Overview
In this role, you will lead the vulnerability management program to reduce the firm’s cyber risk. You’ll partner with technology teams to drive remediation, track progress, and provide risk-based guidance. You’ll work with security tooling, threat intel, and dashboards to inform executive decisions. This position offers a chance to influence security posture across a large, global enterprise and evolve vulnerability practices in line with evolving threats.
Responsibilities
- Operate as SME for the vulnerability management program
- Perform regular vulnerability scans across applications and infrastructure
- Validate and prioritise remediation from security tooling
- Monitor advisories, threat intelligence, and vendor notifications for remediation
- Develop and maintain vulnerability dashboards, reports, and executive metrics
Key requirements
- Expert experience with enterprise vulnerability management platforms
- Experience with threat intelligence, attack surface mgmt., and exposure mgmt. platforms
- Expert understanding of vulnerability scoring (CWE, CVSS, MITRE ATT&CK)
- Foundational knowledge of Windows, Linux and networking
- Ability to assess security risks and prioritise remediation at enterprise scale
- Experience in creating/remediating vulnerability dashboards and executive metrics
- Ability to validate vulnerabilities with accuracy and reduce false positives
- Experience managing vulnerability exceptions and risk acceptance in a large enterprise
- Strong written and oral communication; ability to convey complex concepts to non-technical audiences
- Proficiency in English; capable of assisting with internal training materials and documentation
- Ability to meet SLAs for remediation
- Understanding vulnerability management within risk management and organizational priorities
- Strong written and oral communication
- Ability to convey complex concepts to non-technical constituents
- Autonomous work style and adaptability
- Enterprise vulnerability management platforms
- Threat intelligence, attack surface management, exposure management platforms
- Vulnerability scoring (CWE, CVSS, MITRE ATT&CK)
Vulnerability Management Analyst in Belfast employer: Baker&McKenzie
Baker McKenzie is an exceptional employer, offering a dynamic and collaborative work environment in Belfast, where you will be part of a newly established Employment Practice team. With a strong commitment to employee growth, comprehensive benefits including private health cover and life assurance, and a focus on diversity and inclusion, we provide a unique opportunity for lawyers to engage in high-quality, varied work while being supported in their professional aspirations.
