Vulnerability Management Security Analyst

Administer Qualys and strengthen Harbor’s security posture as a fully remote Security Analyst supporting Canada or the Philippines during United States EST hours.

Harbor’s internal IT Operations team needs a Security Analyst with four or more years in information security, cybersecurity, or related work. The position emphasizes vulnerability management, third-party risk management, and client-facing security assurance. You will analyze scan results, coordinate remediation, manage vendor reviews, and answer security questionnaires. Familiarity with network security, risk principles, and frameworks including SOC 2 or ISO 27001 supports the work.

Key Responsibilities:

• Operate Qualys across infrastructure, endpoints, and cloud environments
• Prioritize vulnerabilities and coordinate remediation with technical teams
• Track remediation and produce leadership dashboards and metrics
• Manage vendor assessments, reviews, and risk inventory
• Respond to client questionnaires, RFPs, and due diligence requests

Requirements:

• Four or more years in information security or related work
• Hands-on vulnerability management experience, preferably with Qualys
• Experience answering client security questionnaires or audit requests
• Foundational knowledge of firewalls, SIEM, IDS/IPS, and endpoint protection
• Familiarity with third-party risk management principles

Apply vulnerability analysis, remediation tracking, and security assurance expertise to strengthen Harbor’s internal security operations and governance.