Vulnerability Management Analyst

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Execute vulnerability assessments across infrastructure, cloud, endpoint, network, and application environments utilizing both automated tools and manual methodologies.

• Assist in attack surface discovery and exposure management initiatives.

• Validate results to eliminate false positives.

• Evaluate severity, exploitability, business impact, and likelihood of compromise.

• Perform technical analyses using threat intelligence and exploitation data.

• Prioritize vulnerabilities based on a risk-based approach.

• Keep track of emerging vulnerabilities and security advisories.

• Assess relevance to the organization and aid in the swift evaluation of critical vulnerabilities.

• Analyze proof-of-concept exploits and ongoing threat activities.

• Collaborate with remediation teams to convey findings, risks, and remediation strategies.

• Work alongside Risk Management on risk-based prioritization, risk acceptance, exception management, and escalation of significant vulnerabilities.

• Generate technical vulnerability assessment reports, vulnerability trend analyses, risk insights, and executive reports backed by precise vulnerability data and technical commentary.

• Serve as the technical subject matter expert for activities related to vulnerability identification and prioritization.

• Partner with the Vulnerability Manager, Security Operations, Risk Management, Infrastructure, Cloud, EUC, Network, and Application teams.

⛳️ Requirements

• Proven experience in vulnerability management, security operations, or threat intelligence.

• Deep understanding of cyber risk, exploitability, and attack patterns.

• Capability to interpret intricate technical data and convert it into business risk.

• Familiarity with vulnerability tools, including scanners, EDR, and threat intelligence platforms.

• Strong communication and influencing skills with stakeholders.

• Knowledge of vulnerability frameworks such as CVSS and threat intelligence.

• Understanding of ITIL processes.

• Experience working within structured program environments, including agile and waterfall methodologies.

• Background in complex multi-vendor environments.

• Familiarity with vulnerability tooling.

• Experience in a global organization with various operating companies.

🏝️ Benefits

• Pension/retirement.

• Life assurance.

• Salary finance (payroll deduction loan scheme).

• Medical plans.

• Health screening.

• Critical illness insurance.

• Disability insurance.

• Holiday/paid time off.

• Employee assistance programme.

• Discounted gym/health club membership.

• Transportation assistance schemes (e.g., cycle to work, travel loans, car leasing).

• Onsite catering/lunch vouchers.

• Retail discounts.

• Global recognition programme (Spotlight).

• Short-term incentive opportunity.