Vulnerability Management Analyst

The main responsibilities:

• Actively contributes to the configuration of the detection tool, to the permanent quality assessment of this configuration and of linked processes (coverage, etc.); in this context, you proactively identify potential gaps and propose remediations when needed
• Actively contributes to internal control related to the area of activity and takes responsibility for part of the automation.
• Creates / maintains necessary documentation and procedures.
• Assists in high-risk vulnerability assessments (in collaboration with the Threat Intelligence team and Risk Management)
• Supports Vulnerability prioritisation with analysis and assessment of vulnerability and configuration compliance data; identifies high risk vulnerabilities or false positives
• Assists in findings clarifications for trends in vulnerability scan results, and for (active) threats requiring investigation.
• Collaborates with Patch Orchestration Team to get insights and assurance on high-risk remediation.
• Collaborates and exchange relevant information with relevant teams like Threat Intel team, Pentest team, Application Security team or Customer Risk team.
• Provides on demand information to stakeholders.

In this role, you will be involved in the end‑to‑end process from vulnerability detection to remediation. Within the team, your focus will be on:

1. Participating in the configuration of tools, mainly (but not exclusively) for compliance checks, including the automation of certain CIS baseline assessments; ensuring that operational activities related to these checks are properly documented and executed.
2. Actively contributing to the automation of quality assessment controls using Python scripts.
3. Performing vulnerability and threat assessments, primarily in collaboration with the Cyber Threat Management team and the Pentest team.
4. Acting as a subject matter expert, sharing your knowledge with the team and providing expert advice to the Security Exception Review Board.

The ideal candidate also has strong logical reasoning skills.  He/She has experience in control automation and in developing python scripts; the experience in creating Ansible playbooks is a real asset.  He/She has a solid understanding of vulnerability management activities (prioritization, etc.).
The candidate is willing to work an average of at least two days per week on‑site at the company’s premises, with the remaining days worked remotely.

Technical skills

• Good understanding of security practices and risk management