Security Remediation Analyst

Centrica; England; Hybrid; GBP 55,000 - 75,000; Full time

Job summary

Centrica is seeking an Analyst (Remediation) to join our team in a UK-based hybrid role with occasional travel to site. You will focus on reducing risk by remediating vulnerabilities, hardening infrastructure, and driving continuous improvement across IT environments.

You will collaborate with Security, Infrastructure, Risk, and Compliance teams to deliver practical remediation plans, automate processes, and improve incident response.

Qualifications

• Proven experience in cyber security, infrastructure, or IT operations with vulnerability remediation.
• Strong understanding of vulnerability management processes and remediation lifecycle.
• Experience with vulnerability scanning tools (Qualys, Tenable, Rapid7, Defender VM).
• Experience prioritising remediation using CVSS and business risk.

Responsibilities

• Analyse vulnerability findings to identify security and infrastructure risks.
• Apply patches, upgrades, configuration changes to remediate vulnerabilities.
• Investigate recurring issues and implement long-term corrective actions.
• Strengthen security and resilience of servers, networks, firewalls, and infrastructure components.
• Remove or mitigate outdated technologies and unsupported systems.
• Ensure systems align with CIS benchmarks and compliance requirements.
• Partner with Security, Infrastructure, and Engineering to deliver remediation plans.
• Prioritise vulnerabilities with Risk exposure and business impact.
• Provide updates to stakeholders on remediation progress and outcomes.
• Monitor remediation activities to ensure timely completion and resolution.

Skills

Vulnerability remediation

Cyber security

IT operations

Stakeholder coordination

Tools

Qualys

Tenable

Rapid7

Microsoft Defender VM

Intune

SCCM

WSUS

ServiceNow

Job description

Centrica is seeking an Analyst (Remediation) to join our team in a UK-based hybrid role with occasional travel to site. You will focus on reducing risk by remediating vulnerabilities, hardening infrastructure, and driving continuous improvement across IT environments.

You will collaborate with Security, Infrastructure, Risk, and Compliance teams to deliver practical remediation plans, automate processes, and improve incident response.