At a Glance
- Tasks: Support the vulnerability management lifecycle and ensure compliance with Cyber Essentials Plus.
- Company: Join Methods, a leader in transforming public sector services in the UK.
- Benefits: Enjoy 25 days annual leave, wellness programmes, and exciting social events.
- Other info: Active SC Clearance needed; full-time onsite work in a secure environment.
- Why this job: Make a real impact on public services while developing your skills in a supportive environment.
- Qualifications: Experience in vulnerability management and knowledge of Cyber Essentials Plus required.
The predicted salary is between 63000 - 77000 £ per year.
Since our establishment in 1990, Methods has partnered with a range of central government departments and agencies to transform the way the public sector operates in the UK.
Our mission is to improve and safeguard public-facing services.
We apply digital thinking to ensure the future of our public services is centered around our citizens.
Our human touch sets us apart from other consultancies, system integrators and software houses - we have a customer-centric value system whereby we focus on delivering what is right for our clients.
We passionately support our clients in the success of their projects while working collaboratively to share skill sets and solve problems.
At Methods we have fun while working hard; we are not afraid of making mistakes and learning from them.
Methods are experts in delivering secure, resilient cyber and information services – keeping systems and data safe.
We help reduce risk and vulnerabilities from cyber-attacks by developing a security road-map tailored to your unique needs.
We help organisations improve processes such as threat management by building an identity management programme, and establishing prevention, detection and response capabilities to cyber-attacks.
Role
We are seeking an experienced
Vulnerability Management Analyst to provide operational support across the end-to-end vulnerability management lifecycle, ensuring compliance with Cyber Essentials Plus requirements within a highly secure enterprise environment.
Working closely with infrastructure teams, service providers, asset owners and security stakeholders, you will be responsible for coordinating vulnerability remediation activities, validating coverage, tracking progress and escalating compliance risks.
This is a governance-driven role focused on ownership, reporting, escalation and stakeholder management rather than hands-on remediation.
- Execute and validate vulnerability scans using Tenable/Nessus platforms.
- Verify scan coverage against CMDB and asset inventory records.
- Review, prioritise and manage Critical and High vulnerabilities in line with Cyber Essentials Plus requirements.
- Coordinate remediation ownership across internal teams, managed service providers and third-party stakeholders.
- Raise, maintain and track vulnerability remediation tickets using Remedy or equivalent ITSM tools.
- Investigate unidentified asset ownership and resolve coverage gaps.
- Monitor remediation progress and maintain a clear audit trail of actions and communications.
- Escalate overdue vulnerabilities through established governance, risk acceptance and deviation processes.
- Produce weekly vulnerability management and compliance reports.
- Maintain KPI reporting covering ticket volumes, remediation performance and compliance metrics.
- Create and enhance reporting dashboards using Splunk and Excel.
- Provide updates and support during regular Cyber Essentials Plus governance meetings.
- Coordinate ongoing management of Medium and Low vulnerabilities through monthly review cycles.
- Engage with infrastructure, security and service delivery teams to drive remediation activity and maintain compliance.
Essential Skills & Experience
- Strong vulnerability management experience within a large enterprise or regulated environment.
• Hands-on experience with
- Tenable Security Center
- Nessus
- Vulnerability scanners and agent management platforms
- Experience analysing, prioritising and tracking vulnerability remediation programmes.
- Good understanding of Cyber Essentials Plus requirements and vulnerability governance processes.
- Experience utilising CMDB platforms and asset inventories to validate coverage and identify ownership.
- Knowledge of ITSM and ticketing tools, ideally Remedy.
- Experience creating and maintaining Splunk dashboards and security reporting.
- Desired Skills
- Experience working within Defence, Government or other highly regulated environments.
- Knowledge of vulnerability management best practices and security compliance frameworks.
- Familiarity with risk acceptance and exception management processes.
- Experience working with outsourced service providers and managed service organisations.
- Understanding of enterprise infrastructure, server and workstation estate management.
- Security & Location Requirements
Active SC Clearance is mandatory.
- Must be willing and able to work full-time onsite .
- Successful candidates must be comfortable working within a secure operational environment.
Methods is passionate about its people; we want our colleagues to develop the things they are good at and enjoy.
- By joining us you can expect
- Autonomy to develop and grow your skills and experience
- Be part of exciting project work that is making a difference in society
- Strong, inspiring and thought-provoking leadership
- A supportive and collaborative environment
- Development
- access to Linked In Learning, a management development programme, and training
- Wellness
- 24/7 confidential employee assistance programme
- Social
- office parties, breakfast Tuesdays, monthly pizza Thursdays, Thirsty Thursdays, and commitment to charitable causes
- Time Off
- 25 days of annual leave a year, plus bank holidays, with the option to buy 10 extra days each year
- Volunteering
- 2 paid days per year to volunteer in our local communities or within a charity organisation
- Pension
- Salary Exchange Scheme with 4% employer contribution and 5% employee contribution
- Life Assurance
- of 4 times base salary
- Private Medical Insurance
- which is non-contributory (spouse and dependants included)
- Worldwide Travel Insurance
- which is non-contributory (spouse and dependants included)
- Enhanced Maternity and Paternity Pay
- Travel
- season ticket loan, cycle to work scheme
- For a full list of benefits please visit our website www. methods. co. uk/careers/benefits
- #J-18808-Ljbffr
Vulnerability Management Analyst in Portsmouth employer: Methods Business and Digital Technology
At Methods Business and Digital Technology, we pride ourselves on fostering a collaborative and innovative work culture that empowers our employees to thrive. As a Principal Microsoft Fabric Architect, you will enjoy the flexibility of remote work while having access to professional development opportunities and mentorship from industry leaders. Our commitment to employee growth, coupled with the chance to work on cutting-edge projects in a dynamic environment, makes us an exceptional employer for those seeking meaningful and rewarding careers.
Contact Details:
Methods Business and Digital Technology Recruitment Team
StudySmarter Expert Advice🤫
We think this is how you could land Vulnerability Management Analyst in Portsmouth
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Methods Business and Digital Technology, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Methods Business and Digital Technology
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Methods Business and Digital Technology. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Vulnerability Management Analyst in Portsmouth
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Methods Business and Digital Technology insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Methods Business and Digital Technology that you’re committed to staying ahead in the game.
How to prepare for a job interview at Methods Business and Digital Technology
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Methods Business and Digital Technology to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Methods Business and Digital Technology.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
