Vulnerability Management Analyst

Amoria Bond Gruppe; Utrecht; On-site; EUR 60,000 - 80,000; Full time

Job summary

Amoria Bond Gruppe is seeking a Vulnerability Management Analyst to identify, assess, and mitigate security weaknesses across our network and infrastructure. You will work with IT, development, and security teams to prioritize and drive remediation, while maintaining processes and reporting on risk trends.

The role requires hands-on experience with vulnerability scanning tools, CVSS/CVE frameworks, and SIEM platforms, with a proactive approach to staying ahead of threats and ensuring regulatory

Qualifications

• Experience with vulnerability scanning and remediation.
• Understanding of CVSS/CVE risk scoring and prioritization.
• Knowledge of networking, infrastructure and security principles.

Responsibilities

• Perform regular vulnerability scanning across systems, networks, and apps.
• Evaluate risks and prioritize remediation based on CVSS/CVE scoring.
• Collaborate with IT, development and security teams for timely fixes.
• Maintain vulnerability management processes and compliance standards.
• Generate reports and dashboards communicating status to stakeholders.
• Stay current with threats and remediation techniques.

Skills

Vulnerability scanning

CVSS/CVE risk assessment

Networking & security concepts

SIEM & reporting tools

Analytical problem solving

Cross-functional collaboration

Education

Bachelor's degree in Cybersecurity or IT

Tools

Nessus

Qualys

Rapid7

SIEM platforms

Job description

Vulnerability Management Analyst

Overview

This opportunity is for an end client seeking a dedicated and detail-oriented Vulnerability Management Analyst to join their diverse and inclusive cybersecurity team. In this role, you will play a critical part in identifying, assessing, and mitigating vulnerabilities across their network and infrastructure. The client celebrates diversity and is committed to creating an equitable workplace where all employees feel valued and empowered.

Responsibilities

• Conduct regular vulnerability scanning across systems, networks, and applications using industry-standard tools.
• Evaluate and prioritize vulnerabilities based on CVSS/CVE risk assessments to guide remediation efforts.
• Collaborate with cross-functional teams including IT, development, and security to ensure timely remediation of identified vulnerabilities.
• Maintain and improve vulnerability management processes, ensuring compliance with organizational policies and regulatory standards.
• Generate comprehensive reports and dashboards to communicate vulnerability status to stakeholders at all levels.
• Stay current with emerging threats, vulnerabilities, and remediation techniques to continuously improve security posture.
• Participate in security awareness and training initiatives to promote a culture of security within the organization.
• Support incident response activities related to vulnerability exploitation when necessary.

Qualifications

• Proven experience in vulnerability scanning and management using tools such as Nessus, Qualys, or Rapid7.
• Strong understanding of CVSS/CVE frameworks and the ability to perform risk assessments.
• Solid knowledge of networking, infrastructure, and security concepts.
• Familiarity with security information and event management (SIEM) tools and reporting platforms.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work collaboratively in a diverse team environment and contribute to an inclusive workplace culture.
• Relevant certifications such as CISSP, CEH, or CompTIA Security+ are a plus.
• Bachelor's degree in Cybersecurity, Information Technology, or related field preferred but not required.

Day-to-Day

• Perform scheduled vulnerability scans and analyze the results.
• Communicate with IT and business units to prioritize and track remediation efforts.
• Update and maintain vulnerability databases and documentation.
• Prepare detailed reports for management highlighting trends, risks, and mitigation progress.
• Attend team meetings and training sessions to stay informed of policy updates and industry best practices.
• Respond promptly to urgent vulnerability discoveries or potential exploitation incidents.

The end client encourages applicants from all backgrounds and is committed to equal opportunity employment. Join them to help build a safer digital environment where every voice is heard and respected.

No terminology in this advert is intended to discriminate on the grounds of age or experience, and we confirm that we are happy to accept applications from persons of any age or experience for this role.