Cavendish Professionals are currently looking to speak to experienced Vulnerability Threat Management Triage Analysts to support the identification, analysis and triage of critical cybersecurity vulnerabilities at one of our clients in either Budapest or Warsaw The successful candidate will have a strong background in Information Security, vulnerability management and threat analysis, with experience rapidly assessing vulnerabilities, determine risk and potential impact, and evaluate exploit status within a complex enterprise environment.
Skills and Requirements:
Minimum of 5 years’ experience working in Information Security, with a strong background in vulnerability management and threat analysis.
Deep understanding of Information Security and Vulnerability Management processes, patch development and application/system architecture.
Strong proficiency in SQL for database querying and data analysis.
Experience analysing critical vulnerabilities and assessing their risk, potential impact and relevance to an organisation’s technology landscape.
Ability to assess vulnerability exploit status using threat intelligence and security research.
Knowledge of programming and/or scripting languages, with a preference for Python, and experience with or knowledge of industry-standard vulnerability scanning tools, such as Qualys and Snyk.
Fluent in English, with excellent written and verbal communication skills.
Ability to articulate complex technical findings and translate them into clear, actionable information for both technical and business stakeholders.
Strong analytical, research and problem-solving skills, with the ability to conduct assessments and analysis under pressure.
Role and Responsibilities:
Perform daily, in-depth analysis of critical vulnerabilities from various intelligence sources to determine their risk, potential impact and relevance to the clients technology landscape.
Investigate the use and exposure of vulnerable technologies across the firm by retrieving technology data through database queries and engaging directly with engineering teams and product owners.
Assess the exploit status of vulnerabilities, leveraging threat intelligence and security research to prioritise remediation efforts effectively.
Coordinate the analysis and delivery of actionable Information Security Vulnerability Findings to internal stakeholders, providing clear and interpretative analysis.
Continue urgent vulnerability triage activities, taking over and managing the handover from Singapore.
Support attestation tracking and evidence reviews for L0 24-48 hour GEMs, where status confirmation is often required before vulnerability signatures are developed.
Support the transition of the VTM Risk Treatment Process from SharePoint to ServiceNow, focusing on governance and execution aspects beyond the technical migration undertaken by the client.
Qualifications and Education:
Bachelor’s degree in Computer Science, Information Security or a related field, or equivalent experience.
Experience with vulnerability scanning tools such as Qualys and Snyk is advantageous.
Knowledge of descriptive statistics for metrics and reporting is preferred
For more information – please apply for this job or send your CV directly and I will call you back to provide you with more details.
Cavendish (Recruitment) Professionals Ltd are proud to be an equal opportunity employer and we believe that inclusivity begins with the candidate experience. All qualified applicants will receive consideration for employment regardless of, gender, race, age, sexual orientation, religion, or belief.