Senior InfoSec Analyst (Vulnerability Management) in Tranent

For 75 years, Charles River employees have worked together to assist in the discovery, development and safe manufacture of new drug therapies. When you join our family, you will have a significant impact on the health and well-being of people across the globe. Whether your background is in life sciences, finance, IT, sales or another area, your skills will play an important role in the work we perform. In return, we’ll help you build a career that you can feel passionate about.

Charles River Laboratories are excited to offer this fully remote, UK based position for a Senior Analyst to join our global info sec team. This is a technical role requiring a solid understanding of information security, applications, operating systems, networking, cloud infrastructure, and basic attacker tactics, techniques, and procedures (TTPs). The senior vulnerability analyst understands that legacy and present-day systems and applications may have weaknesses that can be exploited by external threat actors and potentially lead to a breach. Vulnerability management and risk exposure extend across all technical systems enterprise-wide, with responsibilities including identifying assets and vulnerabilities, reporting, remediation and continuous assessment. The position collaborates with others on the team for remediation and validation, and contributes to the security team strategy. This is a remote, UK-based opportunity with opportunities for development across the Americas, EMEA and APAC.

This is a technical role with opportunities for lateral and upward career development and learning while working across regions.

What You’ll Be Doing

• Work as part of a team to consistently learn and share advanced skills and foster team excellence.
• Manage vulnerabilities across applications, endpoints, databases, networking devices, and mobile, cloud and third-party assets.
• Conduct continuous discovery and vulnerability assessment of enterprise-wide assets.
• Document, prioritise and formally report asset and vulnerability state, along with remediation recommendations and validation.
• Communicate vulnerability results in a manner understood by technical and non-technical business units based on risk tolerance and threat to the business, and gain support through influential messaging.
• Leverage vulnerability database sources to understand each weakness, its probability and remediation options, including vendor-supplied fixes and workarounds.
• Support internal and external auditors in their duties that focus on compliance and risk reduction.
• Collaborate with security groups such as ‘pentesters’, patching, threat intelligence and third-party risk management to form a holistic team dedicated to thwarting attackers and reducing attack surface.
• Regularly research and learn new TTPs in public and closed forums, and work with colleagues to assess risk and implement/validate controls as necessary.

Qualifications & Experience

• Bachelor’s degree (B.A / B.Sc) or equivalent in computer science, information technology, or related discipline.
• Proven extensive and related experience in information security operations, vulnerability management.
• Experience stabilising systems to run minimal application requirements, least privilege and additional host hardening.
• Understanding of Windows and Unix operating systems, endpoint applications, networking protocols and devices.
• Must have strong interpersonal, teamwork, self-initiative skills.

What We Offer You

Charles River offers a competitive benefits package, including a generous company pension scheme, private healthcare, dental coverage, performance bonuses, and access to employee discount programs — plus much more!