Vulnerability Management Analyst - Drive Global Security

Inspired-Thinking-Group-; Birmingham (AL); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

25 days holiday

Wellbeing Day

Family-friendly leave

Job summary

Inspired-Thinking-Group- is seeking a Vulnerability Management Analyst to join our information security team. You will help find, prioritise, and fix security vulnerabilities across our global product portfolio, configuring tools and aligning with industry benchmarks.

Occasional after-hours work for incident response may be required. The role includes design and reporting on detection and remediation activities, cross-functional collaboration with developers and engineers, and a funded training

Qualifications

• 2+ years in vulnerability management or security operations.
• Hands-on with vulnerability tooling (SAST, DAST, SCA, CSPM, IVS).
• Familiarity with Mitre ATT&CK and OWASP Top 10.
• Ability to coordinate with developers and security teams.

Responsibilities

• Configure and tune vulnerability tools across scanning tools and teams.
• Triage findings and risk-assess to prioritize remediation.
• Design secure benchmarks and guidelines for software and infra.
• Coordinate IVS, web app testing, and penetration testing programs.
• Produce regular vulnerability reporting and metrics.
• Support continuous improvement of vulnerability processes.

Skills

Vulnerability management

Security operations

Threat analysis

OWASP Top 10

MITRE ATT&CK

Code familiarity

Scripting knowledge

Tools

SAST

DAST

SCA

CSPM

IVS

CI/CD

Job description

Inspired-Thinking-Group- is seeking a Vulnerability Management Analyst to join our information security team. You will help find, prioritise, and fix security vulnerabilities across our global product portfolio, configuring tools and aligning with industry benchmarks.

Occasional after-hours work for incident response may be required. The role includes design and reporting on detection and remediation activities, cross-functional collaboration with developers and engineers, and a funded training