Senior InfoSec Analyst Vulnerability Management

Select how often (in days) to receive an alert:

Location:

Tranent, GB, EH33 2NE
Ahmedabad, IN Harlow, GB, CM19 5TR
Mumbai, IN Bangalore, IN New Delhi, IN, 110017 Keele, GB, ST5 5SP
Hyderabad, IN High Peak, GB, SK23 6FJ

For 75years, Charles River employees have worked together to assist in the discovery, development and safe manufacture of new drug therapies. When you join our family, you will have a significant impact on the health and well-being of people across the globe. Whether your background is in life sciences, finance, IT, sales or another area, your skills will play an important role in the work we perform.

In return, we’ll help you build a career that you can feel passionate about.

The vulnerability analyst is a hands-on practitioner and representative of the vulnerability management practice in the cyber security defense. This is a technical role, and candidates must possess a solid understanding of information security, applications, operating systems, networking, cloud infrastructure, and attacker tactics, techniques, and procedures (TTPs). Responsibilities of this position include vulnerability management, reporting, remediation and continuous assessment, penetration testing and red teaming.

• This position will work remote from home office located in the UK or India only.
• Must be able to work UK business hours, regarless of home location.

• Manage vulnerabilities across applications, endpoints, databases, networking devices, and mobile, cloud and third-party assets.
• Conduct continuous discovery and vulnerability assessment of enterprise-wide assets.
• Support auditors in their duties that focus on compliance and risk reduction.
• Perform penetration tests against company owned assets, including internal and cloud-based assets, as well as web applications and APIs.
• Perform other duties as assigned.

• Education: Bachelor’s degree (B.A./B.S.) or equivalent in computer science, information technology, or related discipline.
• Experience: Minimum of 5 years related experience in information security operations, vulnerability management, or related discipline.
• An equivalent combination of education and experience may be accepted as a satisfactory substitute for the specific education and experience listed above.
• Understanding of OWASP, CVSS, the MITRE ATT&CK framework and the software development lifecycle.
• Capable of scripting in Python, Bash, Perl or Power Shell.
• Certification/Licensure: IT security related certification desired (e.g., Security +, CISSP, CISA, GCED, GPEN, GCIH, or similar professional certification).
• Other:
• Must have strong interpersonal, teamwork, self-initiative skills.
• Must be able to work UK business hours, regarless of home location.

About Corporate Functions
The Corporate Functions provide operational support across Charles River in areas such as Human Resources, Finance, IT, Legal, Sales, Quality Assurance, Marketing, and Corporate Development. They partner with their colleagues across the company to develop and drive strategies and to set global standards. The functions are essential to providing a bridge between strategic vision and operational readiness, to ensure ongoing functional innovation and capability improvement.

About Charles River
Charles River is an early-stage contract research organization (CRO). We have built upon our foundation of laboratory animal medicine and science to develop a diverse portfolio of discovery and safety assessment services, both Good Laboratory Practice (GLP) and non-GLP, to support clients from target identification through preclinical development. Charles River also provides a suite of products and services to support our clients’…