Vulnerability Management Analyst

Vulnerability Management Analyst The opportunity Our client, a global professional services firm, is looking for a Vulnerability Management Analyst to become the go-to expert in their vulnerability management programme. You'll analyse, categorise and prioritise security vulnerabilities across the firm's technology estate, working as a trusted partner to technology teams to drive remediation and reduce cyber risk. You'll report to the Security Engineering Manager and Vulnerability Management Architect.

What you'll be doing Running regular vulnerability scans across applications and infrastructure Validating and prioritising findings from security tooling, cutting out false positives Monitoring security advisories, threat intelligence and vendor notifications Providing risk-based guidance and tracking remediation against SLAs Managing vulnerability exceptions and risk acceptance Building dashboards, reports and executive-level metrics Contributing to internal training materials and documentation Experience Expert, hands-on experience with enterprise vulnerability management platforms Strong understanding of CVSS, CWE and MITRE ATT&CK

Experience with threat intelligence, attack surface and exposure management platforms The ability to assess and prioritise risk at enterprise scale, in line with wider business priorities Foundational knowledge of Windows, Linux and networking Confidence carrying out independent threat research and adapting quickly as the landscape shifts Excellent communication skills, with the ability to explain complex issues to non-technical audiences Enterprise SOC experience is highly desirable Qualifications CISSP (essential) Computer Science degree or equivalent experience Further certifications such as GIAC (GMON/GVCA), Microsoft SC-900/SC-200, Security or CEH Benefits 25 days' annual leave plus bank holidays, rising with service up to 28 days Private medical insurance Contributory pension with employer matching up to 8% Life assurance at 4x basic salary Income protection 24/7 virtual GP for you and your family Flexible and agile working options Corporate gym membership, Employee assistance programme

Career development opportunities, recognition awards and a referral scheme Social clubs and committees Please apply now if you are meeting the above criteria or contact Andrew Harrison directly.

Skills:

Vulnerability Management CISSP CVSS MITRE ATT&CK Threat Intelligence Benefits:
Work From Home