Information Security Analyst

Flexera saves customers billions of dollars in wasted technology spend. A pioneer in Hybrid ITAM and FinOps, Flexera provides award-winning, data-oriented SaaS solutions for technology value optimization (TVO), enabling IT, finance, procurement and cloud teams to gain deep insights into cost optimization, compliance and risks for each business service. Flexera One solutions are built on a set of definitive customer, supplier and industry data, powered by our Technology Intelligence Platform, that enables organizations to visualize their Enterprise Technology Blueprint™ in hybrid environments—from on-premises to SaaS to containers to cloud.

We’re transforming the software industry.  We’re Flexera.  Withmore than 50,000 customersacross the world, we’re achievingthat goal.Butwe knowwe can’t do any of that without our team. Ready to help us re-imagine the industry during a time of substantial growth and ambitious plans?  Come and see whywe’re consistently recognized by Gartner, Forrester and IDCas a category leader in the marketplace. Learn more atflexera.com

The Security Specialist at Flexera are respected for their sense of detail and quality; they turn every stone on their quest to verify and assess reported vulnerabilities and to ensure that customers receive the most accurate vulnerability intelligence from Flexera.

If you have a passion for security, vulnerabilities, and exploits, then you may just be the candidate we are looking for.

Being part of the Secunia Research department at Flexera is not going to be easy, in fact it is going to be very challenging career opportunity. The art of vulnerability analysis and research has only become harder to master in recent years because software producers are building more security into their products.

Additionally, the Secunia Research department is frequently involved and consulted when it comes to potential vulnerability reports against Flexera’s products. In a capacity aiding Flexera’s PSIRT (Product Security Incident Response Team), we frequently support the PSIRT with the analysis of potential vulnerabilities, suggesting prioritization, working with Engineers on potential solutions, and guide communication.

Responsibilities:

• Filter incoming data gathered by the Secunia Research departments’ robots with respect to eligibility of vulnerability information contained and in conjunction with the products our customers are interested in.

• Conduct research, investigate and collect data on software and hardware products from various sources and curate the data into our database.

• Analyze and verify the filtered vulnerability data in the context of various products like Web Applications, Open Source, Binary Applications and Embedded devices.

• Aggregate such vulnerability data in conjunction with data representing third-party product context.

• Capabilities to adapt the analysis process depending on each context and to articulate the analysis and its decision gates towards Secunia Research’s team members.

• Write up Secunia Research content based on that aggregation – such advisories written by the Secunia Research team follows a very specific template, where information learned during the analysis is inputted into the advisory in a structured form. Success measurement is the number of mistakes made, like e.g., grammatical errors, spelling mistakes, factual errors, or a faulty analysis.

• Quality ensure Secunia Research content produced by other team members and perform effective, non-biased communication to resolve potential issues discovered.

• Ensure that Secunia Research stays true to its “no mistakes” mantra.

Required:

• Passionate about data analysis, aggregation, and quality.

• Security awareness and security interest when it comes to analyzing vulnerability data and security best practices in products.

• Being mindful about customer focus, to ensure that customers are adequately warned.

• Prioritization skills to ensure that vulnerabilities get processed with importance in mind, e.g., 0-days (Zero Days) being handled more quickly.

• Strong research skills, able to investigate, locate, and collect specific information quickly and accurately.

• Strong reading comprehension skills, able to understand information found on web pages, product documentation, technical and marketing articles and extract specific content quickly and accurately. Find inconsistencies in such documentation and resolve the inconsistencies respective provide a path to their resolve.

• Determined and persistent self-starter in the quest to find the highest quality content, identify and solve content related problems.

Preferred:

• Some basic programming language experience can help to assess data and refine more efficient ways of processing data (e.g., Python).

• Some interest in vulnerability research.

#LI-SA1

#LI-Development

#LI-Remote