Senior Cybersecurity Analyst – Vulnerability Management
HybridLondon, England, United Kingdom
Job Summary
Execute vulnerability management activities across the full lifecycle, including discovery, assessment, prioritization, tracking, and remediation validation for web applications, APIs, cloud services, and containers. Analyze vulnerability and threat data to identify high-risk exposures and trends, then coordinate with application, cloud engineering, DevOps, and business stakeholders to drive timely remediation and validate fixes. Develop dashboards, metrics, and reports to support risk-based prioritization and prepare briefings for technical teams and leadership. Participate in incident response for urgent risk mitigation and contribute to continuous improvement of Threat & Vulnerability Management processes and reporting capabilities.
Required Qualifications
- 3–5+ years of experience in threat and vulnerability management, cybersecurity operations, application security, cloud security, security engineering, or related cybersecurity roles
- Experience working with vulnerability management and scanning tools such as Tenable (Nessus), Qualys, Wiz, Cloudflare, or similar
- Experience assessing, prioritizing, and tracking vulnerabilities through remediation in enterprise application and cloud environments
- Strong understanding of CVSS scoring and the ability to interpret severity ratings in the context of business impact, exploitability, asset criticality, and remediation prioritization
- Familiarity with vulnerabilities affecting web applications, APIs, operating systems, cloud platforms, containers, and misconfigurations in cloud-native environments
- Ability to analyze technical findings and translate them into clear, actionable insights for both technical and non-technical stakeholders
- Strong analytical, organizational, and communication skills
- Demonstrated ability to work independently, support process maturity, and contribute to a proactive, risk-informed security culture
Desired Qualifications
- Experience working in or supporting application security, cloud security, infrastructure security, or DevSecOps environments
- Relevant certifications such as CISSP, CEH, OSCP, CISM, CCSP, AWS/Azure security certifications, or similar
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.