Position Summary

Effectual is seeking an Associate Business Analyst to support vulnerability management, application security, and research initiatives for a leading technology organization. This role will work closely with cloud vulnerability backlog triage, bug bounty program operations, basic code scanning analysis, and integration of AI-powered security tooling. The Associate Business Analyst will provide hands-on exposure to modern cloud security operations, vulnerability assessment practices, and research workflows.

This position is well-suited for candidates looking to grow into cloud security, application security, or vulnerability management roles.

Essential Duties and Responsibilities

Assist with triage of cloud and application vulnerabilities within vulnerability management platforms
Review scanning results (e.g., Snyk, SemGrep, CodeScanner, etc.) and perform initial categorization and validation
Participate in backlog review efforts, tagging issues, prioritizing work, and tracking remediation status
Maintain dashboards and reporting on vulnerability metrics, trends, and backlog reduction
Support senior analysts in conducting research on emerging threats, vulnerability patterns, and exploit techniques
Assist in the rollout and usage of AI-enhanced tools (e.g., Goose, Maze)
Prepare documentation, update SOPs, and maintain ticket hygiene in Jira and internal systems
Collaborate with engineering and security teams to follow up on remediation plans

Qualifications

Foundational understanding of vulnerability management concepts, CVSS scoring, and common security testing practices
Familiarity with cloud technologies (AWS preferred) and modern application architectures
Ability to analyze data sets, triage issues, and maintain detailed documentation
Strong written communication skills, especially around security findings
Interest in application security, cloud security, or bug bounty research
Ability to work cross-functionally with development and security teams

Nice-to-Have Skills and Experience

Exposure to code scanning tools such as Snyk, SonarQube, Checkmarx, Veracode, or similar
Familiarity with CVE databases, OWASP Top 10, or basic threat modeling
Experience with Python, bash, or basic scripting to assist in automation
Prior internship or experience in a SOC, vulnerability research team, or cloud security environment

Company Offered Benefits

Full-time employees are eligible to participate in our employee benefit programs:

Medical, dental, and vision health insurances,
Short term disability, long term disability and life insurances,
401k with Company match
Paid time off (PTO) (120 hours PTO that accrue over one year)
Paid time off for major holidays (14 days per year)
These and any other employee benefit offerings are subject to management's discretion and may change at any time.

Physical Demands and Work Environment

The work is generally performed in an office environment. Physical demands include sitting, keyboarding, verbal communication, written communication. Employees are occasionally required to stand; walk; reach with hands and arms; climb or balance; and stoop, kneel, crouch, or crawl. The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodation may be made to enable individuals with disabilities to perform the functions.

Salary Range for this position: $70,000-$80,000

"Salary ranges provided are for informational purposes only and may vary depending on factors such as experience, qualifications, and geographic location. The final salary offer will be determined based on the candidate's skills and alignment with the role requirements."

This job description may not be inclusive of all assigned duties, responsibilities, or aspects of the job described, and may be amended anytime at the sole discretion of the Employer. Duties and responsibilities are subject to possible modification to reasonably accommodate individuals with disabilities. To perform this job successfully, the incumbents will possess the skills, aptitudes, and abilities to perform each duty proficiently. This document does not create an employment contract, implied or otherwise, other than an "at will" relationship. Effectual Inc. is an EEO employer and does not discriminate on the basis of any protected classification in its hiring, promoting, or any other job-related opportunity.

Effectual jobs

Associate Business Analyst