Vulnerability Management Analyst

Deerfoot Recruitment Solutions Limited; Lancashire; Hybrid; GBP 40,000 - 50,000; Full time

Job summary

Deerfoot Recruitment Solutions Limited is seeking a Vulnerability Management Analyst to join a hybrid team in Preston or Inverness. The role focuses on end-to-end vulnerability management, coordinating remediation with suppliers, tracking progress, and delivering actionable reporting to senior stakeholders.

The successful candidate will have strong analytical skills, experience with vulnerability management principles (CVSS, KEV) and tooling, and a proven ability to drive remediation across a

Qualifications

• Experience in cyber security, information security, service management or governance with vulnerability management principles.
• Strong analytical and reporting skills for security metrics.
• Experience engaging multiple stakeholders and suppliers to drive remediation.
• Familiarity with vulnerability management tooling in multi-supplier environments.
• Desirable: Vulnerability Management qualifications and hands-on experience with Qualys, Brinqa or Tenable.

Responsibilities

• Coordinate and track vulnerabilities from identification through to remediation and closure, ensuring progress meets agreed SLAs and escalating high-risk or overdue issues
• Engage with suppliers and technical stakeholders to obtain, validate and maintain accurate vulnerability data, ensuring consistent reporting standards and clear ownership
• Produce vulnerability reports, dashboards and metrics that give visibility of ageing vulnerabilities, recurring issues, SLA breaches and emerging trends
• Support governance and compliance by maintaining audit-ready evidence and documentation, and ensuring adherence to vulnerability management processes, policies and risk exception procedures

Skills

Vulnerability management

Security reporting

Stakeholder engagement

Analytical skills

Risk remediation tracking

CVSS KEV knowledge

SIAM governance

Tools

Qualys

Brinqa

Tenable

Job description

Vulnerability Management Analyst

Preston or Inverness (Hybrid)

40k - 50k per annum + benefits

Must be a sole UK national and eligible for Security Clearance

Are you a cyber security professional with a passion for vulnerability management? Do you thrive on coordinating remediation, engaging suppliers, and turning technical risk into clear, actionable reporting? If so, this could be your next big move.

We're recruiting on behalf of a global technology and business transformation leader, currently looking to bring five Vulnerability Management Analysts into a high-performing Security Operations team. This is a fantastic opportunity to join a growing cyber security function at a genuinely exciting time, working alongside a global network of security experts, from Architects and Engineers to Analysts and Compliance Managers.

Rather than operating the tooling directly, you'll take ownership of the process end-to-end: reviewing findings, coordinating remediation with suppliers, tracking progress, and driving timely resolution of security issues across the environment.

Key Responsibilities

• Coordinate and track vulnerabilities from identification through to remediation and closure, ensuring progress meets agreed SLAs and escalating high-risk or overdue issues
• Engage with suppliers and technical stakeholders to obtain, validate and maintain accurate vulnerability data, ensuring consistent reporting standards and clear ownership
• Produce vulnerability reports, dashboards and metrics that give visibility of ageing vulnerabilities, recurring issues, SLA breaches and emerging trends
• Support governance and compliance by maintaining audit-ready evidence and documentation, and ensuring adherence to vulnerability management processes, policies and risk exception procedures

What You'll Bring

• Experience in cyber security, information security, service management or governance, with a solid grasp of vulnerability management principles (CVSS, KEV, risk ratings and remediation tracking)
• Strong analytical and reporting skills, with the ability to produce meaningful security metrics
• Proven experience engaging multiple stakeholders and suppliers to drive remediation and performance improvements
• Familiarity with vulnerability management tooling, reporting processes and audit/assurance requirements, ideally gained within a SIAM or multi-supplier, regulated, public sector or defence environment
• Desirable: Recognised Vulnerability Management qualifications and/or hands-on experience with tools such as Qualys, Brinqa or Tenable

If you've held any of these roles or used these technologies/skills, this role could be a great fit: Vulnerability Management Analyst, Vulnerability Analyst, Cyber Security Analyst, Security Analyst, Information Security Analyst, Threat and Vulnerability Analyst, VM Analyst, Patch Management Analyst, Security Governance Analyst, Risk and Compliance Analyst, Remediation Coordinator, CVSS, KEV, Qualys, Brinqa, Tenable, SIAM, Security Operations, SecOps.