Vulnerability Management Analyst — Onsite Security Lead

J C Bamford Excavators Ltd; Rocester; Hybrid; GBP 45,000 - 65,000; Full time

Benefits offered by this job

ULEV car scheme

Rewards hub

Cycle to Work Scheme

On-site gym

In-house medical

Job summary

J C Bamford Excavators Ltd (JCB) is seeking a detail-oriented Vulnerability Management Analyst to join our on-site Information Security team. You will identify, assess and mitigate vulnerabilities across IT, OT, Cloud and SaaS environments, working with infrastructure, application and operations teams to remediate security risks.

You will manage the vulnerability management process, perform scans with industry-standard tools, coordinate third-party penetration tests, and report progress to

Qualifications

• Experience in vulnerability management or as Security Analyst/Engineer.
• Strong understanding of vulnerability scanning tools and techniques.
• Familiar with CVSS scoring and vulnerability prioritisation techniques.
• Knowledge of patch management processes and secure system configurations.
• Familiar with OT environments is a plus.
• Understanding of security frameworks such as NIST, and Cyber Essentials.
• Ability to work independently in a fast-paced, on-site environment.
• Strong analytical mindset and communication skills.
• Understanding of IT Service Management principles ideally ITIL.

Responsibilities

• Manage the Vulnerability Management Process and Platform globally.
• Perform regular vulnerability scans and testing across IT, OT and SaaS systems using industry-standard tools.
• Arrange and Manage 3rd Parties for Security Penetration Tests on internal and external systems.
• Analyse scan results, prioritise vulnerabilities, and coordinate remediation efforts with relevant teams – see through to completion.
• Maintain and improve the vulnerability management lifecycle and reporting processes.
• Feed in to Risk Register and other teams for immediate and future improvements.
• Track and report on remediation progress and risk posture to senior stakeholders.
• Collaborate with IT and engineering teams to ensure secure configurations and patch management – find the root causes of issues and work to resolve.
• Support compliance alignment with NIST, and Cyber Essentials.
• Assist in threat modelling and risk assessments.
• Maintain documentation and procedures related to vulnerability management.
• Seek out and exploit opportunities for improvement to the group’s overall security posture.

Skills

Vulnerability management

Security Analyst/Engineer

Vulnerability scanning tools

CVSS scoring

Patch management

Secure configurations

NIST

Cyber Essentials

ITIL

Analytical mindset

Communication skills

Job description

J C Bamford Excavators Ltd (JCB) is seeking a detail-oriented Vulnerability Management Analyst to join our on-site Information Security team. You will identify, assess and mitigate vulnerabilities across IT, OT, Cloud and SaaS environments, working with infrastructure, application and operations teams to remediate security risks.

You will manage the vulnerability management process, perform scans with industry-standard tools, coordinate third-party penetration tests, and report progress to