Remote Vulnerability Analyst – Security & Risk

ENGINEERINGUK; Greater London; On-site; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Remote work

Job summary

RS is seeking a Vulnerability Analyst to proactively identify, validate and assess security vulnerabilities across the organisation's technology estate. The role works with the Vulnerability Manager and multiple teams to discover weaknesses, validate findings, and determine risk to the business.

You will conduct assessments across infrastructure, cloud, endpoints, networks and applications, using automated tools and manual techniques to prioritise remediation and enable faster risk decisions.

Qualifications

• Experience in vulnerability management, security operations, or threat intelligence.
• Strong understanding of cyber risk, exploitability, and attack patterns.
• Ability to interpret complex technical data and translate into business risk.
• Familiarity with vulnerability tooling (e.g. scanners, EDR, threat intel platforms).
• Strong stakeholder communication and influencing skills.
• Understanding of vulnerability frameworks e.g. CVSS and threat intelligence.

Responsibilities

• Conduct vulnerability assessments across infrastructure, cloud, endpoint, network and application environments using automated tools and manual assessment techniques.
• Support attack surface discovery and exposure management activities, validating findings to eliminate false positives.
• Assess the severity, exploitability, business impact and likelihood of compromise of identified vulnerabilities.
• Conduct technical analysis using threat intelligence and exploitation data, prioritising vulnerabilities using a risk-based methodology.
• Monitor emerging vulnerabilities and security advisories, assessing applicability to the organisation and supporting rapid assessment of critical vulnerabilities.
• Analyse proof-of-concept exploits and active threat activity.
• Work closely with remediation teams to explain findings, risks and vulnerability remediation approaches.
• Partner with the Risk Management team to support risk-based prioritisation, risk acceptance, exception management and escalation of material vulnerabilities.
• Produce technical vulnerability assessment reports, vulnerability trend analysis, risk insights and support executive reporting through accurate vulnerability data and technical commentary.

Skills

Vulnerability management

Security operations

Threat intelligence

Exploitability assessment

Communication with stakeholders

Vulnerability tooling

Understanding CVSS

Tools

Scanners

EDR

Threat intel platforms

Job description

RS is seeking a Vulnerability Analyst to proactively identify, validate and assess security vulnerabilities across the organisation's technology estate. The role works with the Vulnerability Manager and multiple teams to discover weaknesses, validate findings, and determine risk to the business.

You will conduct assessments across infrastructure, cloud, endpoints, networks and applications, using automated tools and manual techniques to prioritise remediation and enable faster risk decisions.