Cyber Security Vulnerability Analyst
When vulnerability volumes spike, organisations either react quickly or get exposed. This Cyber Security Vulnerability Analyst role sits right at the centre of that response - helping a major financial services environment identify risk, prioritise remediation, and strengthen enterprise-wide security controls across complex infrastructure and cloud platforms. We’re looking for 2 experienced contractors to support a large-scale vulnerability management programme following a major assessment phase. You’ll work across infrastructure, cloud, endpoints and applications, partnering with technical teams to reduce exposure and improve security posture in a fast-moving environment.What’s in it for you
- £600 per day OUTSIDE IR35 contract
- Long-term programme work within a complex financial services environment
- High-impact role supporting enterprise-wide cyber security initiatives
- Flexible London/remote working model
- Exposure to cloud, infrastructure, endpoint and application security operations
- Opportunity to work with leading management technologies including Qualys, Defender and ServiceNow Vulnerability Response Module
- Conduct scanning and analysis across infrastructure, cloud environments and applications using Qualys and related tools
- Assess, validate and prioritise vulnerabilities based on severity, exploitability and business impact
- Work closely with Infrastructure, Engineering, Cloud and DevOps teams to support remediation activity
- Track remediation progress, validate fixes and maintain accurate records
- Produce technical reports, metrics and executive summaries on remediation status and trends
- Integrate threat intelligence insights into vulnerability prioritisation and continuous improvement activities
- Previous experience in vulnerability management within enterprise environments
- Strong technical knowledge of Qualys, Microsoft Defender and ServiceNow Vulnerability Response Module
- Experience working across endpoints, servers, Azure, AWS and application environments
- Ability to assess technical risk and support remediation planning across multiple technology teams
- Strong reporting and stakeholder communication capability within security-focused environments