Senior Security Analyst - Vulnerability Management

Tesco UK; Welwyn Garden City; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

Tesco Technology is looking for a Senior Security Analyst to join their Vulnerability Management team. This position involves providing insights into security posture, prioritizing remediation efforts, and ensuring effective security controls while collaborating with various teams. The role offers a mix of on-premises and public environment responsibilities within a diverse and inclusive organization.

Benefits

Annual bonus scheme up to 20%

Colleague Clubcard discount

Holiday entitlement starting at 25 days

Retirement savings plan

Life Assurance

Buy As You Earn schemes

Discounts through Tesco and partners

Qualifications

• At least 4 years of experience in IT Security.
• Experience with vulnerability scanning tools.
• Ability to assess vulnerability criticality and risk.

Responsibilities

• Maintaining vulnerability scanning platforms.
• Prioritizing remediation efforts based on risk.
• Collaborating with engineering teams to remediate issues.

Skills

Proactivity

Resilience

Collaborative culture

Technology passion

Tools

Qualys

Tenable

Job description

About the role

Tesco Technology is seeking a Senior Security Analyst to join the Vulnerability Management team. This role offers an exciting opportunity for a security-focused individual to contribute to a large and complex organization. The successful candidate will be hands-on, focusing on the availability and reliability of data and reporting, and will collaborate with other teams to enhance prevention, detection, and remediation capabilities. The primary responsibility is to provide actionable insights into the security posture of systems and platforms, prioritizing remediation efforts and ensuring effective security controls across on-premises and public environments.

What is in it for you

We offer excellent benefits, including:

• An annual bonus scheme up to 20% of base salary
• Colleague Clubcard with a 2nd card for a family member after 6 months, with 10% off most purchases at Tesco
• Holiday entitlement starting at 25 days plus a personal day
• A retirement savings plan with 4%-7.5% contributions
• Life Assurance - 5x contractual pay
• Buy As You Earn and Save As You Earn schemes
• Deals & discounts through Tesco and external partners

You will be responsible for

• Maintaining vulnerability scanning platforms and analyzing vulnerabilities
• Prioritizing remediation efforts based on risk
• Collaborating with engineering teams to remediate issues
• Building reporting capabilities for stakeholders and leadership
• Data correlation and trend analysis
• Reviewing submissions from Bug Bounty programs
• Developing guardrails and standards to reduce vulnerabilities

You will need

• Diverse experiences and a culture of collaboration and innovation
• Proactivity and independence in operations
• Resilience and ownership of issues
• A passion for technology
• At least 4 years of experience in IT Security
• Experience with security incidents, vulnerability scanning tools like Qualys and Tenable
• Ability to assess vulnerability criticality and risk
• Expertise in networking, web services, and application testing
• Knowledge of DNS and network controls
• Up-to-date threat intelligence skills
• Experience in risk reporting and audit documentation

About us

Our vision at Tesco is to become every customer's favorite way to shop. Our core purpose is 'Serving our customers, communities, and planet a little better every day'. We value diversity, equity, and inclusion, and are committed to an accessible, inclusive recruitment process. We offer flexible working patterns and a blended approach of office and remote work, fostering collaboration and innovation.