Enterprise Vulnerability Risk Analyst

Baker McKenzie International; Belfast City District; Vor Ort; GBP 45.000 - 65.000; Vollzeit

Zusammenfassung

The Vulnerability Management Analyst at Baker McKenzie will analyze and prioritize security vulnerabilities across the firm’s technology stack, partnering with technology teams to drive remediation efforts and minimize cyber risk. You will operate as SME in the vulnerability program, perform scans, validate fixes and monitor advisories.

Candidates should have a Computer Science degree or equivalent, with GIAC GMON/GVCA, Microsoft SC-900/SC-200, Security+ and CEH credentials, and experience in

Qualifikationen

• Possess a Computer Science degree or substantial equivalent.
• GIAC GMON/GVCA certification.
• Microsoft security certifications (SC-900, SC-200).
• Security+ certification.
• Certified Ethical Hacker (CEH).

Aufgaben

• Operate as SME in the firm’s vulnerability management program.
• Perform regular vulnerability scans across applications and infrastructure.
• Validate and prioritise remediation of vulnerabilities from security tooling.
• Monitor security advisories, threat intelligence services and vendor notices.

Kenntnisse

Vulnerability platforms

Threat intel platforms

Attack surface mgmt

Exposure mgmt platforms

Vulnerability scoring

CWE

CVSS

MITRE ATT&CK

Windows

Linux

Networking

Risk assessment

Vulnerability dashboards

False positives reduction

Risk acceptance

SOC familiarity

Threat research

Communication

English proficiency

Documentation

SLA adherence

Risk management

Ausbildung

BSc Computer Science

GIAC GMON/GVCA

Microsoft SC-900

Microsoft SC-200

Security+

CEH

Jobbeschreibung

The Vulnerability Management Analyst at Baker McKenzie will analyze and prioritize security vulnerabilities across the firm’s technology stack, partnering with technology teams to drive remediation efforts and minimize cyber risk. You will operate as SME in the vulnerability program, perform scans, validate fixes and monitor advisories.

Candidates should have a Computer Science degree or equivalent, with GIAC GMON/GVCA, Microsoft SC-900/SC-200, Security+ and CEH credentials, and experience in