Vulnerability Analyst - SC Cleared

Computacenter PLC; Nottingham; On-site; GBP 42,000 - 58,000; Full time

Job summary

Computacenter PLC is seeking a Vulnerability Analyst to strengthen our security posture for customer environments. You will identify and assess vulnerabilities across supported products, driving timely remediation through our vulnerability lifecycle process using industry tools and best practices.

Collaborate with technical and non-technical teams, coordinate emergency patching, and translate complex security issues into business-friendly updates.

Qualifications

• Experience with vulnerability assessments and remediation planning.
• Familiarity with vulnerability lifecycle management processes.
• Strong analytical skills and attention to detail.
• Excellent written and verbal communication, able to explain complex security topics to non-technical stakeholders.
• SC clearance or ability to obtain it.

Responsibilities

• Identify and assess vulnerabilities across supported products.
• Coordinate remediation following the Vulnerability Lifecycle Management process.
• Utilise Qualys and Tenable for scanning and validation.
• Co-ordinate responses to vulnerability incidents and communicate outcomes.
• Stay informed on emerging threats and provide mitigation recommendations.
• Collaborate with cross-functional teams to enforce security policies and patching.
• Translate security concepts into clear business communications.

Skills

Vulnerability assessment

Incident response

Analytical thinking

Communication

Collaboration

Tools

Qualys

Tenable

Job description

As part of our vulnerability management team, you'll join a supportive group of professionals dedicated to protecting our customers. Your work will involve analysing the latest threats and carefully directing potential issues to the right technical teams for swift fixes. You'll stay on the cutting edge of vulnerability knowledge, ensuring our defences stay strong. This role is perfect for someone who enjoys critical thinking and problem-solving. You will collaborate across departments under our established vulnerability management process, directly contributing to the security and well-being of our customers and working with us to develop the service further with your valuable input and ideas.

What you'll do: As a Vulnerability Analyst, you will play a critical role in safeguarding our customers systems. You will handle identifying and assessing vulnerabilities across customer supported products, ensuring timely remediation following our industry aligned vulnerability lifecycle management process. Your ability in Qualys and Tenable scanning tools will be important in this role.

Vulnerability Assessment and Management

• May conduct vulnerability assessments using Qualys and Tenable scanning tools.
• Analyse scan results to identify vulnerabilities against a defined list of supported products 'Vulnerability Lifecycle Management Product Lists (VLMPLs)'.

Incident Response and Communication

• Co-coordinate responses to vulnerability incidents.
• Issue timely notifications and communications related to security vulnerabilities.

Proactive Identification and Mitigation

• Stay informed about emerging threats and vulnerabilities from vendors, threat intelligence, and subscriptions.
• Assess potential impacts and recommend mitigating actions.
• Implement best practices for vulnerability treatment, including working with our operational teams to ensure policy enforcement, system hardening, patching, and fixes.

Collaboration and Coordination

• Work closely with technical and non-technical teams.
• Coordinate emergency patching efforts when required.
• Translate complex security matters into clear, business-friendly communications for diverse audiences.
• UK SC Clearance or ability to gain SC.
• Stay up to date with the latest information technology security bulletins.
• Perform validation and closure activities upon completion of corrective mitigation actions.
• Preferably experience with Qualys and/or Tenable scanning tools.
• Strong analytical skills and attention to detail.
• Excellent communication skills, both technical and non-technical.
• Support the continuous improvement and development of our vulnerability service.