Vulnerability Management Security Analyst - University of Notre Dame

At the University of Notre Dame, protecting our digital environment and safeguarding our community's data is vital to ensuring the University remains a force for good in the world. To that end, the Office of Information Technology (OIT) is seeking a collaborative and analytical Vulnerability Management Security Analyst to join our information security team.

This position plays a key role in helping OIT and campus technology teams identify, understand, prioritize, and remediate vulnerabilities across endpoint, server, network, identity, cloud, SaaS, application, and third-party environments. The Vulnerability Management Security Analyst supports recurring vulnerability scanning, validates findings, manages security exceptions, and provides actionable remediation guidance to system owners. In addition to day-to-day operations, this role will directly contribute to maturing Notre Dame’s security capabilities by improving automation, dashboards, metrics, and workflows.

What You'll Do

Support the vulnerability management lifecycle through routine scanning, analysis, and validation of security findings.

Prioritize vulnerabilities based on exploitability, exposure, asset criticality, and data sensitivity.

Partner with system owners and distributed IT units to coordinate and track remediation progress.

Monitor, triage, and escalate security events across SIEM, EDR, email, and cloud platforms.

Assist with incident response by gathering evidence, documenting timelines, and recommending containment.

Maintain and tune security tools, dashboards, and automated ticketing workflows.

Contribute to broader security initiatives such as cloud security, identity protection, and risk reviews.

Minimum Qualifications:

Bachelor’s degree in Computer Science, Information Technology, Information Security, or a related field, OR an equivalent combination of education and professional experience.

Working knowledge of cybersecurity operations, vulnerability management, incident response, security monitoring, enterprise technology, and IT risk management principles.

Knowledge of vulnerability management practices, including scanning, validation, risk-based prioritization, remediation tracking, exceptions, compensating controls, and remediation verification.

Ability to evaluate vulnerability findings, alerts, logs, endpoint telemetry, network activity, cloud events, and authentication patterns to identify risk and recommend action.

Strong analytical, problem-solving, documentation, communication, security administration, and stakeholder coordination skills.

Ability to work in the United States, now or in the future, without visa sponsorship.

Preferred Qualifications:

Experience in higher education or another complex, decentralized organization.