Vulnerability Management Analyst (Remote, EMEA)

About the role

A leading global technology and consulting organization specializing in cybersecurity, digital transformation and mission-critical enterprise solutions is hiring a Vulnerability Management Analyst on a 100% remote contract covering the EMEA region. The role supports complex technology environments by helping organizations strengthen security, manage risk and improve operational resilience. It contributes to a 24x5 global vulnerability triage and assessment operation, with an anticipated 40-hour week.

Key responsibilities

• Review, analyze and triage newly disclosed vulnerabilities across complex enterprise technology environments.
• Determine whether identified vulnerabilities affect customer applications, infrastructure, platforms or other enterprise assets.
• Evaluate exploitability using threat intelligence, published advisories, proof-of-concept exploits and potential attack paths.
• Assess organizational exposure and assign risk and severity ratings using CVE, CPE, CVSS and client-specific criteria.
• Analyze vulnerabilities affecting Microsoft, VMware, Oracle/Java, Citrix, F5, cloud platforms and open-source technologies.
• Evaluate patch availability, vendor advisories, software release lifecycles and remediation options.
• Develop and maintain audit-ready vulnerability assessments with technical findings, business impact, risk justification and recommended actions.
• Identify and escalate critical or high-risk vulnerabilities.
• Support ongoing vulnerability management operations and collaborate with globally distributed cybersecurity teams, including shift handoffs.

Required profile

• Hands-on vulnerability management and triage experience, including assessing newly disclosed vulnerabilities and determining enterprise exposure and impact.
• Broad enterprise technology knowledge across Microsoft, VMware, Oracle/Java, Citrix, F5, cloud environments and open-source technologies, including patch management and software release lifecycles.
• Excellent technical documentation and communication skills, able to produce accurate, audit-ready assessments.

Required skills

• CVE, CPE and CVSS
• Risk assessment methodologies, including exploitability evaluation, threat intelligence and proof-of-concept exploits
• Assigning defensible risk and severity ratings