Vulnerability Management Analyst

Hace 2 días

Remote, España Covenant HR Jornada completa
Company
Las cualificaciones, habilidades y toda la experiencia relevante necesaria para este puesto se pueden encontrar en la descripción completa a continuación.

Our client is a leading global technology and consulting organization specializing in cybersecurity, digital transformation, and mission-critical enterprise solutions. They support complex technology environments and help organizations strengthen security, manage risk, and improve operational resilience.


Job Title

Vulnerability Management Analyst


Location

100% Remote (EMEA Region)


Must Have Skills
  • Hands-on vulnerability management and triage experience, including assessing newly disclosed vulnerabilities, identifying affected assets, and determining enterprise exposure and impact.
  • Strong expertise in CVE, CPE, CVSS, and risk assessment methodologies, including evaluating exploitability, threat intelligence, proof-of-concept exploits, and assigning defensible risk and severity ratings.
  • Broad enterprise technology knowledge across Microsoft, VMware, Oracle/Java, Citrix, F5, cloud environments, and enterprise open-source technologies, including patch management and software release lifecycles.
  • Excellent technical documentation and communication skills, with the ability to produce accurate, audit-ready vulnerability assessments detailing exposure, impact, risk rationale, remediation recommendations, and escalation requirements.

Responsibilities and Job Details
  • Review, analyze, and triage newly disclosed vulnerabilities across complex enterprise technology environments.
  • Determine whether identified vulnerabilities impact customer applications, infrastructure, platforms, or other enterprise assets.
  • Evaluate vulnerability exploitability using threat intelligence, published advisories, proof-of-concept exploits, and potential attack paths.
  • Assess organizational exposure and assign appropriate risk and severity ratings using CVE, CPE, CVSS, and client-specific risk assessment criteria.
  • Analyze vulnerabilities affecting Microsoft, VMware, Oracle/Java, Citrix, F5, cloud platforms, and enterprise open-source technologies.
  • Evaluate patch availability, vendor advisories, software release lifecycles, and potential remediation options.
  • Develop and maintain comprehensive, audit-ready vulnerability assessments, including technical findings, business impact, risk justification, and recommended actions.
  • Identify and escalation critical or high-risk vulnerabilities requiring immediate attention or further investigation.
  • Support ongoing vulnerability management operations, ensuring timely analysis and consistent assessment quality.
  • Collaborate with globally distributed cybersecurity teams to maintain effective communication, documentation, and shift handoffs. xqbhyrx
  • Contribute to a 24x5 global vulnerability triage and assessment operation, working an anticipated 40-hour week within the EMEA coverage model.