Hybrid Vulnerability Management Analyst — Drive Remediation

Salt; Greater London; Hybrid; GBP 45,000 - 55,000; Full time

Job summary

Salt is seeking a Vulnerability Management Analyst to join its security team in Belfast with a hybrid 2–3 day on-site pattern. The role focuses on analysing and prioritising vulnerabilities across enterprise infrastructure and applications, coordinating remediation, and reporting on risk posture.

The successful candidate will work with Tenable, Qualys, Rapid7, and ServiceNow, applying best practices in CVE handling and risk-based remediation.

Qualifications

• Experience in cyber security, vulnerability management or related technical discipline.
• Understanding of vulnerability management principles: assessment, prioritisation, remediation, risk management.
• Exposure to vulnerability tooling and data sources (CVEs, threat intelligence).

Responsibilities

• Analyse, assess, and prioritise vulnerabilities across enterprise infrastructure, applications, and platforms.
• Support end-to-end vulnerability management lifecycle from identification to remediation and closure.
• Coordinate remediation activities with infrastructure, engineering and tech teams.
• Review data and advisories to determine risk and remediation priorities.
• Produce dashboards and metrics to demonstrate vulnerability trends and security posture.
• Contribute to continual improvement of processes, tooling, and effectiveness.

Skills

Vulnerability management

CVEs & CVSS

Risk-based remediation

Technical stakeholder communication

Windows/Linux/Networking

Tools

Tenable

Qualys

Rapid7

ServiceNow

Job description

Salt is seeking a Vulnerability Management Analyst to join its security team in Belfast with a hybrid 2–3 day on-site pattern. The role focuses on analysing and prioritising vulnerabilities across enterprise infrastructure and applications, coordinating remediation, and reporting on risk posture.

The successful candidate will work with Tenable, Qualys, Rapid7, and ServiceNow, applying best practices in CVE handling and risk-based remediation.