Vulnerability Analyst

Life on the team

You will join Computacenters Cyber Security Group and support the delivery of its global Vulnerability Management capability. Working with Cyber Threat Intelligence and technical resolver teams, you will help identify, assess and prioritise vulnerabilities, support remediation, and reduce cyber exposure across the organisation.

What you’ll do

• Manage day-to-day vulnerability identification, assessment, prioritisation and alerting activities.
• Analyse vulnerability intelligence feeds and emerging threats to inform remediation priorities.
• Provide technical guidance to resolver teams for remediating vulnerabilities and security weaknesses.
• Support vulnerability investigations linked to cyber security incidents and the Cyber Security Incident Response Team.
• Prepare accurate, actionable vulnerability metrics and reports for senior management and key stakeholders.
• Conduct vulnerability exposure reviews with technical teams across different business areas.
• Monitor evolving cyber threats, vulnerabilities and threat-actor tactics, techniques and procedures.
• Identify opportunities to improve vulnerability management processes, technologies and operational effectiveness.

What you’ll need

• 5–8 years of experience in Information Security or Cyber Security, with strong exposure to Vulnerability Management.
• Practical knowledge of vulnerability analysis, risk assessment, prioritisation and remediation.
• Experience with enterprise environments covering Windows, Linux, cloud and networking technologies.
• Understanding of IT operations, including asset, configuration and patch management.
• Knowledge of endpoint, network and cloud security vulnerabilities and associated threats.
• Familiarity with security standards and frameworks such as CIS, NIST, ISO 27001, Cyber Essentials, PCI DSS and GDPR.
• Understanding of MITRE ATT&CK, MITRE D3FEND, Cyber Kill Chain, APTs and threat-actor TTPs.
• Knowledge of incident response, threat hunting and cyber-risk management methods.
• Strong analytical, reporting, stakeholder-management and written communication skills.
• Ability to explain complex technical risks in a clear business context and manage competing priorities in a fast-paced environment.