Bachelor's degree in IT Security or related field, or equivalent experience
5+ years of experience in Information Security or Vulnerability Management
Technical expertise in vulnerability management and security operations technologies
CISSP certification or ability to attain within 6 months
Excellent communication skills for technical and executive audiences
Strong analytical and troubleshooting skills
Responsibilities
Investigate and coordinate remediation of security vulnerabilities across various environments
Lead incident response efforts and communicate updates to executive leadership
Present security risks and mitigation strategies to both technical and non-technical stakeholders
Analyze vulnerability scan results to identify risks and provide remediation guidance
Enhance security platforms to align with evolving threats and business needs
Document security processes including compliance monitoring and risk assessments
Coordinate application and enterprise vulnerability testing and initiate remediation processes
Benefits
Medical, dental, vision, long-term disability, and life insurance
401(k) matching
Generous holiday and paid time off schedule
Tuition reimbursement
Extensive health and wellness programs, including Employee Assistance Program
Referral bonus program
Full Job Description
Job Description
Who you are:
As an Information Security Analyst III - Vulnerability Management, you are our security champion. In this role, you'll keep Frost data and IT Systems secure by analyzing and responding to IT security alerts. You will coordinate applications and enterprise vulnerability and penetration tests. You will also be responsible for performing and monitoring security processes across the organization. You believe in servant leadership and will provide technical expertise to the IT Security team.
What you'll do:
Investigate, assess, and coordinate remediations of security vulnerabilities across enterprise infrastructure, cloud environments, applications, and supporting technologies
Effectively communicate while leading incident response efforts, engaging executive and board-level leadership with clear, concise, and strategic updates
Demonstrate effective presentation skills by clearly articulating security risks, vulnerability impacts, and mitigation strategies to both technical and non-technical stakeholders, ensuring alignment with business objectives
Analyze vulnerability scan results and related security data to identify risks, validate findings, investigate false positives, and provide remediation guidance
Maintain and continuously enhance security platforms and solutions to improve effectiveness, resilience, and alignment with evolving threats and business needs
Perform and document security processes including vulnerability detection, remediation tracking, exception management, compliance monitoring, and risk assessments
Coordinate and perform application and enterprise vulnerability and penetration testing, analyze the results, and initiate remediation processes
Partner with technology teams to investigate complex vulnerabilities, validate remediation activities, troubleshoot findings, and reduce organizational risk
Design, configure, test, implement, maintain, and document detection, prevention, and response processes in alignment with regulatory and compliance requirements
Maintain a current and high level of knowledge of cyber security threats and vulnerabilities, industry and regulatory standards, and market innovations
Evaluate new security technologies to identify potential business value
Represent the IT Security department on interdepartmental projects and collaborative efforts
Always take action using Integrity, Caring, and Excellence to achieve all-win outcomes
What you'll need:
Bachelor's degree in IT Security, a related field, or equivalent experience
5+ years of experience in Information Security, Vulnerability Management, or a related technical discipline
Excellent written and verbal communication skills, including the ability to present technical risks and recommendations to both technical and executive audiences
Strong analytical and troubleshooting skills with experience validating vulnerability findings, identifying false positives, coordinating remediation efforts, and driving issues through resolution
Additional Preferred Skills:
Experience with ticketing platforms, Tenable, Qualys, Rapid7, or similar vulnerability management platforms
Experience evaluating zero-day vulnerabilities and emerging threats.
Security+ certification, GSEC certification, or other industry-recognized cybersecurity certifications
Experience developing vulnerability metrics, dashboards, and executive reporting
Our Benefits:
At Frost, we care about your health, your family, and your future and strive to have our benefits reflect that. This includes:
Medical, dental, vision, long-term disability, and life insurance
401(k) matching
Generous holiday and paid time off schedule
Tuition reimbursement
Extensive health and wellness programs, including our Employee Assistance Program
Referral bonus program + more!
About Frost Bank
Frost Bank is a subsidiary of Cullen/Frost Bankers, Inc., a financial holding company, headquartered in San Antonio, Texas. The company provides a wide range of banking, investments, and insurance services to businesses and individuals in Texas. Frost Bank has over 130 branches across Texas and offers online banking services to its customers. The bank was founded in 1868 by Thomas Claiborne Frost and has been serving Texans for over 150 years.
