IT Security Analyst - Threat and Vulnerability Management Team Location London Business Area CISO, Legal, Compliance, and Risk Ref # 10055003 Description & Requirements The Threat and Vulnerability Management Team (TVM) is dedicated to making our systems and technologies as secure as possible. We protect Bloomberg. We partner with internal technical departments to ensure the confidentiality, integrity, and availability of Bloomberg systems and the data we process. We aim to ensure that our clients see us as a trusted partner. We report to the Chief Information Security Office (CISO) who owns the technical aspects of this mission by ensuring Bloomberg products, systems, networks and commercial applications are built and maintained with security in mind. We work on purpose. Come find yours. What’s The Role? We are seeking an IT Security Analyst to help ensure that our IT infrastructure and security processes are resilient against the latest threats. You will be responsible for hunting for, exploit testing, analyzing and assessing vulnerabilities across a wide range of technologies. You'll engage with various technology partners to test assumptions of our security posture, and manage identified vulnerabilities through remediation. You will work directly with other cross-department security engineering and incident response teams to set strategic direction for our enterprise Threat and Vulnerability Management program. This is a team that drives company-wide initiatives to improve the effectiveness of Bloomberg’s security controls. Analysts in this role must show exemplary judgment in making technical decisions to achieve business goals. You're expected to always demonstrate resilience and navigate difficult situations with composure and tact. We'll Trust You To: Perform IT Security assessments and partner with other security or IT professionals to assess potential impact from vulnerabilities and determine appropriate mitigating controls Build strong partnerships with technical teams to promote best practices for managing vulnerabilities across traditional infrastructure and in cloud environments. Understand business requirements and work with business partners to define appropriate solutions; meeting both security mandates and business needs Help standardize work-flows, processes, procedures and reporting Produce metrics and key performance indicators that demonstrate the effectiveness of the teams remediation efforts across the enterprise Improve the design and usefulness of our IT Security management tools and solutions. Have excellent interpersonal and effective communications skills You’ll Need To Have: - 5+ years IT operations, software development, systems management or IT Security related experience - Hands-on expertise working with enterprise network architectures, Linux and Windows OS, system administration or as a software developer - Knowledge of IT security and system hardening best practices; including but not limited to operating systems (Windows, Unix, Linux), public cloud, web applications, network devices, SDLC processes, and concepts - Strong troubleshooting skills across applications, operating systems, networks, APIs, and data integrations - Experience using AI platforms such as Claude and OpenAI to support development, automation, analysis, documentation, and operational workflow improvement. - Experience analyzing vulnerability findings from IT and Security management tools - Can effectively manage complex tasks, projects, and initiatives - Ability to interpret complex data sets to make informed risk-based decisions We'd love to see: - Solid understanding of Risk management frameworks - Experience building or maintaining integrations between vulnerability scanners, asset inventories, ticketing systems, and reporting platforms - 5+ years of Python Programming experience - Understanding of industry standards such as NIST, CVE, CPE and CVSS - Experience managing operational vulnerability management workflows using platforms such as Nucleus Security, Brinqa, ServiceNow Vulnerability Response, or similar technologies - Ability to learn and implement technologies quickly - A bachelor's degree in Computer Science, Network Engineering, Engineering, Information Security, or other related fields If This Sounds Like You: Apply if you think we're a good match. We'll get in touch to let you know what the next steps are! If indicated, please note that years of experience are a guide; we will consider applications from all candidates who can demonstrate the skills necessary for the role. Discover what makes Bloomberg unique - watch our podcast series for an inside look at our culture, values, and the people behind our success.
IT Security Analyst - Threat and Vulnerability Management Team in London employer: Bloomberg
Bloomberg is an exceptional employer, offering a dynamic work environment in London where innovation and collaboration thrive. As a Senior Physical Security Technology Specialist, you will benefit from a culture that prioritises professional growth, with opportunities to lead impactful projects across the EMEA region while working alongside a team of dedicated security professionals. With a commitment to employee development and a focus on cutting-edge technology, Bloomberg provides a rewarding career path for those looking to make a meaningful impact in the security industry.
