Cybersecurity Analyst – Vulnerability Management
Cybersecurity Analyst focused on vulnerability management across application and cloud environments, executing the full vulnerability lifecycle from identification through remediation validation using tools like Tenable, Qualys, Wiz, and Cloudflare.
- Compensation
- Not disclosed
- Location
- LONDON, United Kingdom
- Work setup
- Onsite
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 2+ years
- Category
- Security
- Posted
Skills
Must have
- 2–3+ years of experience in threat and vulnerability management, cybersecurity operations, application security, cloud security, security engineering, or related cybersecurity roles
- Experience working with vulnerability management and scanning tools such as Tenable (Nessus), Qualys, Wiz, Cloudflare, or similar
- Experience assessing, prioritizing, and tracking vulnerabilities through remediation in enterprise application and cloud environments
- Strong understanding of CVSS scoring and ability to interpret severity ratings in the context of business impact
- Familiarity with vulnerabilities affecting web applications, APIs, operating systems, cloud platforms, containers, and cloud-native misconfigurations
- Ability to analyze technical findings and translate them into clear, actionable insights for technical and non-technical stakeholders
- Strong analytical, organizational, and communication skills
- 2-4 years of experience in IT privacy, compliance, or systems engineering
- Bachelor's degree in Information Technology, Computer Science, or related field
- Familiarity with SOX audits and cyber security standards
Nice to have
- Experience working in or supporting application security, cloud security, infrastructure security, or DevSecOps environments
- Relevant certifications such as CISSP, CEH, OSCP, CISM, CCSP, AWS/Azure security certifications, or similar
Full description
Cybersecurity Analyst – Vulnerability Management
London – UK (Hybrid)
About the Role
As part of the continued expansion of our cybersecurity program, we are seeking a Analyst, Threat & Vulnerability Management with a primary focus on applications and cloud environments.
In this role, you will support and execute vulnerability management activities across the full lifecycle — from identification through remediation — helping prioritize risks based on business and operational impact across application, cloud, and broader technology environments.
Working closely with Cybersecurity, IT, application, cloud, engineering, and business stakeholders, you will help strengthen the organization's security posture and contribute to the continuous improvement of our Threat & Vulnerability Management program.
Key Responsibilities
- Execute vulnerability management activities across the full lifecycle, including discovery, assessment, prioritization, tracking, and remediation validation.
- Analyze vulnerability and threat data to identify high-risk exposures, trends, and remediation priorities across application and cloud environments.
- Coordinate with application teams, cloud engineering, DevOps, infrastructure, cybersecurity, and business stakeholders to assess impact, drive remediation, and support timely resolution of vulnerabilities.
- Assist with remediation and vulnerability treatment activities, including validation of fixes and follow-up on outstanding issues.
Profile
- 2–3+ years of experience in threat and vulnerability management, cybersecurity operations, application security, cloud security, security engineering, or related cybersecurity roles.
- Experience working with vulnerability management and scanning tools such as Tenable (Nessus), Qualys, Wiz, Cloudflare, or similar, along with endpoint or cloud security platforms where applicable.
- Experience assessing, prioritizing, and tracking vulnerabilities through remediation in enterprise application and cloud environments.
- Experience working in or supporting application security, cloud security, infrastructure security, or DevSecOps environments is strongly preferred.
- Strong understanding of CVSS scoring and the ability to interpret severity ratings in the context of business impact, exploitability, asset criticality, and remediation prioritization.
- Familiarity with vulnerabilities affecting web applications, APIs, operating systems, cloud platforms, containers, and misconfigurations in cloud-native environments.
- Ability to analyze technical findings and translate them into clear, actionable insights for both technical and non-technical stakeholders.
- Strong analytical, organizational, and communication skills, with the ability to collaborate across cybersecurity, IT, application development, cloud, engineering, and business teams.