Vulnerability Analyst

Bestman Solutions; Southampton; On-site; GBP 60,000 - 90,000; Full time

Job summary

Bestman Solutions is seeking an OT Vulnerability Analyst to strengthen vulnerability management across an industrial OT estate. You will identify, assess and track vulnerabilities in OT/ICS environments, quantify risk and collaborate with cyber, engineering and operations teams to prioritise remediation.

The role requires hands-on analysis of CVEs, CVSS scores, and vendor advisories, with a focus on operational impact.

Qualifications

• Experience in OT/ICS cyber security and vulnerability management.
• Understanding of OT environments and securing operational systems.
• Hands-on skills to identify, analyse and prioritise vulnerabilities.
• Ability to interpret CVEs, CVSS, vendor advisories and threat intel.

Responsibilities

• Identify, assess and track vulnerabilities across OT/industrial environments.
• Analyse vulnerability data and prioritise findings by asset criticality and operational impact.
• Support vulnerability scanning and assessment across OT assets and systems.
• Investigate vulnerabilities affecting industrial technologies, operating systems, network devices and infrastructure.
• Collaborate with OT, engineering, infrastructure and cyber teams to remediate.

Skills

OT/ICS cybersecurity

Vulnerability management

Industrial security

Analytical thinking

Stakeholder collaboration

Tools

Vulnerability scanning tools

OT asset discovery platforms

SCADA/ICS tooling

Job description

We’re working with a large organisation operating within a complex, highly regulated infrastructure environment. As part of continued investment in cyber security and operational resilience, they are looking for an OT Vulnerability Analyst to strengthen vulnerability management across their Operational Technology estate.

This is a hands-on role focused on identifying, assessing and managing vulnerabilities across OT environments, working closely with cyber, engineering and operational teams to understand technical exposure and prioritise remediation based on genuine operational risk.

What you’ll be doing

• Identify, assess and track vulnerabilities across OT and industrial environments.
• Analyse vulnerability data and prioritise findings based on asset criticality, exploitability and operational impact.
• Support vulnerability scanning and assessment activity across OT assets and systems.
• Investigate vulnerabilities affecting industrial technologies, operating systems, network devices and supporting infrastructure.
• Work with OT, engineering, infrastructure and cyber teams to agree appropriate remediation or mitigation actions.
• Support vulnerability prioritisation where traditional patching may not be operationally possible.
• Maintain accurate vulnerability records, risk assessments and remediation plans.
• Monitor emerging vulnerabilities, threats and vendor security advisories relevant to the OT estate.
• Provide clear reporting and insight around vulnerability exposure, remediation progress and areas of heightened risk.
• Contribute to the continued development of OT vulnerability management processes, standards and controls.

What we’re looking for

• Experience within OT/ICS cyber security, vulnerability management or industrial security.
• Strong understanding of Operational Technology environments and the challenges associated with securing operational systems.
• Hands‑on experience identifying, analysing and prioritising technical vulnerabilities.
• Understanding of vulnerability scanning, assessment and remediation methodologies.
• Knowledge of industrial networks, protocols, operating systems and infrastructure.
• Ability to interpret CVEs, CVSS scores, vendor advisories and threat intelligence and translate these into meaningful risk.
• Familiarity with security frameworks and standards relevant to OT environments, such as IEC 62443, NIST, NCSC CAF or NIS regulations.
• Strong analytical skills and the ability to prioritise vulnerabilities according to genuine business and operational impact.
• Comfortable working across cyber, engineering, infrastructure and operational teams.
• Experience working within utilities, energy, manufacturing, industrial environments or Critical National Infrastructure.
• Exposure to industrial control systems, SCADA, PLCs or related operational technologies.
• Experience with OT vulnerability management or asset discovery platforms.
• Understanding of compensating controls and vulnerability mitigation where immediate patching is not possible.
• Knowledge of OT threat intelligence and industrial cyber threats.

The opportunity

You’ll be joining an organisation continuing to invest in the security and resilience of its operational environment.

The role offers the opportunity to work across a complex OT estate, helping the organisation better understand its vulnerability exposure, prioritise meaningful risks and strengthen its overall approach to operational cyber resilience.