Vulnerability Management Analyst

Ocho People Ltd.; Belfast City District; Hybrid; GBP 50,000 - 80,000; Full time

Benefits offered by this job

Annual leave 25d

Medical insurance

Pension 8%

Life insurance 4x salary

Income protection

Virtual GP

Flexible working

Gym membership

Employee assistance

Career development

Social clubs

Job summary

Ocho People Ltd. in Belfast is seeking a Vulnerability Management Analyst to own the vulnerability programme, analysing, prioritising and guiding remediation across the technology estate.

You will partner with technology teams and report to Security Engineering Manager and Vulnerability Management Architect, delivering risk-based insights and metrics. Responsibilities include running scans, validating findings, monitoring advisories, and building dashboards and training materials.

Qualifications

• Hands-on experience with enterprise vulnerability management platforms.
• Strong understanding of CVSS, CWE, MITRE ATT&CK.
• Ability to assess and prioritise risk at enterprise scale.
• Foundational knowledge of Windows, Linux and networking.

Responsibilities

• Run regular vulnerability scans across applications and infrastructure.
• Validate and prioritise findings from security tooling and cut false positives.
• Monitor security advisories, threat intel and vendor notifications.
• Provide risk-based guidance and track remediation against SLAs.
• Manage vulnerability exceptions and risk acceptance.
• Build dashboards, reports and executive-level metrics.
• Contribute to internal training materials and documentation.

Skills

Vulnerability management

Threat intelligence

Risk assessment

Communication skills

SOC experience

Education

Bachelor's degree in Computer Science or related field

CISSP

Tools

Nessus

Qualys

Threat intelligence platforms

Job description

Vulnerability Management Analyst

The opportunity

Our client, a global professional services firm, is looking for a Vulnerability Management Analyst to become the go-to expert in their vulnerability management programme. You'll analyse, categorise and prioritise security vulnerabilities across the firm's technology estate, working as a trusted partner to technology teams to drive remediation and reduce cyber risk. You'll report to the Security Engineering Manager and Vulnerability Management Architect.

What you'll be doing

• Running regular vulnerability scans across applications and infrastructure
• Validating and prioritising findings from security tooling, cutting out false positives
• Monitoring security advisories, threat intelligence and vendor notifications
• Providing risk-based guidance and tracking remediation against SLAs
• Managing vulnerability exceptions and risk acceptance
• Building dashboards, reports and executive-level metrics
• Contributing to internal training materials and documentation

Experience

• Expert, hands-on experience with enterprise vulnerability management platforms
• Strong understanding of CVSS, CWE and MITRE ATT&CK
• Experience with threat intelligence, attack surface and exposure management platforms
• The ability to assess and prioritise risk at enterprise scale, in line with wider business priorities
• Foundational knowledge of Windows, Linux and networking
• Confidence carrying out independent threat research and adapting quickly as the landscape shifts
• Excellent communication skills, with the ability to explain complex issues to non-technical audiences
• Enterprise SOC experience is highly desirable

Qualifications

• CISSP (essential)
• Computer Science degree or equivalent experience
• Further certifications such as GIAC (GMON/GVCA), Microsoft SC-900/SC-200, Security+ or CEH

Benefits

• 25 days' annual leave plus bank holidays, rising with service up to 28 days
• Private medical insurance
• Contributory pension with employer matching up to 8%
• Life assurance at 4x basic salary
• Income protection
• 24/7 virtual GP for you and your family
• Flexible and agile working options
• Corporate gym membership,
• Employee assistance programme
• Career development opportunities, recognition awards and a referral scheme
• Social clubs and committees