Vulnerability Management Analyst - Cyber Security

Vulnerability Management Analyst A junior to mid-level role analysing, prioritising and driving the remediation of vulnerabilities across a large enterprise estate for a global law firm, based in Belfast with 2 days a week on site, paying £40,000 to £50,000. About the Company Our client is a global law firm growing its vulnerability management capability, with up to three analyst hires. The investment is driven by rising regulatory expectations and a sharper focus on cyber risk, including evolving threats, AI-related security concerns and overall vulnerability governance.

The Role Sitting within the wider cyber security function, you will analyse, categorise and prioritise vulnerabilities across the firm's technology infrastructure, then work with technology teams to get them fixed. The role suits someone who wants to deepen their expertise in vulnerability management rather than someone who is already a seasoned specialist. Analyse, categorise and prioritise identified vulnerabilities using a risk-based approach.

Monitor security advisories, threat intelligence feeds and vendor notifications for vulnerabilities that need action. Support the management of vulnerability exceptions and risk acceptance. Contribute to internal training materials and documentation.

What You'll Need A background in software, infrastructure, technology operations or cyber security, gained in a large enterprise environment, is essential. Strong technical fundamentals across networking, servers and operating systems, such as Windows Server, Microsoft technologies, Citrix and Linux, are essential, and matter more to the hiring managers than expertise in any one tool. An understanding of vulnerability management principles, with exposure to identifying, assessing, prioritising or remediating vulnerabilities, is essential.

Direct vulnerability management experience, even at a junior level, is a strong advantage. Working knowledge of CVSS, CVEs and security risk assessment is highly advantageous. Hands-on use of scanning tools such as Tenable, Qualys or Rapid7, or of attack surface and exposure management platforms, is highly advantageous, though no single technology is a must.

Threat intelligence experience, and how it shapes which vulnerabilities get fixed first, is a strong advantage. Experience building vulnerability reports, dashboards or metrics is desirable. ServiceNow experience, particularly for tracking remediation or managing vulnerability workflows, is desirable.

Join a growing vulnerability management function backed by the firm's investment in cyber risk. Deepen your vulnerability management expertise in a role pitched at junior to mid-level, with no need to be a seasoned specialist already. Build your exposure to threat intelligence and AI-related security as part of the firm's cyber agenda.

Hybrid working in Belfast, 2 days a week on site. A salary of £40,000 to £50,000, plus private medical insurance, pension matching up to 8%, life assurance at 4x salary and 25 days' leave plus bank holidays. For a confidential conversation about the role, contact Jordan Madden at

Benefits

Work From Home