Vulnerability Management Analyst

Covenant HR; España; A distancia; EUR 55.000 - 90.000; Jornada completa

Descripción de la vacante

Our client, Covenant HR LLC, is seeking a Vulnerability Management Analyst for a 100% remote role in the EMEA region. The role focuses on triaging disclosed vulnerabilities, assessing impact across enterprise environments, and delivering audit-ready assessments with remediation recommendations.

You will evaluate exploitability using threat intelligence and advisories, assign defensible risk ratings, and collaborate with global cybersecurity teams to maintain high-quality analysis and timely

Formación

• Hands-on vulnerability management and triage experience across enterprise environments.
• Experience evaluating CVEs, CVSS, and associated risk ratings.
• Broad knowledge of Microsoft, VMware, Oracle/Java, Citrix, F5, cloud platforms, and open-source tech.
• Excellent documentation and audit-ready vulnerability assessments with remediation guidance.

Responsabilidades

• Review and triage newly disclosed vulnerabilities across complex environments.
• Determine impact on customer applications, infrastructure, or assets.
• Evaluate exploitability using threat intel, advisories and PoCs.
• Assign risk and severity using CVE/CPE/CVSS and client criteria.
• Analyze vulnerabilities across Microsoft, VMware, Oracle/Java, Citrix, F5, cloud and open-source tech.
• Assess patch availability, vendor advisories, and remediation options.
• Produce comprehensive, audit-ready vulnerability assessments with actionable findings.
• Identify critical/high-risk vulnerabilities for escalation.
• Support ongoing vulnerability management operations with consistent quality.
• Collaborate with globally distributed cybersecurity teams for communication and handoffs.
• Contribute to 24x5 global triage and assessment operations within the EMEA coverage.

Conocimientos

Vulnerability triage

Threat intelligence

CVE/CPE/CVSS

Enterprise tech know-how

Descripción del empleo

Company

Our client is a leading global technology and consulting organization specializing in cybersecurity, digital transformation, and mission-critical enterprise solutions. They support complex technology environments and help organizations strengthen security, manage risk, and improve operational resilience.

Job Title

Vulnerability Management Analyst

Location

100% Remote (EMEA Region)

Must Have Skills

• Hands-on vulnerability management and triage experience, including assessing newly disclosed vulnerabilities, identifying affected assets, and determining enterprise exposure and impact.
• Strong expertise in CVE, CPE, CVSS, and risk assessment methodologies, including evaluating exploitability, threat intelligence, proof-of-concept exploits, and assigning defensible risk and severity ratings.
• Broad enterprise technology knowledge across Microsoft, VMware, Oracle/Java, Citrix, F5, cloud environments, and enterprise open-source technologies, including patch management and software release lifecycles.
• Excellent technical documentation and communication skills, with the ability to produce accurate, audit-ready vulnerability assessments detailing exposure, impact, risk rationale, remediation recommendations, and escalation requirements.

Responsibilities and Job Details

• Review, analyze, and triage newly disclosed vulnerabilities across complex enterprise technology environments.
• Determine whether identified vulnerabilities impact customer applications, infrastructure, platforms, or other enterprise assets.
• Evaluate vulnerability exploitability using threat intelligence, published advisories, proof-of-concept exploits, and potential attack paths.
• Assess organizational exposure and assign appropriate risk and severity ratings using CVE, CPE, CVSS, and client-specific risk assessment criteria.
• Analyze vulnerabilities affecting Microsoft, VMware, Oracle/Java, Citrix, F5, cloud platforms, and enterprise open-source technologies.
• Evaluate patch availability, vendor advisories, software release lifecycles, and potential remediation options.
• Develop and maintain comprehensive, audit-ready vulnerability assessments, including technical findings, business impact, risk justification, and recommended actions.
• Identify and escalation critical or high-risk vulnerabilities requiring immediate attention or further investigation.
• Support ongoing vulnerability management operations, ensuring timely analysis and consistent assessment quality.
• Collaborate with globally distributed cybersecurity teams to maintain effective communication, documentation, and shift handoffs.
• Contribute to a 24x5 global vulnerability triage and assessment operation, working an anticipated 40-hour week within the EMEA coverage model.