Morgan Stanley
Vulnerability Management Operations Analyst
$95K–$130K
Alpharetta, Georgia · On-site · Full-time · Posted Sep 28, 2026
- Experience
- 3 -5 years of experience in vulnerability, technology security operations, or related SRE functions.
About the job
Supports vulnerability management operations by triaging findings, coordinating remediation, tracking SLAs, and improving the VM platform and processes.
What you'll do
- Triage vulnerability findings, manage cases, communicate status, guide system owners, and track remediation SLAs.
- Improve VM platforms and processes; coordinate bug fixes and test them in QA.
- Explain VM processes and tools, provide basic reporting guidance, and participate in on-call zero-day response.
What they ask for
- Knowledge of vulnerability management or cybersecurity, including interpreting CVSS / EPSS / exploitability ratings and threats.
- Ability to learn OS/app patching ecosystems and basic on-premises and cloud infrastructure.
- Basic understanding of SDLC, CI/CD, IT Asset Management, and third-party software supply chains.
- Ability to communicate effectively across technical and non-technical audiences and manage competing priorities.
Nice to have
- Prior experience with commercial Vulnerability Management scanning tools or adjacent Observability Management or Endpoint Security tools; experience with Spunk and/or Grafana.
- Ability to write scripts in Python or PowerShell and/or leverage Agentic coding capabilities; basic understanding of emerging LLM/AI cyber threats.
Pay
$95,0000 and $130,000 per year (base pay)
Tools
CVSS, EPSS, SDLC, CI/CD, Spunk, Grafana, Python, PowerShell
AI focus
Basic understanding of emerging LLM/AI cyber threats; scripting with Python or PowerShell and/or leveraging Agentic coding capabilities.
Model-written summary · the original posting is authoritative