Analyst (Remediation)

Analyst (Remediation) Location: UK-based hybrid role, Occasional travel to site.

Centrica, Technology is a core driver of how we deliver our strategy.

You’ll join a team modernising our platforms, strengthening cyber and operational resilience, and advancing a product‑led way of working that brings engineers, data specialists and business experts together to deliver meaningful outcomes at pace.

We’re scaling automation and AI from proof‑of‑concept into real, end‑to‑end change - improving customer journeys, reducing cost‑to‑serve, accelerating delivery, and building the digital foundations that underpin everything from energy trading and risk to field operations and critical infrastructure.

If you want to work on complex, high‑impact problems using modern engineering practices, and help build reusable platforms that will shape how Centrica operates over the next decade, this is the place to do it.

An opportunity to play your part

This role sits at the heart of strengthening and securing critical technology environments, ensuring vulnerabilities are identified, prioritised, and remediated before they can impact the business.

We’re looking for a proactive and technically skilled Analyst (Remediation) who thrives on solving complex infrastructure and security challenges, working across teams to improve resilience, compliance, and operational performance.

As an Analyst (Remediation), you'll play a key role in reducing risk across our IT estate by implementing remediation activities, hardening infrastructure, and driving continuous improvement.

From addressing vulnerabilities and strengthening system configurations to automating remediation processes and supporting incident response, you'll help ensure our technology platforms remain secure, reliable, and aligned with industry best practices.

Working closely with security, infrastructure, risk, and compliance teams, you'll deliver practical solutions that enhance both security posture and operational efficiency.

Day to day

• Analyse vulnerability assessment and penetration testing findings to identify security and infrastructure risks.
• Apply patches, upgrades, configuration changes, and other remediation activities to address vulnerabilities and reduce risk exposure.
• Investigate recurring issues, conduct root cause analysis, and implement long‑term corrective actions.
• Strengthen the security and resilience of servers, networks, firewalls, and other infrastructure components by applying industry best practices.
• Remove, replace, or mitigate outdated technologies, redundant services, and unsupported systems.
• Ensure systems align with agreed security baselines, standards, and compliance requirements, including CIS benchmarks.
• Partner with Security, Infrastructure, and Engineering teams to develop and deliver remediation plans across the technology estate.
• Work alongside Risk and Compliance colleagues to prioritise vulnerabilities based on business impact and risk exposure.
• Provide regular updates to stakeholders on remediation progress, challenges, and outcomes.
• Monitor, track, and manage remediation activities to ensure timely completion and resolution.
• Maintain accurate documentation of remediation actions and update vulnerability management platforms and tracking tools.
• Produce reports and dashboards that demonstrate remediation effectiveness, risk reduction, and outstanding actions.
• Support cyber incident response activities by providing expertise on infrastructure configurations, vulnerabilities, and remediation actions.
• Help address and remediate weaknesses identified through security incidents and investigations.
• Utilise automation tools and scripting to improve the speed, consistency, and efficiency of remediation activities, including patching and configuration management.
• Identify opportunities to improve remediation processes and implement solutions that enhance operational efficiency and security posture.

What we need from you

• Proven experience in a cyber security, infrastructure, or IT operations role with a focus on vulnerability remediation.
• Strong understanding of vulnerability management processes and remediation lifecycle.
• Experience working with vulnerability scanning tools such as Qualys, Tenable, Rapid7, or Microsoft Defender Vulnerability Management.
• Experience assessing vulnerability severity using CVSS scores and prioritising remediation based on business risk.
• Knowledge of common security vulnerabilities and exposures (CVEs) and industry security best practices.
• Experience working with infrastructure, application, and service owners to coordinate remediation activities.
• Familiarity with endpoint management and patch deployment tools such as Microsoft Intune, MECM/SCCM, WSUS, or equivalent.
• Experience tracking remediation activities, producing reports, and demonstrating compliance against agreed SLAs.
• Experience with cloud security remediation in Microsoft Azure and/or AWS.
• Experience working in an ITIL-based service management environment and using tools such as Service Now.
• Good understanding of the differences between IT and OT and how to interact with both

Why should you apply?

We’re not a perfect place – but we’re a people place.

Our priority is supporting all of the different realities our people face.

Life is about so much more than work.

We get it.

That’s why we’ve designed our total rewards to give you the flexibility to choose what you need, when you need it, making sure that you and your family are supported not only financially, but physically and emotionally too.

If you’re full of energy, fired up about sustainability, and ready to craft not only a better tomorrow, but a better you, then come and find your purpose in a team where your voice matters, your growth is non‑negotiable, and your ambitions are our priority.

Help us, help you.

We would love for you to share any information about yourself throughout our recruitment process so that we can better understand you and help shape your journey.

We’re a family of brands revolutionising how we power the planet.

When it comes to energy, no one does it like us.

We make it, store it, move it, sell it and mend it.

We’re made up of 12 different businesses, but united by our purpose as Centrica.

We’re energisers.

Our journey to a greener, fairer future is powered by individuals like you.

Through innovative green products, intelligent energy solutions and developing smarter ways to use and save energy, we’re not just part of the energy transition, we’re leading it.

Our commitment goes beyond sustainability.

Together we’re bringing our collective energies to create positive change in our local communities.

If you immerse yourself in our fight to change tomorrow, you might just find your why.

We’re looking for people to add to our culture – not fit in with it.

We're building a community where you can be unapologetically you, where differences are celebrated, and where everyone can belong.

Real inclusivity also means supporting the different realities our people face.

That’s why we have the UK’s best Carers Policy and are continually building our approach to flexibility and wellbeing.

Of course, we love having fun too. We’re a people place after all.

#J-18808-Ljbffr