Senior InfoSec Analyst (Vulnerability Management)

Job Summary

Are you a hands on practitioner of the vulnerability management practice in the cyber security defense?

Are you familiar with Tenable/Nessus for Vulnerability Management?

Are you ready for the next step in your cyber security career?

Charles River Laboratories are excited to offer this fully remote, UK based position for a Senior Analyst to join our global info sec team. 

Offering huge lateral and upwards career development opportunities and learning whilst working across the Americas, EMEA and APAC you can expect variety within an independent role. 

This is a technical role, you must possess a solid understanding of information security, applications, operating systems, networking, cloud infrastructure, and basic attacker tactics, techniques, and procedures (TTPs). The senior vulnerability analyst understands that legacy and present-day systems and applications may have weaknesses that can be exploited by external threat actors and potentially lead to a breach. Given that vulnerability management and risk exposure extend across all technical systems enterprise-wide, responsibilities of this position include identifying assets and vulnerabilities, reporting, remediation and continuous assessment. The position must collaborate with others on the team for remediation and additional validation, as well as contribute to other collaborative approaches driven by the security team strategy.

What You’ll Be Doing

Work as part of a team to consistently learn and share advanced skills and foster team excellence.
Manage vulnerabilities across applications, endpoints, databases, networking devices, and mobile, cloud and third-party assets.
Conduct continuous discovery and vulnerability assessment of enterprise-wide assets. 
Document, prioritise and formally report asset and vulnerability state, along with remediation recommendations and validation.
Communicate vulnerability results in a manner understood by technical and non-technical business units based on risk tolerance and threat to the business and gain support through influential messaging.
Leverage vulnerability database sources to understand each weakness, its probability and remediation options, including vendor-supplied fixes and workarounds.   
Support internal and external auditors in their duties that focus on compliance and risk reduction. 
Collaborate with security groups such as ‘pentesters’, patching, threat intelligence and 3rd party risk management to form a holistic team dedicated to thwarting attackers and reducing attack surface. 
Regularly research and learn new TTPs in public and closed forums, and work with colleagues to assess risk and implement/validate controls as necessary.

Qualifications & Experience

Bachelor’s degree (B.A / B.Sc) or equivalent in computer science, information technology, or related discipline.
Proven extensive and related experience in information security operations, vulnerability management.
Experience stabilising systems to run minimal application requirements, least privilege and additional host hardening.
Understanding of Windows and *nix operating systems, endpoint applications, networking protocols and devices.
Must have strong interpersonal, teamwork, self-initiative skills.

What We Offer You

Charles River offers a competitive benefits package, including a generous company pension scheme, private healthcare, dental coverage, performance bonuses, and access to employee discount programs — plus much more!