Vulnerability Management Analyst

LT Harper Recruitment Group; Australia; Remote; AUD 92,000 - 166,000; Full time

Benefits offered by this job

Fully remote

Job summary

LT Harper Group seeks a Vulnerability Management Analyst to join a 24/5 follow-the-sun triage service. Work is remote from Australia, supporting APAC shift within a global team across APAC, North America and EMEA.

You will decide vulnerability relevance, impact, and required actions for customer environments. You’ll triage disclosures, assess exploitability, assign risk ratings with justification, and keep audit-ready notes for smooth handover across time zones.

Qualifications

• Hands-on vulnerability triage across end-to-end vulnerability management workflow.
• Fluency in CVE, CPE and CVSS and ability to judge real-world risk.
• Ability to read disclosures, advisories and exploit information.
• Clear technical writing to communicate impact, actions and priorities.

Responsibilities

• Triage newly disclosed vulnerabilities and assess relevance and impact to customer assets.
• Assess exploitability using threat intel, PoC details and likely attack paths.
• Assign severity and risk ratings with clear rationale for each rating.
• Maintain audit-ready case notes for handover across time zones.
• Support BAU triage alongside urgent escalations when critical.

Skills

Vulnerability triage

Risk assessment

CVE

CVSS

CPE

Technical writing

Cloud environments

Enterprise platforms knowledge

Tools

Microsoft

VMware

Oracle/Java

Citrix

F5

Job description

Vulnerability Management Analyst | 12-Month Contract | Remote, Australia

You’ll be one of five analysts forming the APAC shift of a new follow-the-sun vulnerability triage service, running 24 hours a day, five days a week across APAC, North America and EMEA. When a new vulnerability is disclosed, you decide whether it matters to the customer, how much, and why. LT Harper is running this search on behalf of a global technology consulting firm and its enterprise customer.

The essentials

• 100% remote, based in Australia, covering the APAC shift
• Day rate: on application
• One of 15 analysts across three regions, five per time zone

What you’ll actually do

• Triage newly disclosed vulnerabilities and work out their relevance and impact to the customer’s applications and assets
• Assess exploitability using threat intelligence, exploit and proof of concept (PoC) details, and likely attack paths
• Assign severity and risk ratings mapped to CVE, CPE and CVSS, with a clear rationale behind every rating
• Keep audit-ready case notes that hand over cleanly to colleagues in other time zones
• Support business-as-usual triage alongside urgent escalations when something critical lands

What you’ll need

• Hands-on vulnerability triage and risk assessment across the end-to-end vulnerability management workflow, with fluency in CVE, CPE and CVSS
• The ability to read disclosures, advisories and exploit information and judge the real-world risk
• Clear technical writing, so impact, actions and priorities are easy to act on
• Broad familiarity with enterprise platforms such as Microsoft, VMware, Oracle/Java, Citrix and F5, and how their patch and release cycles work
• Comfort working across cloud environments and large-scale open-source use in enterprise estates
• Strong prioritisation and an operations mindset, able to balance several cases at once

What’s in it for you

• A minimum 12-month engagement helping build a new global service
• Fully remote working
• Daily collaboration with counterparts in North America and EMEA

If you meet most but not all of the essentials, we’d still like to hear from you.