Vulnerability Management Analyst

Vulnerability Management Analyst

The opportunity
Our client, a global professional services firm, is looking for a Vulnerability Management Analyst to become the go-to expert in their vulnerability management programme. You'll analyse, categorise and prioritise security vulnerabilities across the firm's technology estate, working as a trusted partner to technology teams to drive remediation and reduce cyber risk. You'll report to the Security Engineering Manager and Vulnerability Management Architect.

What you'll be doing

• Running regular vulnerability scans across applications and infrastructure
• Validating and prioritising findings from security tooling, cutting out false positives
• Monitoring security advisories, threat intelligence and vendor notifications
• Providing risk-based guidance and tracking remediation against SLAs
• Managing vulnerability exceptions and risk acceptance
• Building dashboards, reports and executive-level metrics
• Contributing to internal training materials and documentation

Experience

• Expert, hands-on experience with enterprise vulnerability management platforms
• Strong understanding of CVSS, CWE and MITRE ATT&CK
• Experience with threat intelligence, attack surface and exposure management platforms
• The ability to assess and prioritise risk at enterprise scale, in line with wider business priorities
• Foundational knowledge of Windows, Linux and networking
• Confidence carrying out independent threat research and adapting quickly as the landscape shifts
• Excellent communication skills, with the ability to explain complex issues to non-technical audiences
• Enterprise SOC experience is highly desirable

Qualifications

• CISSP (essential)
• Computer Science degree or equivalent experience
• Further certifications such as GIAC (GMON/GVCA), Microsoft SC-900/SC-200, Security+ or CEH

Benefits

• 25 days' annual leave plus bank holidays, rising with service up to 28 days
• Private medical insurance
• Contributory pension with employer matching up to 8%
• Life assurance at 4x basic salary
• Income protection
• 24/7 virtual GP for you and your family
• Flexible and agile working options
• Corporate gym membership,
• Employee assistance programme
• Career development opportunities, recognition awards and a referral scheme
• Social clubs and committees

Please apply now if you are meeting the above criteria or contact Andrew Harrison directly.

Skills:
Vulnerability Management CISSP CVSS MITRE ATT&CK Threat Intelligence

Benefits:
Work From Home

WHJS1_NI

Full job description from WhatJobs. Apply for this role →