Vulnerability Analyst

Anticipated Contract End Date/Length: September 30, 2026
Work Set Up: Hybrid

Our client in the Information Technology and Services industry is looking for a Vulnerability Analyst to support the identification, analysis, and remediation tracking of security vulnerabilities across the technology estate. This role focuses on conducting vulnerability scans across infrastructure, cloud environments, endpoints, and applications, while ensuring findings are accurately analysed and prioritised. The position plays an important role in strengthening the organisation’s security posture by providing insights into vulnerability trends, supporting remediation efforts, and monitoring emerging threats that may impact the environment.

What you will do:

• Run scheduled vulnerability scans across infrastructure, cloud environments, endpoints, and applications.
• Analyse scan results to validate true positives and remove false positives.
• Prioritise vulnerabilities based on risk level, exploitability, and business impact.
• Track and manage vulnerability remediation activities across the technology estate.
• Produce reports and dashboards highlighting vulnerability trends, mean time to remediation, and remediation progress.
• Monitor threat intelligence sources to identify actively exploited vulnerabilities such as Known Exploited Vulnerabilities (KEV).
• Provide technical guidance to patching and remediation teams to support effective vulnerability mitigation.
• Collaborate with security, infrastructure, and application teams to ensure vulnerabilities are addressed in a timely manner.

Qualifications

• Experience working with vulnerability scanning tools such as Tenable, Qualys, or Rapid7.
• Understanding of vulnerabilities across operating systems, networks, cloud environments, and applications.
• Knowledge of vulnerability management processes including scanning, analysis, triage, and remediation tracking.
• Strong analytical skills for identifying and prioritising security risks.
• Ability to produce clear reporting and dashboards on vulnerability metrics and remediation performance.
• Strong communication skills to collaborate effectively with technical and operational teams.
• Ability to interpret threat intelligence and apply findings to vulnerability management activities.

Additional Information

All your information will be kept confidential according to EEO guidelines.

Candidates must be legally authorized to live and work in the country where the position is based, without requiring employer sponsorship.

HelloKindred is committed to fair, transparent, and inclusive hiring practices. We assess candidates based on skills, experience, and role-related requirements.

We appreciate your interest in this opportunity. While we review every application carefully, only candidates selected for an interview will be contacted.

HelloKindred is an equal opportunity employer. We welcome applicants of all backgrounds and do not discriminate on the basis of race, colour, religion, sex, gender identity or expression, sexual orientation, age, national origin, disability, veteran status, or any other protected characteristic under applicable law.