Senior Analyst - Vulnerability Management (Contract)

GCS Recruitment; United Kingdom; On-site; GBP 60,000 - 80,000; Full time

Job summary

GCS Recruitment is seeking a Senior Analyst for Vulnerability Management to work on a contract basis in London. The successful candidate will lead efforts in vulnerability identification and remediation across IT and cloud environments, improving the organization’s ability to handle cyber threats.

This hybrid role requires strong experience in vulnerability management, hands-on tool expertise, and excellent stakeholder management skills. The contract duration is 6 months with inside IR35 engagement.

Qualifications

• Strong experience in vulnerability management or security operations.
• Hands-on experience with vulnerability management tools such as Tenable, Qualys, or similar.
• Good understanding of CVSS scoring and exploitability.

Responsibilities

• Operate and enhance the vulnerability management lifecycle.
• Perform and coordinate regular vulnerability scans.
• Provide detailed reporting on risk posture and remediation progress.

Skills

Vulnerability management

Security operations

Stakeholder management

Communication skills

Tools

Tenable

Qualys

Rapid7

Job description

Overview

Senior Analyst - Vulnerability Management (Contract)
Location: London (hybrid)
Duration: 6 months
Engagement: Inside IR35

A Senior Vulnerability Management Analyst is required to drive vulnerability identification, prioritisation, and remediation across enterprise IT and cloud environments. This role will improve the organisation's ability to manage exposure to cyber threats through robust vulnerability processes.

Key Responsibilities

• Operate and enhance the vulnerability management lifecycle (scan, assess, prioritise, remediate, report)
• Perform and coordinate regular vulnerability scans across infrastructure, applications, and cloud environments
• Analyse vulnerabilities and provide risk-based prioritisation aligned to business impact
• Work with IT and engineering teams to track and drive remediation efforts
• Provide detailed reporting on risk posture, remediation progress, and trends
• Integrate vulnerability management with threat intelligence and risk management processes
• Support the implementation of tooling and automation improvements
• Ensure alignment with frameworks such as NIST CSF, ISO 27001, and CIS benchmarks

Key Requirements

• Strong experience in vulnerability management or security operations
• Hands-on experience with tools such as Tenable, Qualys, Rapid7, or similar
• Good understanding of CVSS scoring, threat context, and exploitability
• Experience working with infrastructure, cloud environments, and application security teams
• Ability to translate technical findings into business risk insights
• Strong stakeholder management and communication skills

Desirable

• Knowledge of patch management processes and remediation workflows
• Experience with cloud security (Azure/AWS/GCP)