Vulnerability Management Analyst

Location 325 Georgian PL,Somerset, PA, 15501,United States

Job Category Banking, Finance, Information Systems

Employee Type Non Exempt FT

Required Degree 4 Year Degree

Manage Others No

Summary As part of the Somerset Trust Team, it is the expectation that all employees provide exceptional customer service to both internal and external customers, foster positive, respectful collaboration with colleagues across the organization, and uphold the values of the company (Service, Fairness, Honesty).

The Vulnerability Management Analyst is primarily responsible for identifying, assessing, and mitigating security vulnerabilities within Somerset Trust computer networks, servers and software.

Essential Duties and Responsibilities Maintain cybersecurity by ensuring systems are patched and configured securely.

Analyze vulnerabilities to determine potential impact and required remediation.

Collaborate with teams to prioritize and remediate risk.

Monitor systems during remediation efforts to confirm stability, performance and successful implementation of patch or configuration changes.

Prepare reports for management on open vulnerabilities and status of remediations.

Assist the IT Security Office in the use of the following systems SIEM and log management system

Vulnerability scanning software

Be observant and proactive throughout your duties and daily activity to identify and report appropriate issues to your supervisor and management.

Assist in IS Help Desk operation as the appropriate level of expertise is required.

Provide after-hour support to the end user.

Understand and support all BSA/AML responsibilities as applicable to the position as well as consistently, accurately, and timely carry out these responsibilities in compliance with the Bank’s internal policies.

Performs additional tasks within the IT Department as requested.

Education and/or Experience Bachelor’s degree (B.A.) from a four-year college or university; or one to two years’ related experience and/or training; or equivalent combination of education and experience.

TECHNICAL SKILLS In-depth understanding of security frameworks, risk assessment, vulnerability management tools, operating systems, networking, Active Directory, application security

PHYSCIAL DEMANDS While performing the duties of this job, the employee is required to use hands and fingers to operate office equipment, telephones, etc.

The employee must occasionally lift and/or move up to 25 pounds

Specific vision abilities required by this job include close vision, and ability to adjust focus

WORK ENVIRONMENT The noise level in the work environment is usually moderate.

BENEFITS AND ADDITIONAL INFORMATION Bank wide bonus, 401(k), ESOP, Medical, Dental & Vision insurance, Health Savings Account, Life Insurance, Paid Holidays, PTO, and Paid Volunteer Time.

Work Schedule is Monday through Friday (with rotating on call)

Full-time 37.5 – 40 hours per week

This job description is not designed as a comprehensive list of activities, duties, and/or responsibilities and may change at any time with or without notice. The duties and qualifications stated within this job description are representative of the knowledge, skill, and/or ability required for this position.

Somerset Trust Company is an Equal Opportunity Employer, including disability and protected veteran status. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position.

#J-18808-Ljbffr