Cyber Threat & Vulnerability Analyst

Role overview

Responsibilities

• Analyse and validate vulnerabilities and exposures; combine threat intelligence, exploitability, asset criticality, and business context to prioritise risk.
• Track remediation to resolution, coordinate ownership with technical teams, and escalate blockers.
• Support external attack-surface management, analyse trends and emerging risks, and produce reporting and management information.
• Work across Cybersecurity Operations and technology teams on critical vulnerability response and process improvement.

What you'll bring

• Good understanding of vulnerabilities and the vulnerability management lifecycle, including identification, prioritisation, remediation, and reporting.
• Understanding of CVEs, CVSS, exploitability, patching, compensating controls, and risk acceptance.
• Ability to analyse technical information, identify trends and priorities, and communicate clear actions.
• Experience coordinating with technical teams and a proactive approach to competing priorities.
• Exposure to vulnerability tools, attack-surface management, penetration or security testing, threat intelligence, or Red or Purple Teaming is advantageous.
• Experience with ServiceNow, Jira, Power BI, KQL, PowerShell, Python, or relevant cybersecurity training or certifications is advantageous.

Workplace and schedule

• Hybrid working with three office days per week and some monthly travel to the Basingstoke headquarters.

Employment and benefits

• Permanent, full-time employment; an annual bonus opportunity is listed.