Associate Analyst - Vulnerability Mgt

Company Profile

Lennox (NYSE: LII) Driven by 130 years of legacy, HVAC and refrigeration success, Lennox provides our residential and commercial customers with industry-leading climate-control solutions. At Lennox, we win as a team, aiming for excellence and delivering innovative, sustainable products and services. Our culture guides us and creates a workplace where all employees feel heard and welcomed. Lennox is a global community that values each team member’s contributions and offers a supportive environment for career development. Come, stay, and grow with us.

Job Description

** 1. Workstation Vulnerability Management**

• Perform daily vulnerability monitoring and analysis across endpoints (Windows/Linux)
• Validate findings from scanners (Qualys/Tenable/Defender VM) and eliminate false positives
• Track patching and remediation status with IT/Infra teams
• Ensure SLA-driven closure of vulnerabilities based on severity

** 2.Security Scorecard Monitoring**

** **

• Identify and monitor externally exposed assets (domains, IPs, shadow IT)
• Analyze risks such as:
  • Open ports / misconfigurations
  • Exposed services / outdated systems

• Track remediation with respective owners

• Security Scorecard Monitoring

• Monitor and track security posture metrics (scorecard trends, risk ratings)

• Identify key drivers for score changes (patch gaps, exposed assets, vulnerabilities)
• Provide regular reports and insights for improvement actions

Reporting & Tracking

• Prepare daily/weekly vulnerability status reports and dashboards
• Maintain accurate tracking of vulnerabilities, remediation progress, and backlog

Coordination

• Work with:
  • IT / Endpoint / Infra teams for patching and closure
  • Security teams for risk prioritization and validation

Continuous Improvement

• Identify recurring issues and remediation gaps
• Support initiatives to improve:
  • Patch compliance
  • Vulnerability closure timelines
  • Asset visibility

Qualifications

• Basic knowledge of vulnerability management lifecycle
• Understanding of:
  • CVSS scoring, patching concepts
  • Endpoint security & OS fundamentals
• Familiarity with scanning tools and dashboards
• Good analytical and coordination skills