Cybersecurity Vulnerability Management Analyst

Working on behalf of a Local Authority, Aatom Recruitment has a new opportunity for a Cybersecurity Vulnerability Management Analyst on a 3 months contract with the possibility of further extension.

Main purpose of the role

Cybersecurity Vulnerability Management Analyst is primarily responsible for vulnerability assessment, impact, and risk assessment, as well as collaborating with multiple teams in the organisations to address appropriate remediation against assets and applications components.

Main responsibilities

• Responsible for reviewing the vulnerability data from multiple sources (i.e. internal, external, or penetration testing.) across multiple technologies.
• Responsible for identifying the list of assets and/or application(s) at risk.
• Responsible for proactively collaborating with remediation teams and engineers to address and resolve outstanding findings within agreed timeframes.
• Responsible for prioritizing remediation tasks based on risk level, assign them to the relevant system owner, facilitate timely resolution of outstanding findings, and monitor progress until completion.
• Manage the triage of vulnerabilities, ensuring mitigation measures are implemented, and managing the life cycle of vulnerability management for a set of assets, providing tailored advice on ways to improve control mechanisms and mitigate risks.
• Promote vulnerability management standards, procedures & guidelines, and best practices outside the security functions.
• Develop and document processes and procedures for teams to use and to enhance efficiencies.
• Document the vulnerability providing a write up on the risk and exposure.
• Conduct vulnerability scans as directed by management.

Requirements

• Demonstrable hands-on experience in vulnerability management in one of the following roles – Vulnerability Analyst/Specialist/Engineer
• Demonstrable hands-on experience with Rapid7 / Acunetix or similar vulnerability platforms.
• Possess critical thinking and problem solving, multi-tasking, and prioritization skills.
• Strong written and verbal communication skills to effectively collaborate with cross-functional teams and stakeholders, including the ability to relate technical information to a non-technical audience.
• Experience with Agile and experience working to manage remediation actions via an active backlog.
• Ability and willingness to learn modern technologies and adapt to evolving security landscapes
• Capability to understand the bigger picture while effectively managing details
• Stay abreast of current industry trends relevant to the business and cybersecurity

If you are interested, please apply or contact Pocholo for more information!