Senior Vulnerability Analyst, Procore
$94.7-130.2k
+ Bonus Incentive Compensation
Office located in West 6th Street, Austin
Construction management platform
Job no longer available
Construction management platform
1001+ employees
Job no longer available
$94.7-130.2k
+ Bonus Incentive Compensation
Office located in West 6th Street, Austin
1001+ employees
Company mission
To connect everyone in construction on a global platform.
Role
Who you are
- If you're passionate about turning data into action and enabling secure innovation—apply today to help us protect what builds the world
- Degree or equivalent work experience
- Must have a minimum of 2 years experience in triaging, remediating and reporting on vulnerabilities
- Background in development and security engineering
- Ability to navigate complex environments
- Capability to help developers resolve vulnerabilities
- Some combination o the following: OSCP, CompTIA Security+, GCIA / GCIH / GPEN , CISM, AWS Certified Security – Specialty
What the job involves
- We’re looking for a Senior Vulnerability Analyst to join Procore’s Product & Technology Team
- Procore software solutions aim to improve the lives of everyone in construction and the people within Product & Technology are the driving force behind our innovative, top-rated global platform
- We’re a customer-centric group that encompasses engineering, product, product design and data, security and business systems
- The Senior Vulnerability Analyst will join Procore’s Cybersecurity Risk & Compliance team
- In this role, you’ll drive vulnerability management activities that support and maintain our FedRAMP authorization, ensuring that Procore's systems meet the highest standards of security and regulatory compliance
- You will play a key role in identifying, analyzing, and reporting on security vulnerabilities while supporting risk-informed decision-making across the business
- As a Senior Vulnerability Analyst, you’ll partner with security engineers, compliance analysts, DevOps teams, and product owners to track, assess, and report on vulnerabilities impacting FedRAMP-authorized systems
- Use your technical depth, regulatory knowledge, and analytical thinking to reduce risk exposure, maintain FedRAMP compliance, and improve operational resilience
- This position reports into the Senior Manager, Security Operations and Threat Intelligence and will be based in our Austin, TX office
- Monitor and triage vulnerability data from scanning tools and threat intelligence sources to ensure timely remediation of findings impacting FedRAMP systems
- Analyze vulnerability risk based on asset criticality, exposure, and threat context, and provide clear and actionable recommendations
- Track open vulnerabilities, coordinate with technical teams, and ensure adherence to FedRAMP-defined remediation timelines
- Partner with the GRC teams and internal FedRAMP stakeholders to support FedRAMP reporting, continuous monitoring deliverables, and audit evidence requests
- Document exceptions, justifications, and mitigation plans for vulnerabilities that cannot be remediated within required timelines
- Generate clear and concise metrics, dashboards, and reports for stakeholders and executive leadership
- Contribute to the continuous improvement of vulnerability management processes, workflows, and tooling
Application process
- We’re looking for someone to join us immediately
Our take
Construction tech company Procore offers a cloud-based construction management platform. With substantial productivity gains and cost reductions on the table for construction companies that digitize more efficiently, Procore’s offerings are an attractive prospect for those operating in the industry.
Founded in 2002, Procore now serves over 15,000 businesses, providing a range of products for preconstruction, project management, and resource and financial management. Its platform is built atop multi-zone cloud infrastructure, and is able to house every app, document, and person involved in projects, providing visibility that simplifies processes for everyone involved.
With promising stock performance and a legacy position in the construction tech sector, Procore seems likely to continue a steady upward trajectory in this growing market. The company published its first Environmental, Social and Governance report in 2022, highlighting its commitment to work towards a more sustainable future, and has continued to develop integrations and partnerships to improve its offerings.
Steph
Company Specialist at Welcome to the Jungle
Insights
12% employee growth in 12 months
Company
Funding (last 2 of 11 rounds)
May 2020
$150m
LATE VC
Sep 2019
$94.9m
SERIES I
Total funding: $567.8m
Company benefits
- Comprehensive healthcare benefits, long-term disability, life insurance and other wellness resources
- Values-driven PTO that is based on openness, ownership and optimism – take the time you need when you need it
- Retirement benefits such as a 401k or RRSP with employer contribution (varies by country).
- Employee Stock Purchase Plan for eligible employees
- Employee enrichment program with classes and programs for personal and professional development
- Procore Perks - a reimbursable stipend for purpose-driven goods and services that support work/life well-being and physical and financial wellness
- Family building benefits including fertility treatments (with some medical plans) and cash benefits to support adoption and surrogacy
Company HQ
Carpinteria, CA
Leadership
Tooey Courtemanche
(CEO)Worked as a Software Engineer at Skip Steveley & Associates after graduating from the University of Arizona. They were also CEO of Webcage, a software consultancy company.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 42 more jobs at Procore