Vulnerability Management Analyst
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Vulnerability Management Analyst (Cybersecurity): Managing and optimizing security vulnerability lifecycles across a global product estate with an accent on risk assessment, tool configuration, and remediation tracking. Focus on collaborating with engineering teams to implement secure benchmarks, coordinating penetration testing, and automating security reporting processes.
Location: Hybrid (Birmingham, UK)
Company
is a technology-driven marketing and services company providing integrated solutions for global brands.
What you will do
- Configure and tune vulnerability scanning tools to ensure accurate coverage across infrastructure and CI/CD pipelines.
- Triage and risk-assess security findings, filtering false positives and prioritizing remediation based on business impact.
- Develop and maintain secure configuration benchmarks and hardening guidelines aligned with industry frameworks.
- Act as a primary point of contact for developers to provide remediation guidance and track progress on security issues.
- Coordinate externally delivered penetration testing and internal vulnerability scanning programs.
- Design and report on remediation SLAs and security metrics to inform continuous improvement.
Requirements
- 2+ years of experience in vulnerability management, security operations, or related IT roles.
- Hands-on experience with scanning tools such as SAST, DAST, SCA, or CSPM.
- Solid understanding of common vulnerability types, OWASP Top 10, and the Mitre ATT&CK Framework.
- Ability to read and understand common coding languages.
- Strong analytical mindset with the ability to explain technical findings to non-technical stakeholders.
- Must be able to work in a hybrid capacity in Birmingham, UK.
Nice to have
- Experience writing scripts or code.
- Relevant certifications such as CompTIA Security+, CySA+, GIAC GFACT/GPEN, or CEH.
Culture & Benefits
- 25 days of holiday plus bank holidays, a paid Wellbeing Day, and flexible holiday options.
- Enhanced family-friendly leave and an Employee Assistance Programme.
- Pension scheme, Corporate Medical Cash Plan, and electric car salary sacrifice scheme.
- Funding for professional qualifications and mentoring support.
- Regular wellbeing workshops and access to community groups.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →