[Hiring] Vulnerability Management Analyst @RS Group

Role Description

The Vulnerability Analyst is responsible for proactively identifying, validating and assessing security vulnerabilities across the organisation's technology estate. Working closely with the Vulnerability Manager, Security Operations, Risk Management, Infrastructure, Cloud, EUC, Network and Application teams, the role focuses on discovering security weaknesses, validating findings, assessing exploitability and determining risk to the organisation. The Vulnerability Analyst acts as the technical subject matter expert for vulnerability identification and prioritisation activities.

What You'll Be Doing

• Conduct vulnerability assessments across infrastructure, cloud, endpoint, network and application environments using automated tools and manual assessment techniques.
• Support attack surface discovery and exposure management activities, validating findings to eliminate false positives.
• Assess the severity, exploitability, business impact and likelihood of compromise of identified vulnerabilities.
• Conduct technical analysis using threat intelligence and exploitation data, prioritising vulnerabilities using a risk-based methodology.
• Monitor emerging vulnerabilities and security advisories, assessing applicability to the organisation and supporting rapid assessment of critical vulnerabilities.
• Analyse proof-of-concept exploits and active threat activity.
• Work closely with remediation teams to explain findings, risks and vulnerability remediation approaches.
• Partner with the Risk Management team to support risk-based prioritisation, risk acceptance, exception management and escalation of material vulnerabilities.
• Produce technical vulnerability assessment reports, vulnerability trend analysis, risk insights and support executive reporting through accurate vulnerability data and technical commentary.

Qualifications

• Experience in vulnerability management, security operations, or threat intelligence.
• Strong understanding of cyber risk, exploitability, and attack patterns.
• Ability to interpret complex technical data and translate into business risk.
• Familiarity with vulnerability tooling (e.g. scanners, EDR, threat intel platforms).
• Strong stakeholder communication and influencing skills.
• Understanding of vulnerability frameworks e.g. CVSS and Threat Intelligence.

Requirements

• Knowledge of ITIL processes.
• Operating in a structured programme environment (agile and waterfall).
• Experience working in complex multi-vendor environments.
• Experience with vulnerability tooling.
• Experience within a global organisation, containing different operating companies.

Benefits

• Financial - pension/retirement; life assurance; salary finance (payroll deduction loan scheme).
• Wellbeing - medical plans; health screening; critical illness; disability insurance; holiday / paid time off; employee assistance programme; discounted gym/health club membership.
• Lifestyle - transportation assistance schemes (e.g., cycle to work, travel loans, car leasing); onsite catering/lunch vouchers; retail discounts.
• Spotlight – our global recognition programme provides a platform to highlight and recognise people role modelling our values.