Vulnerability Management Analyst
The opportunity Our client, a global professional services firm, is looking for a Vulnerability Management Analyst to become the go-to expert in their vulnerability management programme. You’ll analyse, categorise and prioritise security vulnerabilities across the firm’s technology estate, working as a trusted partner to technology teams to drive remediation and reduce cyber risk. You’ll report to the Security Engineering Manager and Vulnerability Management Architect.
What you’ll be doing
- Running regular vulnerability scans across applications and infrastructure
- Validating and prioritising findings from security tooling, cutting out false positives
- Monitoring security advisories, threat intelligence and vendor notifications
- Providing risk-based guidance and tracking remediation against SLAs
- Managing vulnerability exceptions and risk acceptance
- Building dashboards, reports and executive-level metrics
- Contributing to internal training materials and documentation
Experience
- Expert, hands-on experience with enterprise vulnerability management platforms
- Strong understanding of CVSS, CWE and MITRE ATT&CK
- Experience with threat intelligence, attack surface and exposure management platforms
- The ability to assess and prioritise risk at enterprise scale, in line with wider business priorities
- Foundational knowledge of Windows, Linux and networking
- Confidence carrying out independent threat research and adapting quickly as the landscape shifts
- Excellent communication skills, with the ability to explain complex issues to non-technical audiences
- Enterprise SOC experience is highly desirable
Qualifications
- CISSP (essential)
- Computer Science degree or equivalent experience
- Further certifications such as GIAC (GMON/GVCA), Microsoft SC-900/SC-200, Security+ or CEH
Benefits
- 25 days’ annual leave plus bank holidays, rising with service up to 28 days
- Private medical insurance
- Contributory pension with employer matching up to 8%
- Life assurance at 4x basic salary
- Income protection
- 24/7 virtual GP for you and your family
- Flexible and agile working options
- Corporate gym membership,
- Employee assistance programme
- Career development opportunities, recognition awards and a referral scheme
- Social clubs and committees
Please apply now if you are meeting the above criteria or contact Andrew Harrison directly.
Skills:Vulnerability Management CISSP CVSS MITRE ATT&CK Threat Intelligence
Benefits:Work From Home
WHJS1_NI
…