Analyst - Vulnerability Management

Boardroom Appointments; Johannesburg; On-site; ZAR 420,000 - 660,000; Full time

Job summary

Boardroom Appointments is seeking an Analyst - Vulnerability Management to join our security team in Johannesburg. You will assess risk, analyze threats, and help design mitigating strategies in coordination with IT and business units.

The role requires hands-on experience with vulnerability management tools and security frameworks, plus scripting skills for automation. You will stay current with threats and contribute to blue-team exercises to strengthen cyber resilience.

Qualifications

• 5–7 years in risk management and identifying mitigating strategies.
• 5–7 years IT understanding and insight into digital/platform operating models and cyber security trends.
• 8–10 years experience in technical and business management; databases, operating systems, and network security controls.
• Research and stay updated on application security threats, tools, techniques and mitigation strategies.
• Familiarity with OWASP, MITRE ATT&CK, SANS, or other security frameworks and with threat modeling concepts.
• Experience with vulnerability management and scanning tools such as Rapid7, Qualys, Nessus, Tenable.
• Familiarity with SIEMs, EPP/EDR, TIP, OSINT tools.
• Proficiency in scripting languages (Python, PowerShell, Bash, Ruby) and testing tools like Burp Suite, Metasploit, Cobalt Strike, Kali Linux, PowerShell Empire, AutoSploit.

Responsibilities

• To provide expert professional knowledge and technical skills within a specialist area.
• To execute the bank's information security initiatives, enabling management to make the appropriate decisions and monitoring the protection of sensitive data and systems.

Skills

Risk management

IT security

Threat intel

Scripting

Frameworks (OWASP/ATT&CK)

Vulnerability tools

Blue/Purple team

Automation/Testing

Tools

Rapid7

Qualys

Nessus

Tenable

SIEM/SOC tools

Burp Suite

Metasploit

Kali Linux

PowerShell Empire

AutoSploit

Job description

About the job Analyst - Vulnerability Management

• 5-7 years Experience in risk management and identifying mitigating strategies and plans
• 5-7 years Strong IT understanding, gaining insight into digital and platform operating models and cyber security trends and solutions
• 8-10 years Experience in technical and business management; databases, operating systems, and network security controls
• Research and keep up to date on application security threats and vulnerabilities, tools, techniques and procedures, trends, and mitigation strategies.
• Working knowledge of OWASP, the MITRE ATT&CK framework, SANS, or other security-related frameworks and familiarity with application threat modeling or other risk identification techniques and Support purple teaming exercises designed to build cyber resiliency across disparate security teams.
• Familiarity with vulnerability management and scanning tools such as Rapid7, Qualys, Nessus, Tenable.
• Familiarity with defensive technologies such as security information and event management systems (SIEMs), endpoint protection (EPP) and endpoint detection/response (EDR) tools, threat intelligence platforms (TIP), and open-source intelligence (OSINT) tools.
• Proficiency in scripting languages such as Python, PowerShell, Bash and Ruby is an added advantage and competency with testing frameworks and tools such as Burp Suite, Metasploit, Cobalt Strike, Kali Linux, PowerShell Empire and AutoSploit is an added advantage.

Responsibilities:

• To provide expert professional knowledge and technical skills within a specialist area.
• To execute the bank's information security initiatives, enabling management to make the appropriate decisions and monitoring the protection of sensitive data and systems.