Job Description

Role: Cyber Security Vulnerability Analyst

Location: London, Manchester or Bristol (3 days/week onsite)

IR35: Inside

Rate: £850/day (Umbrella) MAX

Duration: 31.3.25 initially

Security Clearance: SC

The primary focus of the role will be delivering the core security operations of vulnerability management. Key outcomes from the role are the delivery of seamless vulnerability management service into infrastructure and business units, verifying the effectiveness of estate-wide security measures.

The focus, outcomes and responsibilities are aligned to the Government Security Profession Framework.

As a cyber security vulnerability analyst, you will:

• Manage the operation and roll out of one or more vulnerability identification and assessment capabilities across the on-premise and cloud-based IT estate and digital services
• Coordinate the triage and remediation of identified vulnerabilities using a risk-based approach, working closely with service teams and developers to ensure that appropriate mitigation measures are implemented
• Work closely with other teams across Cyber Security and the wider organisation to proactively reduce cyber security vulnerabilities
• Produce regular reporting which delivers insights on vulnerability management activities and the impact on cyber security risk
• Establish a detailed understanding of data security and architectures enabling the delivery of consistent security advice
• Define requirements for improving and expanding our security tooling
• Develop and update internal plans, processes, and knowledge base articles

Who you are

We’re interested in people who have strong vulnerability management experience, including:

• Experience developing, implementing and operating vulnerability management capabilities using Tenable One
• Experience using a variety of sources of information to identify, analyse and report on relevant threats and vulnerabilities.
• Experience deploying, configuring and using vulnerability assessment (such as Tenable and the NCSC’s Active Cyber Defence Toolkit) and Attack Surface Management tools
• Excellent stakeholder management skills
• Excellent verbal and written communication skills, and the ability to communicate technical security issues to both technical and non-technical stakeholders
• Experience with cloud environments such as AWS and Azure

It’s also desirable that you have:

• Experience with bug bounty programmes and platforms
• Experience with digital brand protection
• Experience investigating and responding to cyber incidents

ability to work as part of a team in a multidisciplinary environment

Security Clearnce: SC

Disability Confident

As a member of the disability confident scheme, CLIENT guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group.

Armed Forces Covenant   

CLIENT is proud to support the Armed Forces Covenant and as such, we guarantee to interview all veterans or spouses / partners of military personnel who meet all the essential criteria for the vacancy. In cases where we have a high volume of ex-military candidates / military spouses or partners, who meet all of the essential criteria, we will interview the best candidates from within that group. 

If you qualify for the above, please notify us on 0121 794 8181.

We will be in touch to discuss your suitability and arrange your Guaranteed Interview.

Should you require reasonable adjustments at any point during the recruitment process or if there is a more accessible way for us to communicate, please do let me know.

To apply for this role please submit your latest CV or contact Aspect Resources on 0121 794 8181