Senior InfoSec Analyst - Vulnerability Management (Remote)

Charles River; United Kingdom; On-site; GBP 70,000 - 100,000; Full time

Job summary

Charles River is seeking a Senior InfoSec Analyst for Vulnerability Management. The role is a hands-on practitioner representing the vulnerability management practice within cyber security, requiring deep knowledge of information security, operating systems, networks, cloud, and attacker TTPs.

Responsibilities include vulnerability management, reporting, remediation, continuous assessment, and penetration testing of company assets, including cloud-based and web applications.

Qualifications

• Bachelor’s degree in computer science, information technology, or related field.
• 5+ years in information security operations, vulnerability management or related discipline.
• Knowledge of OWASP, CVSS and MITRE ATT&CK framework.
• Scripting skills: Python, Bash, Perl or PowerShell.
• Security certifications (e.g., CISSP, CISA) desirable.
• Strong interpersonal and teamwork skills.

Responsibilities

• Manage vulnerabilities across applications, endpoints, databases, networking devices, and cloud and third-party assets.
• Conduct continuous discovery and vulnerability assessment of enterprise-wide assets.
• Support auditors in their duties focusing on compliance and risk reduction.
• Perform penetration tests against internal and cloud-based assets, APIs and web apps.

Skills

Vulnerability management

Information security

Python scripting

Bash scripting

PowerShell scripting

Interpersonal skills

Teamwork

Education

Bachelor's degree in computer science/IT

Job description

Charles River is seeking a Senior InfoSec Analyst for Vulnerability Management. The role is a hands-on practitioner representing the vulnerability management practice within cyber security, requiring deep knowledge of information security, operating systems, networks, cloud, and attacker TTPs.

Responsibilities include vulnerability management, reporting, remediation, continuous assessment, and penetration testing of company assets, including cloud-based and web applications.