Threat Vulnerability AI Analyst

Responsibilities

• Run external/internal vulnerability and application/software scans; analyze, deduplicate, and publish prioritized remediation backlogs.
• Correlate findings with threat intelligence, KEV/exploit data, and asset criticality; track SLAs and risk reduction.
• Coordinate fixes with Infra/Identity/App teams; validate remediation, capture evidence, and report on closure.
• Support formal penetration tests and external posture monitoring (e.g., BitSight); manage findings through closure.
• Design, build, and operate AI-driven workflows (Claude and/or ChatGPT) that automate recurring work across security operations, identity, GRC, and reporting — prioritized by the Sr. Director.
• Translate leadership priorities into production automations: report generation, evidence collection, alert summarization, audit prep, vuln triage drafting, ticket workflow assistance.
• Maintain human-in-the-loop governance and audit trails for all AI outputs; document prompts, approvals, and edge cases.
• Continuously benchmark AI tooling effectiveness; report time saved, accuracy, and adoption across the department.
• Participate in an on-call rotation.

Requirements

• 3+ years in vulnerability management, threat intel, or security operations; experience with enterprise scanners and CVSS/KEV workflows.
• AI Fluency
• Hands‑on experience using Claude and/or ChatGPT to automate security or IT work; effective prompt design, structured outputs, and HITL controls.
• Scripting/automation skills; comfort with REST APIs, JSON, and integration patterns across SaaS tools.
• Strong judgment on when human review is required vs. when automation is safe to run; clear documentation and stakeholder coordination skills.

Core Competencies

Demonstrates expertise in vulnerability management and threat intelligence, with a strong focus on automating security operations using AI tools like Claude and ChatGPT. Proficient in scripting and integration patterns to enhance operational efficiency and ensure effective governance.