Vulnerability Management Analyst

Covenant HR; South Africa; Remote; ZAR 1.167.000 - 1.667.000; Vollzeit

Zusammenfassung

Covenant HR LLC is seeking a Vulnerability Management Analyst for a leading global technology and consulting organization. This 100% remote role covers the EMEA region, focusing on vulnerability triage, exposure assessment, and risk determination across diverse environments.

You will evaluate CVE/CPE/CVSS, coordinate with teams across Microsoft, VMware, Oracle/Java, Citrix, and cloud platforms, and document audit-ready findings with remediation recommendations.

Qualifikationen

• Hands-on vulnerability management and triage with exposure assessment.
• Expertise in CVE, CPE, CVSS and risk rating methodologies.
• Experience across Microsoft, VMware, Oracle/Java, Citrix, F5, and cloud platforms.
• Strong audit-ready documentation and communication skills.

Aufgaben

• Review, analyze, and triage newly disclosed vulnerabilities in complex environments.
• Determine impact on customer applications and assets.
• Evaluate exploitability with threat intel and advisories.
• Assign risk ratings using CVE, CVSS, and client criteria.
• Assess patch availability and remediation options.
• Develop audit-ready vulnerability assessments with findings and recommendations.
• Identify critical vulnerabilities needing immediate attention.
• Collaborate with globally distributed cybersecurity teams.
• Support ongoing vulnerability management operations and handoffs.
• Contribute to a 24x5 triage operation within the EMEA coverage model.

Kenntnisse

Vulnerability triage

CVE/CPE/CVSS risk

Enterprise tech knowledge

Audit-ready documentation

Jobbeschreibung

Company

Our client is a leading global technology and consulting organization specializing in cybersecurity, digital transformation, and mission-critical enterprise solutions. They support complex technology environments and help organizations strengthen security, manage risk, and improve operational resilience.

Job Title

Vulnerability Management Analyst

Location

100% Remote (EMEA Region)

Must Have Skills

• Hands-on vulnerability management and triage experience, including assessing newly disclosed vulnerabilities, identifying affected assets, and determining enterprise exposure and impact.
• Strong expertise in CVE, CPE, CVSS, and risk assessment methodologies, including evaluating exploitability, threat intelligence, proof-of-concept exploits, and assigning defensible risk and severity ratings.
• Broad enterprise technology knowledge across Microsoft, VMware, Oracle/Java, Citrix, F5, cloud environments, and enterprise open-source technologies, including patch management and software release lifecycles.
• Excellent technical documentation and communication skills, with the ability to produce accurate, audit-ready vulnerability assessments detailing exposure, impact, risk rationale, remediation recommendations, and escalation requirements.

Responsibilities and Job Details

• Review, analyze, and triage newly disclosed vulnerabilities across complex enterprise technology environments.
• Determine whether identified vulnerabilities impact customer applications, infrastructure, platforms, or other enterprise assets.
• Evaluate vulnerability exploitability using threat intelligence, published advisories, proof-of-concept exploits, and potential attack paths.
• Assess organizational exposure and assign appropriate risk and severity ratings using CVE, CPE, CVSS, and client-specific risk assessment criteria.
• Analyze vulnerabilities affecting Microsoft, VMware, Oracle/Java, Citrix, F5, cloud platforms, and enterprise open-source technologies.
• Evaluate patch availability, vendor advisories, software release lifecycles, and potential remediation options.
• Develop and maintain comprehensive, audit-ready vulnerability assessments, including technical findings, business impact, risk justification, and recommended actions.
• Identify and escalation critical or high-risk vulnerabilities requiring immediate attention or further investigation.
• Support ongoing vulnerability management operations, ensuring timely analysis and consistent assessment quality.
• Collaborate with globally distributed cybersecurity teams to maintain effective communication, documentation, and shift handoffs.
• Contribute to a 24x5 global vulnerability triage and assessment operation, working an anticipated 40-hour week within the EMEA coverage model.