Analyst (Remediation)
Skills
Business RiskCloud SecurityContinuous ImprovementDashboardsIT Service ManagementRoot Cause AnalysisScripting
What the job involves
The main requirements, responsibilities and hiring steps.
Requirements
- Proven experience in a cyber security infrastructure or IT operations role with a focus on vulnerability remediation
- Strong understanding of vulnerability management processes and remediation lifecycle
- Experience working with vulnerability scanning tools such as Qualys Tenable Rapid7 or Microsoft Defender Vulnerability Management
- Experience assessing vulnerability severity using CVSS scores and prioritising remediation based on business risk
- Knowledge of common security vulnerabilities and exposures CVEs and industry security best practices
- Experience working with infrastructure application and service owners to coordinate remediation activities
- Familiarity with endpoint management and patch deployment tools such as Microsoft Intune MECM SCCM WSUS or equivalent
- Experience tracking remediation activities producing reports and demonstrating compliance against agreed SLAs
- Experience with cloud security remediation in Microsoft Azure and or AWS
- Experience working in an ITIL based service management environment and using tools such as ServiceNow
- Good understanding of the differences between IT and OT and how to interact with both
Nice to have
- Proactive
- Technically skilled
- Collaborative
- Detail oriented
- Resilient
Day to day
- Analyse vulnerability assessment and penetration testing findings to uncover security and infrastructure risks
- Apply patches upgrades configuration changes and other remediation actions to reduce exposure and strengthen resilience
- Work with security infrastructure risk and compliance teams to prioritise issues deliver remediation plans and track progress
- Use automation and scripting to improve the speed consistency and efficiency of patching configuration management and remediation processes