Vulnerability Management Analyst

Vulnerability Management AnalystA junior to mid-level role analysing, prioritising and driving the remediation of vulnerabilities across a large enterprise estate for a global law firm, based in Belfast with 2 days a week on site, paying £40,000 to £50,000.About the CompanyOur client is a global law firm growing its vulnerability management capability, with up to three analyst hires. The investment is driven by rising regulatory expectations and a sharper focus on cyber risk, including evolving threats, AI-related security concerns and overall vulnerability governance.The RoleSitting within the wider cyber security function, you will analyse, categorise and prioritise vulnerabilities across the firm’s technology infrastructure, then work with technology teams to get them fixed. The role suits someone who wants to deepen their expertise in vulnerability management rather than someone who is already a seasoned specialist. The hiring managers care more about strong technical fundamentals, and an understanding of how vulnerabilities land in a real enterprise estate, than about expertise in any one tool.Key ResponsibilitiesRun regular vulnerability scans across the firm’s applications and infrastructure.Analyse, categorise and prioritise identified vulnerabilities using a risk-based approach.Validate findings from the firm’s security tooling and reduce false positives.Work with infrastructure and technology teams to drive remediation and track progress against the firm’s SLAs.Monitor security advisories, threat intelligence feeds and vendor notifications for vulnerabilities that need action.Build vulnerability reports, dashboards and metrics for technical and senior audiences.Support the management of vulnerability exceptions and risk acceptance.Contribute to internal training materials and documentation.What You’ll NeedA background in software, infrastructure, technology operations or cyber security, gained in a large enterprise environment, is essential.Strong technical fundamentals across networking, servers and operating systems, such as Windows Server, Microsoft technologies, Citrix and Linux, are essential, and matter more to the hiring managers than expertise in any one tool.An understanding of vulnerability management principles, with exposure to identifying, assessing, prioritising or remediating vulnerabilities, is essential.Experience working with infrastructure and technology teams to get remediation done is essential.Direct vulnerability management experience, even at a junior level, is a strong advantage.Working knowledge of CVSS, CVEs and security risk assessment is highly advantageous.Hands-on use of scanning tools such as Tenable, Qualys or Rapid7, or of attack surface and exposure management platforms, is highly advantageous, though no single technology is a must.SOC experience is highly advantageous.Threat intelligence experience, and how it shapes which vulnerabilities get fixed first, is a strong advantage.Experience building vulnerability reports, dashboards or metrics is desirable.ServiceNow experience, particularly for tracking remediation or managing vulnerability workflows, is desirable.Security certifications such as CISSP, GIAC, SC-200, Security+ or CEH are desirable.Why Apply?Join a growing vulnerability management function backed by the firm’s investment in cyber risk.Deepen your vulnerability management expertise in a role pitched at junior to mid-level, with no need to be a seasoned specialist already.Partner directly with infrastructure and technology teams and see the impact of the remediation you drive.Build your exposure to threat intelligence and AI-related security as part of the firm’s cyber agenda.Hybrid working in Belfast, 2 days a week on site.A salary of £40,000 to £50,000, plus private medical insurance, pension matching up to 8%, life assurance at 4x salary and 25 days’ leave plus bank holidays.Note For ApplicantsAll candidates must be currently residing in NI and have full UK Right to Work. Visa Sponsorship for this role is not provided.Interested?For a confidential conversation about the role, contact Jordan Madden at jordan@ochopeople.com.