Senior Security Analyst - Vulnerability Management

Tesco UK; Welwyn Garden City, Greater London; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading retail company in the UK is seeking a Senior Security Analyst to support their security posture. This hybrid role involves maintaining vulnerability scanning platforms, working closely with engineering for issue remediation, and driving security innovation. Candidates should have over 4 years of IT Security experience, knowledge of vulnerability scanning tools like Qualys and Tenable, and the ability to communicate risk effectively. Competitive benefits include a bonus scheme and a robust retirement savings plan.

Benefits

Annual bonus scheme up to 20% of base salary

Colleague ClubCard with discounts

25 days holiday plus a personal day

Retirement savings plan with contributions

Life assurance – 5 times contractual pay

Qualifications

• 4+ years of experience in the IT Security industry.
• Experience with responding to security incidents in large‑scale corporate environments.
• Expert knowledge of DNS preventive network controls.

Responsibilities

• Maintain vulnerability scanning platforms.
• Prioritize remediation efforts based on risk.
• Work with engineering teams to fix security issues.

Skills

Experience with vulnerability scanning tools

Ability to categorize criticality and risk of vulnerabilities

Expertise in networking

Intelligence gathering

Tools

Qualys

Tenable

Job description

Tesco UK

• Welwyn Garden City
• Hybrid
• Full-Time

Overview

Tesco Technology is looking for a Senior Security Analyst reporting into the Vulnerability Management team. This role provides an exciting opportunity for a highly motivated security-focused individual to join our expanding organisation. Your responsibility will be to support the security posture of our systems and platforms, prioritizing remediation activities and ensuring effective security controls and guardrails across our on‑prem and public environments.

The role will involve being hands‑on with a focus on the availability and reliability of our data and reporting while having the freedom to leverage your knowledge and real‑world experience to collaborate with other teams and drive innovation across our prevention, detection, and remediation capabilities.

Responsibilities

• Maintain vulnerability scanning platforms to identify and analyze vulnerabilities.
• Take a risk‑based approach to prioritize remediation efforts.
• Work with engineering teams to remediate issues.
• Build reporting capabilities to inform stakeholders on the status and progress of VM remediation efforts up to leadership and C‑level.
• Perform data correlation and identify patterns and trends.
• Review submissions from active Bug Bounty programs.
• Develop guardrails and standards to reduce exposure to vulnerabilities.

Qualifications

• 4+ years of experience in the IT Security industry.
• Experience with responding to security incidents in large‑scale corporate environments.
• Experience with vulnerability scanning tools such as Qualys, Tenable, etc.
• Ability to categorize criticality and risk of a vulnerability.
• Expertise in networking, web services and application testing.
• Expert knowledge of DNS preventive network controls.
• Intelligence gathering and keeping up to date with current and evolving threats.
• Reporting at various levels to communicate risk, compliance and remediation activities.
• Produce and maintain evidence for audit and governance reporting.

Benefits

• An annual bonus scheme which can achieve up to 20% of base salary.
• Colleague ClubCard (including a second card for a family member) after 6 months service with 10% off most purchases at Tesco.
• Holiday starting at 25 days plus a personal day.
• Retirement savings plan with 4%–7.5% contribution rate.
• Life assurance – 5 × contractual pay.
• Buy‑as‑you‑earn and Save‑as‑you‑earn schemes.
• Deals and discounts through Tesco, Tesco Mobile and Tesco Bank.
• Deals and discounts through many other external businesses.

About us

Our vision at Tesco is to become every customer's favourite way to shop, whether they are at home or out on the move. Our core purpose is "Serving our customers, communities and planet a little better every day". We are committed to serving our customers, communities and planet responsibly and sustainably. Diversity, equity and inclusion (DE&I) at Tesco means that whoever you are and whatever your background, we always want you to feel represented and that you can be yourself at work. We are proud to have been accredited Disability Confident Leader and are committed to providing a fully inclusive and accessible recruitment process. We offer a range of diverse full‑time and part‑time working patterns across our many business areas, and we can find something that works for you. We work in a more blended pattern – combining office and remote working. Our offices will continue to be where we connect, collaborate and innovate.