UL Solutions is a global leader in applied safety science, transforming safety, security, and sustainability challenges into opportunities. The Global Cybersecurity Assurance Analyst will be responsible for identifying and assessing vulnerabilities in the organization's systems, conducting vulnerability scans, coordinating penetration tests, and providing recommendations for remediation.

Responsibilities

• Perform vulnerability assessments and scans on systems, networks, and applications using automated tools and manual techniques
• Identify and evaluate vulnerabilities, misconfigurations, and security weaknesses in hardware, software, and network infrastructure
• Analyze vulnerability scan results and prioritize vulnerabilities based on severity, potential impact, and exploitability
• Coordinate and conduct penetration tests to identify security weaknesses and validate the effectiveness of existing controls
• Utilize a combination of manual testing techniques and automated tools to simulate real-world attacks and exploit vulnerabilities
• Collaborate with stakeholders to define the scope and objectives of penetration tests and ensure adherence to ethical hacking guidelines
• Provide detailed recommendations and guidance to IT teams and system administrators on remediation strategies for identified vulnerabilities
• Collaborate with stakeholders to develop and implement effective patch management processes, security configurations, and secure coding practices
• Track and monitor the progress of vulnerability remediation efforts and verify the successful resolution of identified vulnerabilities
• Stay updated on the latest vulnerabilities, exploits, and emerging threat trends through research, security advisories, and vulnerability databases
• Conduct vulnerability research and analysis to understand the impact and potential risks associated with newly discovered vulnerabilities
• Leverage threat intelligence insights to enhance vulnerability management processes and prioritize remediation efforts
• Prepare clear and concise vulnerability assessment reports, penetration test reports, and risk assessments for management and stakeholders
• Document findings, methodologies, and recommended actions to address identified vulnerabilities
• Maintain accurate and up-to-date documentation of vulnerability management processes, procedures, and remediation activities
• Collaborate with IT teams, system owners, and other stakeholders to ensure effective vulnerability management and remediation practices
• Communicate technical vulnerabilities, risks, and mitigation strategies to non-technical stakeholders in a clear and understandable manner
• Provide guidance and support to internal teams on vulnerability management best practices and security controls

Skills

• Bachelor's degree in cybersecurity or related field
• Read and follow the Underwriters Laboratories Code of Conduct and follow all physical and digital security practices
• Experience working with vulnerability management and penetration testing tools
• Exposure to Red Team/Blue Team activities
• 1-2 years' experience in cybersecurity or related field
• Relevant security certifications preferred

Benefits

• This position is eligible for annual bonus compensation with a target payout of 10% of the base salary.
• This position also provides health benefits such as medical, dental and vision
• Wellness benefits such as mental and financial health
• Retirement savings (401K) commensurate with the standard rewards offered in each individual location or country.
• We also provide full-time employees with paid time off including vacation (15 days), holiday including floating holidays (12 days) and sick time off (72 hours).

Company Overview