The Senior Security Analyst will strengthen P&G’s cybersecurity posture through vulnerability assessment and risk prioritization across enterprise assets. The role integrates threat intelligence and develops automated detection, reporting, and remediation workflows, using scripting technologies such as Python, Bash, or PowerShell.
Bachelor’s degree or above in Computer Science, Cyber Security, or a related field, or equivalent practical experience.
3+ years of experience in cyber defense, with an emphasis on vulnerability management, threat intelligence, incident response, or offensive security.
Experience in a vulnerability management role or cyber defense team, including understanding of the vulnerability management lifecycle and relevant frameworks.
Ability to correlate threat intelligence with vulnerability, asset management, network, and incident data to prioritize risks.
Ability to communicate technical information to technical and non-technical audiences, including executive stakeholders.
Proficiency in scripting with Python, Bash, PowerShell, or an equivalent, and experience with API integration, automation, and security tools.
Ability to work with groups such as SOC analysts, application owners, patching teams, and security leaders to mitigate security threats.
Deep technical knowledge of vulnerability analysis, including analysis of exploit code and proposing countermeasures and mitigation strategies.
Ability to model vulnerability data and build workflows in a vulnerability management platform.
Ability to set up or troubleshoot vulnerability scans for networks and endpoints, and optionally Cloud and SAP.
Knowledge of network security (IPS/IDS), security protocols, operating systems (Windows, Unix, Linux), and log analysis and correlation.
Solid understanding of the security threat landscape.
Proactive Vulnerability Assessment:
Assess vulnerabilities across endpoints, servers, networks, and cloud assets.
Use tools and techniques to identify weaknesses before they can be exploited.
Continuous Threat and Vulnerability Monitoring:
Implement processes to monitor vulnerabilities and threats in real time using threat intelligence feeds and automated tools.
Automation and Orchestration:
Develop and enhance automated vulnerability detection, reporting, and remediation workflows.
Collaborate with cross-functional teams to streamline processes that reduce the attack surface.
Collaborative Remediation Management:
Work with security, infrastructure, and development teams to validate findings, provide risk context, and support coordinated remediation.
Track and report remediation progress.
Threat Intelligence Integration:
Work with Threat Intelligence and Threat Hunting teams to incorporate actionable insights into vulnerability assessments.
Use threat intelligence to inform vulnerability management strategies and decisions.
Stakeholder Communication and Reporting:
Develop and present actionable reports on vulnerability posture and risk management to technical and non-technical stakeholders, including executive leadership.
Tool and Process Optimization:
Assess and improve internal tools and processes for tracking threats, exposures, and mitigation activities.
Keep up with industry practices and emerging technologies to enhance operational efficiency.
Ongoing Professional Development:
Maintain current knowledge of global threat trends, security advisories, and zero-day vulnerabilities.
Engage in learning opportunities related to vulnerability management frameworks, solutions, and emerging security practices.
Leadership and Mentorship:
Guide and mentor junior analysts and team members.
Ongoing coaching and mentoring from the line manager and colleagues.
Corporate and functional training.
Industry certifications, including ITIL, DevOps, and the MS portfolio.
Private health care, sport cards, and access to an in-office fitness center.
P&G stock options and saving plans.
Lunch subsidy, regular salary increases, and possible promotions.
