Vulnerability Analyst

About the role

We are seeking a Vulnerability Analyst to join our Cybersecurity team. The role focuses on identifying, assessing, prioritising and coordinating remediation of security vulnerabilities across complex enterprise environments, with a strong emphasis on automation, cloud security and continuous monitoring.

Key responsibilities

• Conduct vulnerability assessments and security scans across infrastructure, applications and systems.
• Manage and optimise Tenable.io / Tenable.sc for continuous scanning and monitoring.
• Use Wiz Cloud to identify, analyse and prioritise cloud‑security risks.
• Analyse findings based on risk, exposure, business impact and CVE/CVSS scores.
• Coordinate remediation activities with IT, DevOps, Cloud and Engineering teams.
• Track findings and progress through JIRA and ServiceNow.
• Recommend compensating controls when immediate fixes are not possible.
• Automate vulnerability‑management tasks with scripting and automation tools.
• Maintain metrics, dashboards and reports for technical stakeholders.
• Perform trend analysis and contribute to policy improvement.

Required profile

• 2–3+ years of hands‑on experience in vulnerability management, cybersecurity or security analysis.
• Strong English proficiency (B2 or higher) for technical meetings and documentation.
• Ability to work with multidisciplinary, international teams.

Required skills

• Tenable.io or Tenable.sc
• Wiz Cloud
• OWASP Top 10, CVE, CVSS
• Windows, Linux and/or Unix environments
• Network and cloud security principles
• Python, PowerShell, Bash (or similar scripting languages)
• JIRA, ServiceNow
• Knowledge of NIST, ISO 27001, PCI‑DSS and/or HIPAA frameworks