Cyber Security Analyst - Vulnerability Management

Key Responsibilities

• Lead the identification, assessment and prioritisation of vulnerabilities across infrastructure, applications, endpoints and cloud environments.
• Analyse vulnerability scan results, distinguishing genuine risks from false positives and low-impact findings.
• Assess vulnerabilities using CVSS, exploitability, asset criticality, exposure and business impact.
• Monitor emerging vulnerabilities, zero-days and relevant threat intelligence.
• Work closely with infrastructure, cloud, application, DevOps and IT operations teams to coordinate remediation.
• Track vulnerabilities through to resolution, ensuring remediation is completed within agreed risk-based timescales.
• Provide technical guidance and challenge remediation plans, risk acceptances and proposed compensating controls where appropriate.
• Produce vulnerability reporting, dashboards and management information for technical and senior stakeholders.
• Identify trends, recurring vulnerabilities and systemic weaknesses across the environment.
• Help improve vulnerability management processes, tooling, automation and reporting.

Essential Experience

• Significant experience in vulnerability management, vulnerability assessment or cyber security operations.
• Strong understanding of vulnerability assessment methodologies and risk-based prioritisation.
• Hands-on experience with enterprise vulnerability management platforms such as Tenable, Qualys, Rapid7 or similar.
• Strong understanding of CVSS, CVE, CWE and common vulnerability types.
• Experience analysing vulnerabilities across Windows, Linux, network infrastructure, cloud and/or applications.
• Good understanding of patching, configuration management and security controls.
• Proven experience working with technical teams to drive vulnerability remediation.
• Strong analytical and problem-solving skills, with the ability to communicate technical risk clearly to both technical and non-technical stakeholders.
• Eligible for UK SC security clearance.

Desirable Experience

• Active UK SC security clearance.
• Experience working within Defence, Nuclear, Critical National Infrastructure (CNI) or other highly regulated and security-conscious organisations.
• Experience with Azure and/or AWS vulnerability management.
• Experience with container, Kubernetes or DevSecOps security.
• Knowledge of application security and common web application vulnerabilities.
• Experience using SIEM, EDR and threat intelligence alongside vulnerability data.
• Knowledge of NIST, CIS, ISO 27001 or Cyber Essentials.
• Relevant security certifications such as CISSP, CISM, GIAC, OSCP or similar.

The Ideal Candidate

My client is looking for someone who combines strong technical vulnerability analysis skills with the ability to operate confidently at a senior level.

You'll be comfortable getting into the technical detail, while also being able to explain what the vulnerability means, how serious it is, what needs to be done and why.

This is an excellent opportunity for a senior vulnerability professional to join a complex organisation where cyber security, risk management and continuous improvement are key priorities.