Vulnerability Management Analyst — Remediation Tracking for NATO with security clearance

WLG; Henegouwen; Sur place; EUR 70 000 - 110 000; Plein temps

Résumé du poste

WLG is seeking a security analyst to join a defence-focused team. You will interpret weekly vulnerability assessments, write remediation plans, and coordinate with technical owners to close findings.

You'll manage data pipelines, ingest scan outputs, and build live dashboards in Power BI or Grafana. Strong SQL (PostgreSQL/SQL Server) and scripting (Python/PowerShell) are required, with ownership to drive tasks to completion.

Qualifications

• > Experience with vulnerability management and validating remediation to security requirements.
• < Familiarity with scanner outputs formats (Nessus, Qualys, OpenVAS).
• < Security architecture grounding: boundary protection, encryption, IAM, monitoring and risk.
• < Strong SQL skills in PostgreSQL or SQL Server for modelling large scan data.
• < Advanced Power BI and/or Grafana skills for time-series data sources.
• < Python with Pandas/NumPy or PowerShell for parsing scan output.
• < Owning tasks end-to-end with clear documentation.
• < Nice-to-have CISSP, CISM, GIAC or PL-300 certifications.

Responsabilités

• Read weekly assessment results, interpret findings, and write remediation plans for the correct technical owners.
• Judge technical impact to prioritise remediation by risk and advise on OS/DB/network hardening.
• Build and run data side: structured repository aggregating raw scan outputs and ingestion pipelines.
• Design and maintain live dashboards in Power BI or Grafana with meaningful metrics.
• Act as technical contact for site admins and system owners; keep remediation tracking up to date.
• Produce weekly/monthly reporting and chair coordination meetings to clear roadblocks.
• Leave behind documentation so the platform can be maintained without you.

Connaissances

Vulnerability management

SQL depth

Power BI

Grafana

Python (Pandas/NumPy)

PowerShell

Security architecture

Ownership

Data modelling

Certification (CISSP/CISM/GIAC/PL-300)

Outils

Nessus

Qualys

OpenVAS

Description du poste

Most organisations can scan. Far fewer can say what the scans mean, who owns each finding and whether anything was fixed. A multinational defence organisation is looking for the analyst who closes that gap — half security assessment, half data engineering, and the coordination that turns a report into a repaired system.

What You Would Be Doing

• Reading the weekly assessment results, interpreting the technical findings, and writing the remediation plan that goes to the right technical owner.
• Judging technical impact so that remediation is prioritised on risk rather than on volume, and advising on hardening at operating system, database and network level.
• Building and running the data side: a structured repository that aggregates raw scan output from several sources, and the pipeline that ingests it without manual handling.
• Designing and maintaining live dashboards in Power BI or Grafana, and the metrics that make operational and management reporting meaningful.
• Acting as the technical contact for site administrators and system owners, and keeping the remediation tracking honest and current.
• Producing the weekly and monthly reporting, and chairing the coordination meetings where roadblocks get cleared.
• Leaving behind documentation good enough that the platform can be maintained without you.

What you would bring

• Substantial vulnerability management experience, current rather than historical, plus a track record of validating that delivered work meets its security requirements.
• Practical familiarity with scanners and their output formats — Nessus, Qualys, OpenVAS.
• A working grounding in security architecture: boundary protection, encryption, identity and access, monitoring and detection, incident response and risk.
• Real SQL depth for modelling and querying large scan datasets, in PostgreSQL or SQL Server.
• Advanced Power BI, including data modelling and DAX, or the Grafana equivalent against SQL and time-series sources.
• Python with Pandas or NumPy, or PowerShell, for parsing scan output and removing manual steps.
• Ownership: the motivation to carry a task to its end, alone or in a team, and the writing to show for it.
• Nice to have: certifications such as CISSP, CISM or a GIAC, and a data or business intelligence certification such as PL-300.

Extensions are offered where the work goes well. Applications are reviewed as they arrive.