Vulnerability Assessment Analyst

About the role

The Vulnerability Assessment Analyst will support our security team by conducting regular vulnerability scans, analysing findings, and coordinating remediation efforts. This role is essential for maintaining the integrity of our IT environment and ensuring compliance with industry standards.

Key responsibilities

• Run and manage regular vulnerability scans using industry‑standard tools.
• Analyse scan results, prioritise vulnerabilities based on risk and impact, and track remediation progress.
• Coordinate patching cycles and work with IT teams to resolve identified issues.
• Produce detailed reports on findings, remediation status, and emerging threats.
• Maintain up‑to‑date documentation of vulnerability management activities and support audit preparation.
• Stay informed on current cyber‑threat trends and participate in training to enhance skills.

Required profile

• Basic knowledge of cybersecurity concepts, networking, and common operating systems (Windows, Linux).
• Understanding of CVEs, misconfigurations, patching lifecycle, and CVSS scoring.
• Ability to interpret scan results, assess severity, and communicate findings clearly.
• Strong documentation and reporting abilities, with proficiency in Excel or similar tools.

Required skills

• Experience with vulnerability scanning platforms such as Tenable, Qualys, Rapid7, or OpenVAS.
• Familiarity with CVSS, risk‑based prioritisation, and basic scripting (Python, PowerShell, Bash).
• Knowledge of security frameworks and standards (ISO 27001, PCI DSS, NIST CSF, CIS Controls).
• Understanding of OWASP Top 10 and web application vulnerabilities.

What we offer

• Opportunities for professional growth in a dynamic cybersecurity environment.
• Access to training, certifications, and industry‑leading tools.
• Collaborative team culture focused on continuous improvement.