Vulnerability Management Analyst

About the job you're considering

Are you passionate about cybersecurity? Are you an excellent communicator with demonstrable experience of delivering security services within organisations? Would you relish putting these skills into practice by taking on a role within Capgemini to protect us and our clients from cyber threats?

We are seeking a Vulnerability Management Analysts with proven experience to join our cybersecurity team.

Reporting to the Vulnerability Management Lead, you will work closely with suppliers to ensure identified security vulnerabilities are understood, prioritized, and remediated within agreed timescales.

Rather than operating the vulnerability management tools directly, you will review findings, coordinate remediation activities, track progress, and provide guidance on risk reduction. The role focuses on stakeholder engagement, risk management, reporting, and driving timely resolution of security issues across the environment.

Working as part of our Security Operations team, you will be responsible for delivering a comprehensive vulnerability management service to our customer.

The Cyber Delivery Team sits within a wider Managed Services function, residing in the Cloud Infrastructure Services (CIS) UK business line. You will have the opportunity to interact with our global team of security experts, from Architects to Engineers, Analysts to Compliance Managers. Outreach in CIS doesn't just stop at security, as we actively encourage our staff to engage with other areas of the business and local communities.

The role will be hybrid and require working onsite at the customer site in either Inverness or Preston a minimum of 2 days a week, depending on business requirements.

If you are successfully offered this position, you will go through a series of pre-employment checks, including: identity, nationality (single or dual) or immigration status, employment history going back 3 continuous years, and unspent criminal record check (known as Disclosure and Barring Service).

• Coordinate and track vulnerabilities from identification through remediation and closure, ensuring progress meets agreed service levels and escalating high-risk or overdue issues where required.
• Engage with suppliers to obtain, validate, and maintain accurate vulnerability data, ensuring consistent reporting standards and clear ownership.
• Produce vulnerability reports, dashboards, and metrics that provide visibility of aging vulnerabilities, recurring issues, SLA breaches, and emerging trends.
• Support governance and compliance by ensuring adherence to vulnerability management processes, policies, standards, and risk exception procedures.
• Maintain audit-ready evidence and documentation, supporting assurance reviews and demonstrating the effectiveness of vulnerability management controls to stakeholders.

You can bring your whole self to work. At Capgemini building an inclusive future is part of everyday life and will be part of your working reality. We have built a representative and welcoming environment, for everyone.

• Experience in cyber security, information security, service management, or governance, with a solid understanding of vulnerability management principles and risk concepts (CVSS, KEV, risk ratings, and remediation tracking).
• Strong analytical, reporting, and data interpretation skills, with the ability to produce meaningful security metrics and reporting packs.
• Proven ability to work collaboratively with multiple stakeholders, suppliers, and governance forums to drive remediation and performance improvements.
• Familiarity with vulnerability management tools, reporting processes, security governance, assurance activities, and audit evidence requirements.
• Experience in SIAM or multi-supplier environments, preferably within regulated, public sector, or defence organisations.

• Qualifications in Vulnerability Management Tooling (Qualys, Brinqa, Tenable)

Capgemini is proud to be a Disability Confident Employer (Level
2) under the UK Government's Disability Confident scheme. As part of our commitment to inclusive recruitment, we will offer an interview to all candidates who:

• Declare they have a disability, and
• Meet the minimum essential criteria for the role.

Please opt in during the application process.

If you are successfully offered this position, you will go through a series of pre-employment checks, including: identity, nationality (single or dual) or immigration status, employment history going back 3 continuous years, and unspent criminal record check (known as Disclosure and Barring Service)

Some roles will also require an additional level of security clearance:

To be successfully appointed to this role, it is a requirement to obtain Security Check (SC) clearance.

To obtain SC clearance, the successful applicant must have resided continuously…