Vulnerability Management Analyst

Covenant HR; United Arab Emirates; Remote; AED 180,000 - 280,000; Full time

Job summary

Covenant HR LLC is seeking a Vulnerability Management Analyst for a 100% remote role serving the EMEA region. You will triage disclosed vulnerabilities, assess impact on customer assets, and determine exploitability using threat intel and advisories.

The role covers Microsoft, VMware, Oracle/Java, Citrix, F5, cloud platforms, and open-source technologies. You will produce audit-ready assessments with risk rationale and remediation recommendations, and collaborate with globally distributed teams

Qualifications

• Hands-on vulnerability management and triage across complex enterprise environments.
• Assess CVE, CPE, CVSS and assign risk/severity ratings.
• Experience with patch management and software release lifecycles (Microsoft, VMware, Oracle/Java, Citrix, F5, cloud).
• Produce audit-ready vulnerability assessments with remediation recommendations.
• Excellent technical documentation and communication skills.

Responsibilities

• Review, analyze, and triage newly disclosed vulnerabilities across complex enterprise environments.
• Determine whether identified vulnerabilities impact customer applications, infrastructure, platforms, or assets.
• Evaluate exploitability using threat intelligence, advisories, PoCs, and attack paths.
• Assess exposure and assign risk/severity using CVE, CPE, CVSS and client criteria.
• Analyze vulnerabilities affecting Microsoft, VMware, Oracle/Java, Citrix, F5, cloud and open-source tech.
• Evaluate patch availability, advisories, release lifecycles, and remediation options.
• Develop and maintain audit-ready vulnerability assessments with findings and risk justification.
• Identify and escalate critical/high-risk vulnerabilities for immediate action.
• Support ongoing vulnerability management operations ensuring timely analysis and quality.
• Collaborate with globally distributed cybersecurity teams for effective communication and handoffs.
• Contribute to a 24x5 global triage and assessment operation within the EMEA coverage model.

Skills

Vulnerability management

CVE/CPE/CVSS

Threat intelligence

Patch management

Audit-ready documentation

Enterprise tech knowledge

Job description

Company

Our client is a leading global technology and consulting organization specializing in cybersecurity, digital transformation, and mission-critical enterprise solutions. They support complex technology environments and help organizations strengthen security, manage risk, and improve operational resilience.

Job Title

Vulnerability Management Analyst

Location

100% Remote (EMEA Region)

Must Have Skills

• Hands-on vulnerability management and triage experience, including assessing newly disclosed vulnerabilities, identifying affected assets, and determining enterprise exposure and impact.
• Strong expertise in CVE, CPE, CVSS, and risk assessment methodologies, including evaluating exploitability, threat intelligence, proof-of-concept exploits, and assigning defensible risk and severity ratings.
• Broad enterprise technology knowledge across Microsoft, VMware, Oracle/Java, Citrix, F5, cloud environments, and enterprise open-source technologies, including patch management and software release lifecycles.
• Excellent technical documentation and communication skills, with the ability to produce accurate, audit-ready vulnerability assessments detailing exposure, impact, risk rationale, remediation recommendations, and escalation requirements.

Responsibilities and Job Details

• Review, analyze, and triage newly disclosed vulnerabilities across complex enterprise technology environments.
• Determine whether identified vulnerabilities impact customer applications, infrastructure, platforms, or other enterprise assets.
• Evaluate vulnerability exploitability using threat intelligence, published advisories, proof-of-concept exploits, and potential attack paths.
• Assess organizational exposure and assign appropriate risk and severity ratings using CVE, CPE, CVSS, and client-specific risk assessment criteria.
• Analyze vulnerabilities affecting Microsoft, VMware, Oracle/Java, Citrix, F5, cloud platforms, and enterprise open-source technologies.
• Evaluate patch availability, vendor advisories, software release lifecycles, and potential remediation options.
• Develop and maintain comprehensive, audit-ready vulnerability assessments, including technical findings, business impact, risk justification, and recommended actions.
• Identify and escalation critical or high-risk vulnerabilities requiring immediate attention or further investigation.
• Support ongoing vulnerability management operations, ensuring timely analysis and consistent assessment quality.
• Collaborate with globally distributed cybersecurity teams to maintain effective communication, documentation, and shift handoffs.
• Contribute to a 24x5 global vulnerability triage and assessment operation, working an anticipated 40-hour week within the EMEA coverage model.