Vulnerability Management Analyst (Tenable & Qualys)

RAFAEL COIMBRA

Bethlehem, PA ***** • 484-***-**** • **************@*****.***

linkedin.com/in/rafael-coimbra-63149473

VULNERABILITY MANAGEMENT ANALYST

Vulnerability Assessment & Remediation Tenable & Qualys Risk-Based Prioritization TS/SCI PROFESSIONAL SUMMARY

Vulnerability Management Analyst with 4+ years of cybersecurity experience specializing in vulnerability assessment, scanning, risk-based prioritization, remediation coordination, patch management, remediation validation, and vulnerability lifecycle management. Hands-on experience with Tenable and Qualys, including VMDR and vulnerability management workflows. Builds Power BI dashboards and security metrics to communicate risk, aging, remediation performance, KPIs, and SLAs to technical and executive stakeholders. CORE COMPETENCIES

• Vulnerability Management • Vulnerability Assessment & Scanning • Vulnerability Lifecycle Management

• Vulnerability Remediation • Risk-Based Prioritization • CVE / CVSS Analysis

• Tenable • Qualys VMDR • Qualys Vulnerability Management

• Qualys CSAM • Patch Management • Remediation Tracking & Validation

• Asset Criticality & Risk Analysis • Root Cause Analysis • Zero-Day Vulnerability Response

• Threat Intelligence • Power BI • Security Metrics / KPIs / SLAs

• Compliance & Audit Readiness • Python / PowerShell / Bash • DevOps / CI/CD Security PROFESSIONAL EXPERIENCE

SGA (Scotiabank) Hybrid, NY

Vulnerability Management Analyst 03/2025 – 10/2025

• Managed vulnerability remediation workflows by coordinating application owners, establishing remediation timelines, tracking aging vulnerabilities, and escalating overdue findings.

• Performed risk-based prioritization using severity, asset criticality, exposure, and business impact to focus remediation on the highest-risk findings.

• Coordinated vulnerability scanning and patch management activities with technical teams and validated remediation through subsequent scans.

• Aligned scanning and patch management with internal policy and external compliance requirements to reduce audit findings.

• Maintained remediation records and audit evidence to support compliance, risk reporting, and remediation traceability. NTT DATA Remote, PA

Vulnerability Management Analyst 06/2022 – 12/2024

• Configured and executed internal and external vulnerability scans using Tenable and Qualys; analyzed findings and prioritized remediation based on severity, asset criticality, and business risk.

• Managed the end-to-end vulnerability lifecycle across client environments, including discovery, risk-based prioritization, remediation coordination, validation, and reporting.

• Coordinated remediation with infrastructure, application, and DevOps teams; established timelines, tracked SLAs, and validated fixes through follow-up scans.

• Created Power BI dashboards for real-time vulnerability monitoring, risk prioritization, aging analysis, and stakeholder reporting.

• Established vulnerability management KPIs and SLAs, contributing to a 92% reduction in overall security risk and improving visibility into aging and recurring vulnerabilities.

• Conducted root-cause analysis for recurring and aging vulnerabilities and implemented longer-term remediation approaches.

• Monitored emerging and zero-day vulnerabilities, assessed potential impact, and recommended mitigations for multi-tenant environments.

• Conducted threat modeling and prioritized vulnerabilities, decreasing potential risk to critical assets by 70%.

• Assisted with penetration-testing exercises to validate the effectiveness of vulnerability remediation efforts. NTT DATA Remote, PA

IOC Analyst – Bilingual 02/2022 – 06/2022

• Managed Microsoft server operating systems and backend components, specializing in Active Directory and Exchange.

• Performed technical troubleshooting and root-cause analysis while collaborating with cross-functional teams on process improvements.

• Provided bilingual technical support in Brazilian Portuguese. WebServes New York, NY

IT Help Desk Analyst 04/2019 – 04/2021

• Supported IT operations, Google Workspace, firewall rules, and ticket-management processes; reduced support ticket response time by 90%. Associacao Escola do Futuro São Paulo, Brazil

Network Administrator 02/2017 – 03/2018

• Designed, maintained, and troubleshot computer networks; managed network devices, technical support, and security controls. MILITARY EXPERIENCE

U.S. Army – CISAC Fort Huachuca, AZ

Counterintelligence Special Agent 10/2025 – 08/2026

• Completed advanced training in counterintelligence operations, investigations, intelligence analysis, and threat assessment.

• Developed analytical, reporting, evidence-collection, interviewing, and briefing skills applicable to security investigations and risk analysis. EDUCATION

Bachelor of Science, Aviation — Universidade Anhembi Morumbi, São Paulo, Brazil 2015 CERTIFICATIONS

CompTIA Security+ • CompTIA Pentest+ • CompTIA Network Vulnerability Assessment Professional • Qualys VMDR • Qualys Vulnerability Management • Qualys CyberSecurity Asset Management (CSAM) • Microsoft SC-200 • Microsoft SC-300 • Microsoft SC-400 • Microsoft SC-900 • Microsoft AZ-900 • ISC2 Certified in Cybersecurity

TECHNOLOGY

Vulnerability Management: Tenable, Qualys VMDR, Qualys Vulnerability Management, Qualys CSAM Analytics: Power BI, Excel, Security Metrics, KPIs, SLAs Automation: Python, PowerShell, Bash Security: Vulnerability Assessment, Remediation, Threat Modeling, Zero-Day Analysis Infrastructure: Active Directory, Microsoft Exchange, Windows Server, Networking DevSecOps: CI/CD, DevOps Security Compliance: Risk Management, Audit Readiness

Contact this candidate