Vulnerability Analyst – Security Vendor

Trilaty Group; United Kingdom; Remote; GBP 40,000 - 65,000; Full time

Job summary

A leading IAM security vendor is seeking a security operations specialist responsible for managing vulnerabilities and ensuring the organization’s overall security posture. The role includes working with development teams, conducting vulnerability assessments, and providing strategic recommendations to enhance security measures within a flexible working environment.

Benefits

Competitive salary & flex benefits

Flexible work locations

Qualifications

• Experience in a Threat and Vulnerability related role required.
• Ability to influence multiple stakeholders is essential.
• Strong foundation in network security and common attack methodologies.

Responsibilities

• Overseeing vulnerability management and operations.
• Create reports and perform data analysis on vulnerabilities.
• Provide advice on patching recommendations and manage remediation processes.

Skills

Information Security best practice

Security vulnerabilities knowledge

Infrastructure and web application scanning

Network security

Technical Infrastructure understanding

Secure by design principles

Analytical skills

Communication skills

Willingness to learn

Interpersonal skills

Tools

Qualys

Job description

Role overview:

Working for an IAM security vendor, you’ll be responsible for supporting the SOC Manager and overseeing the company’s Security Operations activity, including vulnerability management activities

Main tasks and responsibilities:

• Help to define and shape the company’s technical assurance capabilities through penetration testing/vulnerability management and DevSecOps
• Work closely with Dev/Ops teams across the company to identify and correct security vulnerabilities based on risk to the business
• Operate vulnerability management tooling in conjunction with the company’s service provider
• Work with external parties with development of external and internal vulnerability testing capabilities
• Working alongside security engineers, support external penetration testing prioritising findings based on risk
• Follow up on reports and ensuring recommendations for threat remediation are followed
• Providing advice to IT teams across the business on patching recommendations in relation to identified threats
• Stay informed of new vulnerabilities that could impact the business
• Create reports and analysis for technical teams and senior management
• Review and analyse vulnerability data to identify trends and patterns, and link asset and vulnerability data
• Monitoring and respond to vendor and security research notifications of vulnerabilities and assessing the exposure of the business.
• Work with other security teams such as SOC to identify risks & recurring patterns and propose actions to reduce risk

Skills:

• Should have excellent understanding of Information Security best practice and regulatory requirements and should have recent experience in a Threat and Vulnerability related role
• Must be familiar with security vulnerabilities e.g. cloud/on-prem/endpoint
• Familiar with infrastructure and web application scanning tools e.g. Qualys
• Have a sound understanding of network/infrastructure and web/mobile application weakness (CWE, OWASP)
• Strong foundation in network security and common attack methodologies
• Good all-round understanding of Technical Infrastructure, Cloud and Network Technology developed via hands-on experience
• Knowledge of secure by design principles
• Understanding of industry standards ISO2701. PCI-DSS etc
• Ability to support security incidents and investigations

Pre-requisites:

• Excellent analytical skills with the ability to see the bigger picture
• Excellent communication skills with the ability to influence multiple stakeholders
• Willingness to learn and adapt to new technologies coupled with a passion for cyber security
• Good team-oriented interpersonal skills, with the ability to interface effectively with a broad range of people and roles
• Willing to work flexible hours to communicate with teams globally

Further info:

• Competitive salary & flex bens
• Flexible locations / remote

To apply:

Please either register your CV and complete the information fields requested or send your CV to [e-mail] referencing WDA153 and your current salary