Vulnerability Management & Offensive Security Analyst
Gulf Coast Automation Group · Chicago, IL
$118,000–$130,000
Jul 12, 2026
Chicago, IL
Jul 20, 2026
What this job asks for AI summary
A mid-level security role focused on protecting a healthcare organization's systems through vulnerability scanning, triage, and remediation coordination. Day-to-day work includes running scans, prioritizing findings, working with asset owners on patching, and contributing to red and purple team exercises. Suited to someone with 3–5 years in vulnerability management who wants to develop further in offensive security.
Mid level · 3+ years · Remote · Full-time
Pay in the description: $118,000–$130,000
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Roughly 19,700 people nationally plausibly meet what this posting asks for (information security analysts). range 11,800–29,500
Applicant volume Heavy — This req sits in a large pool with little in its requirements to thin it, and auto-apply tools fire at everything in the occupation. Applying early and leading with the rare skills below is what gets read.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $132,021 (middle half $99,961–$167,095). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (7)
The posting header lists '[Direct Hire/Contract]' with brackets, suggesting a template placeholder; the position type field says 'Direct Hire', so FullTime is used.
Degree requirement is listed as a Bachelor's 'or equivalent internship/work experience', so no hard degree gate applies.
The 3–5 year experience range is stated for vulnerability management specifically; 3 years is used as the minimum.
Rapid7 and security certifications (Security+, CEH) appear explicitly under a 'Preferred' heading.
Penetration testing and vulnerability scanning are treated as hard gates based on the role's stated purpose and the 'What You'll Do' responsibilities, which describe them as core day-to-day activities — not merely preferred extras.
The caller has directed that this be treated as fully remote with no metro inferred, overriding the Chicago, IL location mentioned in the posting.
Caller marked this a fully-remote role — scored against the national candidate pool.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.