelligence, attack-path analysis, asset criticality, business impact, compensating controls, and hands‑on technical investigation.
Lead organizational response to critical and emerging vulnerabilities, including impact analysis, scoping, stakeholder coordination, remediation strategy, executive updates, and closure assurance.
Drive vulnerability triage, prioritization, exception analysis, remediation planning, escalation, retesting, and risk reporting across multiple technology teams.
Design and maintain production‑quality tooling, integrations, data pipelines, and automation for discovery, enrichment, normalization, deduplication, validation, ticketing, orchestration, and reporting.
Requirements
Bachelor's degree in Computer Science, Management Information Systems, Cybersecurity, Information Technology, or a related field; or equivalent combination of education and experience.
Senior Vulnerability AnalystNewSITA Switzerland Sarl · Amman, Jordan
Maintenance MechanicEncompass Health · Cape Coral, US
IT Vulnerability Engineer IIIRandolph-Brooks Federal Credit Union · Live Oak, US+1 more