Job Description:

Vulnerability Management Analyst

Preston or Inverness (Hybrid)

£40k - £50k per annum + benefits

Must be a sole UK national and eligible for Security Clearance

Are you a cyber security professional with a passion for vulnerability management? Do you thrive on coordinating remediation, engaging suppliers, and turning technical risk into clear, actionable reporting? If so, this could be your next big move.

We're recruiting on behalf of a global technology and business transformation leader, currently looking to bring five Vulnerability Management Analysts into a high-performing Security Operations team. This is a fantastic opportunity to join a growing cyber security function at a genuinely exciting time, working alongside a global network of security experts, from Architects and Engineers to Analysts and Compliance Managers.

Rather than operating the tooling directly, you'll take ownership of the process end-to-end: reviewing findings, coordinating remediation with suppliers, tracking progress, and driving timely resolution of security issues across the environment.

Key Responsibilities

• Coordinate and track vulnerabilities from identification through to remediation and closure, ensuring progress meets agreed SLAs and escalating high-risk or overdue issues
• Engage with suppliers and technical stakeholders to obtain, validate and maintain accurate vulnerability data, ensuring consistent reporting standards and clear ownership
• Produce vulnerability reports, dashboards and metrics that give visibility of ageing vulnerabilities, recurring issues, SLA breaches and emerging trends
• Support governance and compliance by maintaining audit-ready evidence and documentation, and ensuring adherence to vulnerability management processes, policies and risk exception procedures

What You'll Bring

• Experience in cyber security, information security, service management or governance, with a solid grasp of vulnerability management principles (CVSS, KEV, risk ratings and remediation tracking)
• Strong analytical and reporting skills, with the ability to produce meaningful security metrics
• Proven experience engaging multiple stakeholders and suppliers to drive remediation and performance improvements
• Familiarity with vulnerability management tooling, reporting processes and audit/assurance requirements, ideally gained within a SIAM or multi-supplier, regulated, public sector or defence environment
• Desirable: Recognised Vulnerability Management qualifications and/or hands-on experience with tools such as Qualys, Brinqa or Tenable

If you've held any of these roles or used these technologies/skills, this role could be a great fit: Vulnerability Management Analyst, Vulnerability Analyst, Cyber Security Analyst, Security Analyst, Information Security Analyst, Threat and Vulnerability Analyst, VM Analyst, Patch Management Analyst, Security Governance Analyst, Risk and Compliance Analyst, Remediation Coordinator, CVSS, KEV, Qualys, Brinqa, Tenable, SIAM, Security Operations, SecOps.

Deerfoot Recruitment Solutions Ltd is a leading independent tech recruitment consultancy in the UK. For every CV sent to clients, we donate £1 to The Born Free Foundation. We are a Climate Action Workforce in partnership with Ecologi. If this role isn't right for you, explore our referral reward program with payouts at interview and placement milestones. Visit our website for details. Deerfoot Recruitment Solutions Ltd is acting as an Employment Agency in relation to this vacancy.