Bestman Solutions
Vulnerability Analyst
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
OT Vulnerability Analyst
Southampton | Hybrid
We’re working with a large organisation operating within a complex, highly regulated infrastructure environment. As part of continued investment in cyber security and operational resilience, they are looking for an OT Vulnerability Analyst to strengthen vulnerability management across their Operational Technology estate.
This is a hands-on role focused on identifying, assessing and managing vulnerabilities across OT environments, working closely with cyber, engineering and operational teams to understand technical exposure and prioritise remediation based on genuine operational risk.
What you'll be doing
- Identify, assess and track vulnerabilities across OT and industrial environments.
- Analyse vulnerability data and prioritise findings based on asset criticality, exploitability and operational impact.
- Support vulnerability scanning and assessment activity across OT assets and systems.
- Investigate vulnerabilities affecting industrial technologies, operating systems, network devices and supporting infrastructure.
- Work with OT, engineering, infrastructure and cyber teams to agree appropriate remediation or mitigation actions.
- Support vulnerability prioritisation where traditional patching may not be operationally possible.
- Maintain accurate vulnerability records, risk assessments and remediation plans.
- Monitor emerging vulnerabilities, threats and vendor security advisories relevant to the OT estate.
- Provide clear reporting and insight around vulnerability exposure, remediation progress and areas of heightened risk.
- Contribute to the continued development of OT vulnerability management processes, standards and controls.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What we're looking for
- Experience within OT/ICS cyber security, vulnerability management or industrial security.
- Strong understanding of Operational Technology environments and the challenges associated with securing operational systems.
- Hands-on experience identifying, analysing and prioritising technical vulnerabilities.
- Understanding of vulnerability scanning, assessment and remediation methodologies.
- Knowledge of industrial networks, protocols, operating systems and infrastructure.
- Ability to interpret CVEs, CVSS scores, vendor advisories and threat intelligence and translate these into meaningful risk.
- Familiarity with security frameworks and standards relevant to OT environments, such as IEC 62443, NIST, NCSC CAF or NIS regulations.
- Strong analytical skills and the ability to prioritise vulnerabilities according to genuine business and operational impact.
- Comfortable working across cyber, engineering, infrastructure and operational teams.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable experience
- Experience working within utilities, energy, manufacturing, industrial environments or Critical National Infrastructure.
- Exposure to industrial control systems, SCADA, PLCs or related operational technologies.
- Experience with OT vulnerability management or asset discovery platforms.
- Understanding of compensating controls and vulnerability mitigation where immediate patching is not possible.
- Knowledge of OT threat intelligence and industrial cyber threats.
The opportunity
You’ll be joining an organisation continuing to invest in the security and resilience of its operational environment.
The role offers the opportunity to work across a complex OT estate, helping the organisation better understand its vulnerability exposure, prioritise meaningful risks and strengthen its overall approach to operational cyber resilience.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills