IT Threat and Vulnerability Management Analyst (Hybrid Office Schedule)

AFL manufactures industry-leading fiber optic cable, connectivity and accessories and provides engineering and installation services for some of the largest telecom customers in the world. Our company was founded in 1984 with a single fiber optic cable and today, we manufacture thousands of products, generate an excess of $4B in revenue, and employ approximately 12,000 associates worldwide. At AFL, we recognize that our employees are our greatest asset. We hire and train each individual, investing in them to ensure success in their careers. With a commitment to professional development and growth, let us connect you to your next career opportunity. 

• →Run scheduled discovery, scanning, and assessment cycles across the environment. Maintain scan schedules, credential health, and sensor coverage.
• →Maintain asset coverage and data accuracy. Investigate gaps where systems appear in one data source and not another.
• →Triage findings daily. Rank exposures by exploitability, asset criticality, and network exposure, and reconcile duplicate or conflicting findings before assigning work.
• →Execute attack path validation assessments on defined scopes and schedules. Translate validated attack paths into prioritized remediation work.
• →Confirm exploitability in the AFL environment before escalating severity.
• →Create and track remediation tickets with clear technical guidance for the owning team.
• →Drive remediation to closure. Follow up on aging findings, escalate service level breaches, and verify fixes through retest.
• →Maintain the exception and risk acceptance queue, including expiration tracking and renewal review.
• →Identify recurring exposures and root cause patterns, and raise them for upstream correction.
• →Produce exposure metrics and dashboards for IT leadership and technical teams, and prepare exposure data for audit and compliance requests. 

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity or equivalent work experience. 
• Two or more years in vulnerability management, security operations, systems administration, or IT infrastructure.
• Hands-on use of a vulnerability management or scanning platform.
• Working knowledge of Windows and Linux patching, including how updates deploy and why they fail.
• Understanding of CVSS, and awareness of EPSS and the CISA Known Exploited Vulnerabilities catalog.
• Ability to read a vulnerability finding and explain the actual risk in plain terms.
• Networking fundamentals, including segmentation and firewall rule review.
• Clear written communication and persistence in a matrixed environment.
• Preferred: Horizon3 NodeZero, CrowdStrike Falcon Exposure Management, Tanium, Qualys, Tenable, or Rapid7; scripting or reporting automation in Python, PowerShell, or SQL; ServiceNow; and manufacturing or OT patching experience.
• Certifications in one of the following preferred, but not required:  Security+, GCIH, GFACT, GEVA, or vendor certifications for the deployed security platforms.  

• Follows remediation work to closure across teams outside the security function.
• Separates the findings that matter from the findings that merely score high.
• Builds credibility with systems, network, and application engineers.
• Catches coverage gaps and data discrepancies others overlook.
• Writes remediation guidance an engineer will act on. 

• Hybrid schedule based onsite in Duncan, SC.
• Occasional availability outside standard business hours to support patch windows and production maintenance schedules.
• Standard office environment. Occasional access to manufacturing floors where hearing protection and personal protective equipment are required.
• Flexibility to travel to AFL sites if needed.