Senior Cybersecurity Analyst – Vulnerability Management
London – UK (Hybrid)
About the Role
As part of the continued expansion of our cybersecurity program, we are seeking a Senior Analyst, Threat & Vulnerability Management with a primary focus on applications and cloud environments.
In this role, you will support and execute vulnerability management activities across the full lifecycle — from identification through remediation — helping prioritize risks based on business and operational impact across application, cloud, and broader technology environments.
Working closely with Cybersecurity, IT, application, cloud, engineering, and business stakeholders, you will help strengthen the organization's security posture and contribute to the continuous improvement of our Threat & Vulnerability Management program.
Key Responsibilities
Execute vulnerability management activities across the full lifecycle, including discovery, assessment, prioritization, tracking, and remediation validation.
Analyze vulnerability and threat data to identify high-risk exposures, trends, and remediation priorities across application and cloud environments.
Review vulnerabilities affecting web applications, APIs, cloud services, virtual machines, containers, and cloud-native platforms to support risk-based prioritization and response.
Coordinate with application teams, cloud engineering, DevOps, infrastructure, cybersecurity, and business stakeholders to assess impact and drive timely remediation, including validation of fixes and follow-up on outstanding issues.
Develop and maintain dashboards, metrics, and reports, and prepare summaries and briefings for both technical teams and leadership stakeholders.
Support policy and process adherence related to vulnerability management, remediation, exception handling, and risk treatment, and serve as a point of coordination for complex issues.
Participate in incident response or urgent risk mitigation activities when vulnerabilities present elevated operational or security risk.
Contribute to the continuous improvement of Threat & Vulnerability Management processes, workflows, and reporting capabilities, particularly for application and cloud security.
Profile
3–5+ years of experience in threat and vulnerability management, cybersecurity operations, application security, cloud security, security engineering, or related cybersecurity roles.
Experience working with vulnerability management and scanning tools such as Tenable (Nessus), Qualys, Wiz, Cloudflare, or similar, along with endpoint or cloud security platforms where applicable.
Experience assessing, prioritizing, and tracking vulnerabilities through remediation in enterprise application and cloud environments.
Experience working in or supporting application security, cloud security, infrastructure security, or DevSecOps environments is strongly preferred.
Strong understanding of CVSS scoring and the ability to interpret severity ratings in the context of business impact, exploitability, asset criticality, and remediation prioritization.
Familiarity with vulnerabilities affecting web applications, APIs, operating systems, cloud platforms, containers, and misconfigurations in cloud-native environments.
Ability to analyze technical findings and translate them into clear, actionable insights for both technical and non-technical stakeholders.
Strong analytical, organizational, and communication skills, with the ability to collaborate across cybersecurity, IT, application development, cloud, engineering, and business teams.
Demonstrated ability to work independently, support process maturity, and contribute to a proactive, risk-informed security culture.
Relevant certifications such as CISSP, CEH, OSCP, CISM, CCSP, AWS/Azure security certifications, or similar are preferred.
Senior Cybersecurity Analyst – Vulnerability Management • LONDON, United Kingdom
A global consulting firm in Greater London is seeking a Senior Manager in Cybersecurity to lead enterprise-scale security transformation programs.The role involves driving strategic initiatives and... Show more
Tradeweb Markets is hiring a Cyber Security Engineer in London to lead threat intelligence and drive vulnerability management across our enterprise IT landscape.The role supports SOC, infrastructur... Show more
At EY, we’re all in to shape your future with confidence.We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.Join EY and help ... Show more
Lightsource bp is seeking a Senior Cybersecurity Analyst to monitor cyber risk, lead remediation of vulnerabilities, and respond to incidents across its global IT systems.You will work with Defende... Show more
Since 1989, SHI International Corp.We’ve grown every year since, and today we’re proud to be a $16 billion global provider of IT solutions and services.Over 17,000 organizations worldwide rely on S... Show more
PJT Partners in Greater London is seeking an experienced Cybersecurity Professional to handle vulnerability management and incident response.The ideal candidate will have 7-10+ years in information... Show more
We currently have an opportunity for a Senior or Principal Cyber Security Engineer to join our growing Cyber Security team within our Systems Engineering and Assurance discipline.This position will... Show more
HUMAN Security is seeking a Senior Account Executive to accelerate growth across the media ecosystem — from publishers and platforms to agencies and brands.You’ll own the full sales cycle, craft co... Show more
Starling Bank Limited in London is seeking a motivated Vulnerability Management Analyst to drive remediation across cloud-native and on-prem environments.You will triage findings, prioritise risks ... Show more
Senior Delivery Consultant | Talent Acquisition Specialist.Vulnerability SME Lead – Must have Active SC Clearance.One of our prestigious clients is looking for a Vulnerability Lead/Manager/SME for ... Show more
This is a hands‑on security position within the Information Security group, focused on ensuring consistent, measurable end‑to‑end delivery of security services.The successful candidate will develop... Show more
We tackle the most complex problems in quantitative finance, by bringing scientific clarity to financial complexity.From our London HQ, we unite world-class researchers and engineers in an environm... Show more
Threat and Vulnerability Management Lead.Barbican, London | Hybrid Working (One office day a week) | Technology | Fixed-Term Contract till end of 2026 | Full time.Competitive Salary available, depe... Show more
A leading cybersecurity firm is seeking an experienced Cyber Risk & Security Manager to lead cyber risk assessments and drive strategic improvements.The ideal candidate will have over 10 years of e... Show more
Airwallex is the only unified payments and financial platform for global businesses.Powered by our unique combination of proprietary infrastructure and software, we empower over 200,000 businesses ... Show more
Gartner is seeking a Snr Director Analyst for Data Center Compute to deliver insights and guidance to world-leading organizations.The role revolves around translating research into meaningful insig... Show more
This opportunity is ideal for individuals interested in contributing to our team as a senior associate Software Engineering & ML/Data Engineer within State Street’s Global Technology Services organ... Show more
Freshworks is looking for a Lead - Cybersecurity GTM to sit at the intersection of Cybersecurity, customer trust, and go-to-market.This is not a back-office compliance role.You will be the security... Show more
A global professional services company in Greater London is seeking a Risk Director to develop and manage risks on substantial infrastructure projects.Candidates should have over 10 years of projec... Show more
Ultramink Technologies is seeking a seasoned professional to lead security engagements for mid-market enterprises across Europe.The role involves conducting security assessments, designing security... Show more
