Vulnerability Management Analyst
Posting Date: 23-Sep-2026Requisition ID: 3588States/Provinces/Cities: Belfast, Buenos Aires, ManilaLocation Type: HybridBusiness Unit: Business ProfessionalsFunction: TechnologyFull Time or Part Time: Full TimeContact Email: recruitment.london@bakermckenzie.comApply: Vulnerability Management Analyst is responsible for analyzing, categorizing, and prioritizing identified security vulnerabilities across the firm's technology infrastructure.
Acting as a trusted partner to technology teams, the role will drive vulnerability remediation efforts, provide risk-based guidance, and track remediation progress to help reduce the firm's overall cyber risk exposureMain responsibilities: To operate and serve as a subject matter expert in the firm's vulnerability management program. Perform regular vulnerability scans and across applications and infrastructure. Validate and prioritise remediation of vulnerabilities from the firm's security tooling. Monitor security advisories, threat intelligence services and vendor notifications for vulnerability remediation.
Skills and experience: Expert experience of working with enterprise vulnerability management platforms.
Working experience with threat intelligence, attack surface mgmt. and exposure mgmt. platforms.
Expert understanding of vulnerability scoring, including CWE, CVSS and MITRE ATT&CK.Foundational knowledge of windows, Linux and networking.
Ability to assess security risks and prioritise remediation works at enterprise scale.
Experience in the creation and development of Vulnerability dashboards, reports and executive level metrics.
Ability to validate the presence of identified vulnerabilities with accuracy and reduce false positive detections.
Experience of managing vulnerability exceptions, risk acceptance in a large, structured enterprise environment. Highly desired experience of working within an enterprise SOC.Ongoing commitment to understanding of the threat landscape and common adversary motivations/practices. Ability to quickly adapt practices to evolving circumstances.
Ability to perform autonomous vulnerability threat research and analysisStrong written and oral communication skills. Ability to convey complex concepts to non-technical constituents. Proficiency in oral and written English.
Capable of providing assistance with the preparation of internal training materials and documentation.
Ability to be productive and maintain focus to meet firm SLAs on vulnerability remediation.
Understands Vulnerability Management in the context of risk management and organizational priorities.
Qualifications:
Possess a Computer Science Bachelor's Degree or substantial equivalent experienceCISSP requiredGIAC Vulnerability assessment (GMON/GVCA)Microsoft security certification (SC-900, SC-200)Security+Certified Ethical hackerReports to: Security Engineering Manager & Vulnerability Management architectPosition Type: Centre Services Development Framework: SpecialistBaker McKenzie empowers clients to compete in the global economy. We provide comprehensive and practical legal advice that cuts through complexity with clear, actionable guidance. Our people represent diverse cultures and jurisdictions, combining local know-how with international expertise to ensure your business thrives across borders.
Baker McKenzie is an Equal Opportunity Employer. We are committed to promoting diversity and inclusion for all. Our unique international culture is reflected in the drawing together of a worldwide family of individuals from diverse cultures and backgrounds in all of our offices. We encourage the best people - regardless of race, religion or belief if any, gender, gender identity, disability, sexual orientation or age - to fulfill their professional aspirations with us. We are committed to ensuring an inclusive and accessible experience for all candidates.
Delete the text below for Belfast job postingsTo Apply: At Baker McKenzie, we welcome direct applications.
Please click on the Apply icon to start the online application process for this role. We will then be in touch with you once we have reviewed your application. If you are unable to apply online, please contact the Recruitment Team on either 020 7919 1000 or Recruitment.
London@bakermckenzie.com.
Please review our Applicant Privacy Notice here.
No agencies please - Please note Baker McKenzie does not accept unsolicited CVs. Please click here for details of our Agency Policy and commitment to sourcing directly.
For more information about this position or to discuss any adjustments you may require during the process, please contact in confidence, [Enter Recruiter's Full Name], [Enter Recruiter's Job Title], at [Enter Recruiter's email address].