Infinity Quest
Security Analyst
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Role: Security Analyst
Location: Birmingham, UK
Mode: Hybrid
Type: Permanent
Job Description:
Role Overview
The Vulnerability Response Lead will lead the organisation’s vulnerability response capability, ensuring vulnerabilities are identified, assessed, prioritised, remediated, and governed effectively and within defined timelines.
The role will be responsible for reducing cyber risk exposure by coordinating vulnerability remediation activities across infrastructure, cloud, applications, and technology teams, while ensuring alignment with internal security policies, regulatory requirements, and remediation SLAs.
The successful candidate will work closely with Cyber Security, Technology, Infrastructure, Cloud, Application, Risk, and Compliance teams to drive timely remediation and provide clear visibility of the organisation’s vulnerability risk posture to senior management.
Key Responsibilities
- Own and manage the end-to-end vulnerability response lifecycle, from identification and assessment through prioritisation, remediation, validation, and closure.
- Prioritise vulnerabilities based on severity, exploitability, business criticality, asset exposure, threat intelligence, and potential business impact.
- Lead and coordinate vulnerability remediation programmes across infrastructure, cloud, application, and technology teams.
- Ensure critical and high-risk vulnerabilities are remediated within agreed remediation SLAs.
- Drive accelerated response and remediation activities for actively exploited vulnerabilities, zero-day vulnerabilities, and emerging critical threats.
- Monitor remediation progress, identify risks and blockers, and escalate overdue or high-risk vulnerabilities to appropriate stakeholders.
- Establish and maintain effective vulnerability remediation governance, including ownership, tracking, exception management, and risk acceptance.
- Provide regular management information, dashboards, metrics, trend analysis, and executive-level reporting on vulnerability risk and remediation performance.
- Work with Cyber Security and Technology teams to improve vulnerability management processes, controls, and operational effectiveness.
- Support security and regulatory audits by providing appropriate evidence of vulnerability identification, risk assessment, remediation, and governance.
- Ensure vulnerability response processes remain aligned with internal policies, industry best practices, regulatory requirements, and defined security standards.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Required Experience & Skills
- 9+ years of professional experience in Vulnerability Management, Cyber Security Operations, Cyber Defence, or a closely related cybersecurity discipline.
- Significant experience leading enterprise-scale vulnerability remediation programmes across complex technology environments.
- Strong understanding of vulnerability assessment and prioritisation methodologies, including CVSS.
- Proven experience managing technology risk, remediation governance, risk acceptance, and exception processes.
- Strong understanding of vulnerability remediation across areas such as infrastructure, cloud, operating systems, applications, databases, and network technologies.
- Experience working with multiple technology and business stakeholders to drive remediation and resolve delivery challenges.
- Strong analytical and problem-solving skills, with the ability to assess cyber risk and translate technical findings into clear business impacts and actions.
- Excellent stakeholder management, communication, influencing, and executive reporting skills.
- Ability to operate effectively in a complex, regulated enterprise environment.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Regulatory & Security Framework Knowledge
- Experience working within regulated environments and knowledge of relevant security and regulatory frameworks, including:
- NIST SP 800-40 – Enterprise Patch Management Planning
- DORA – Digital Operational Resilience Act
- FCA/PRA regulatory requirements
- ISO/IEC 27001
- NIST Cybersecurity Framework (NIST CSF)
Key Outcomes
The role will be expected to ensure:
- Timely identification and prioritisation of vulnerabilities.
- Effective remediation of critical and high-risk vulnerabilities within agreed SLAs.
- Rapid response to actively exploited and zero-day vulnerabilities.
- Clear ownership and accountability across technology teams.
- Strong vulnerability governance, risk acceptance, and exception management.
- Accurate and actionable vulnerability reporting for senior management and governance forums.
- Continuous reduction of the organisation’s overall cyber risk exposure.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London