Lead Vulnerability Intelligence Analyst

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Lead Vulnerability Intelligence Analyst based in Netherlands.
This is a senior cybersecurity role focused on determining the real-world risk posed by newly discovered vulnerabilities. You’ll provide the technical depth needed to validate exploitability, understand active exploitation, and translate complex findings into actionable intelligence for customers. The role combines vulnerability research, exploit validation, detection engineering, automation, and threat intelligence in a highly technical environment. You’ll design and maintain honeypots, isolated analysis environments, and tooling that help a specialized team assess vulnerabilities  a technical lead, you’ll establish standards for vulnerability assessment while mentoring junior analysts and expanding intelligence capabilities.

The position is remote-friendly and offers the opportunity to work alongside experienced professionals dedicated to staying ahead of evolving threats.
Accountabilities:
Lead the technical direction of the vulnerability intelligence practice, establishing rigorous standards for vulnerability validation, assessment, and communication.

Research newly disclosed vulnerabilities and determine whether reported exploitation claims are technically valid and relevant to real-world environments.

Acquire, modify, test, and validate proof-of-concept exploits in controlled virtual environments to confirm or refute exploitability claims.

Design, build, and operate  honeypots and sensor systems  capable of monitoring real-world exploitation activity.

Develop practical mitigation strategies for situations where patching is delayed, unavailable, or insufficient, including configuration hardening, network segmentation, access controls, feature disabling, and other defensive measures.

Develop techniques for identifying both attempted and successful exploitation, including the artifacts and indicators defenders should monitor and hunt for.

Produce detailed vulnerability intelligence reports explaining how exploits work, who is using them, who is being targeted, and what actions defenders should take.

Build and maintain automation that streamlines vulnerability assessment, PoC testing, triage, intelligence collection, and analysis workflows.

Identify and evaluate new sources of vulnerability intelligence and integrate valuable sources into the intelligence lifecycle from ingestion through enrichment and delivery.

Train, mentor, and support junior team members, raising the technical capabilities and analytical standards of the wider team.

Contribute to continuous improvements in vulnerability research methodologies, tooling, detection approaches, and intelligence coverage.

Requirements:
Demonstrated subject-matter-expert-level knowledge of  vulnerability research and intelligence , with substantial experience analyzing and validating vulnerabilities in production or research environments.

Proven ability to validate and test proof-of-concept exploits and independently assess whether exploitation claims are technically credible.

Strong programming ability in at least one language such as  Python, Go, C, C++, or a similar language , sufficient to understand exploit code, modify PoCs, and develop custom tooling.

Hands-on experience working with  virtual machines, containers, and reusable laboratory environments  for safe exploitation testing and technical analysis.

Strong computer science fundamentals and a thorough understanding of core computing and internet technologies, including TCP/IP, HTTP, DNS, TLS, authentication, authorization, and real-world system deployment.

Ability to develop mitigations beyond simply…