Global Cybersecurity Assurance Analyst at UL Solutions · 333…

Summary: UL Solutions is a global leader in applied safety science, providing testing, inspection, and certification services. The Global Cybersecurity Assurance Analyst will be responsible for identifying and assessing vulnerabilities in the organization's systems, conducting vulnerability scans, and coordinating penetration tests to enhance security measures. Responsibilities: - Perform vulnerability assessments and scans on systems, networks, and applications using automated tools and manual techniques - Identify and evaluate vulnerabilities, misconfigurations, and security weaknesses in hardware, software, and network infrastructure - Analyze vulnerability scan results and prioritize vulnerabilities based on severity, potential impact, and exploitability - Coordinate and conduct penetration tests to identify security weaknesses and validate the effectiveness of existing controls - Utilize a combination of manual testing techniques and automated tools to simulate real-world attacks and exploit vulnerabilities - Collaborate with stakeholders to define the scope and objectives of penetration tests and ensure adherence to ethical hacking guidelines - Provide detailed recommendations and guidance to IT teams and system administrators on remediation strategies for identified vulnerabilities - Collaborate with stakeholders to develop and implement effective patch management processes, security configurations, and secure coding practices - Track and monitor the progress of vulnerability remediation efforts and verify the successful resolution of identified vulnerabilities - Stay updated on the latest vulnerabilities, exploits, and emerging threat trends through research, security advisories, and vulnerability databases - Conduct vulnerability research and analysis to understand the impact and potential risks associated with newly discovered vulnerabilities - Leverage threat intelligence insights to enhance vulnerability management processes and prioritize remediation efforts - Prepare clear and concise vulnerability assessment reports, penetration test reports, and risk assessments for management and stakeholders - Document findings, methodologies, and recommended actions to address identified vulnerabilities - Maintain accurate and up-to-date documentation of vulnerability management processes, procedures, and remediation activities - Collaborate with IT teams, system owners, and other stakeholders to ensure effective vulnerability management and remediation practices - Communicate technical vulnerabilities, risks, and mitigation strategies to non-technical stakeholders in a clear and understandable manner - Provide guidance and support to internal teams on vulnerability management best practices and security controls Required Qualifications: - Bachelor's degree in cybersecurity or related field - Read and follow the Underwriters Laboratories Code of Conduct and follow all physical and digital security practices - Experience working with vulnerability management and penetration testing tools - Exposure to Red Team/Blue Team activities - 1-2 years' experience in cybersecurity or related field Preferred Qualifications: - Relevant security certifications preferred Required Skills: Vulnerability management, Penetration testing, Cybersecurity experience Important Skills: Red Team/Blue Team, Security certifications Benefits: Annual bonus compensation with a target payout of 10% of the base salary, Health benefits such as medical, dental and vision, Wellness benefits such as mental and financial health, Retirement savings (401K), Paid time off including vacation (15 days), Holiday including floating holidays (12 days), Sick time off (72 hours)