Cyber Security Analyst & Vulnerability Management Engineer

Job Title: Cyber Security Analyst & Vulnerability Management Engineer Company: Loenbro, LLC Business Unit/Department: Information Technology (IT) Location: Remote Reports to: Senior Director of Information Security Employment Type: Full-Time FLSA Classification: Exempt About Loenbro Loenbro is a trusted, long-term construction lifecycle partner to thousands of customers across the U.S. Our market spans all industries, and our service offerings include Critical Electrical, Mechanical & Structural, Soft Crafts, Inspection, Underground Maintenance and Installation, and Fabrication. Our expertise lies in simplifying the complex and establishing long-standing relationships with our partners. We have a national presence but a local approach—every customer benefits from our capabilities and our care. At Loenbro, we don’t just offer jobs—we build careers grounded in integrity, teamwork, excellence, and purpose. Join a team where your expertise is valued, your growth is supported, and your work helps maintain and enhance the critical infrastructure that powers communities across the nation. Job Summary The Cyber Security Analyst & Vulnerability Management Engineer is responsible for overseeing the organization's vulnerability management program, supporting security operations, managing cybersecurity aspects of change management processes, and responding to Managed Detection and Response (MDR) security events. This role serves as a critical liaison between Information Security, IT Operations, Infrastructure, Application Teams, and Business Stakeholders to ensure security risks are identified, communicated, prioritized, and remediated in a timely manner. The ideal candidate possesses strong analytical and technical skills with extensive experience in vulnerability assessment tools, endpoint detection and response platforms, threat monitoring, risk management, and security governance processes. This individual will own the full vulnerability management lifecycle while supporting incident investigation, remediation coordination, and security review of organizational changes. Essential Job Responsibilities Vulnerability Management Serve as the primary owner of the enterprise Vulnerability Management Program. Administer and maintain Tenable vulnerability management platforms. Conduct regular vulnerability assessments across servers, workstations, cloud services, applications, and network infrastructure. Analyze vulnerability scan results and determine business risk, exploitability, and remediation priorities. Establish and maintain vulnerability remediation timelines based on risk severity and organizational requirements. Coordinate remediation efforts with infrastructure, application, cloud, and operations teams. Validate remediation activities and perform rescanning to confirm closure. Develop vulnerability metrics, dashboards, KPIs, and executive reporting. Track vulnerability trends and identify recurring weaknesses requiring strategic improvement. Manage vulnerability exception and risk acceptance processes. Support internal and external audits related to vulnerability management and remediation activities. Security Operations & MDR Response Monitor and respond to Managed Detection and Response (MDR) alerts and findings. Investigate security incidents identified through MDR services, Threat Intelligence feeds, and internal monitoring systems. Coordinate containment, eradication, and recovery activities when cybersecurity incidents occur. Perform triage and analysis of suspicious activity, malware events, unauthorized access attempts, and security anomalies. Document investigations, findings, root cause analysis, and corrective actions. Collaborate with MDR providers to improve detection capabilities and response procedures. Assist in maintaining incident response documentation, playbooks, and escalation procedures. Participate in after-action reviews and lessons learned activities. Change Management & Security Governance Review, evalua…