Vulnerability Analyst

📍 Manchester, Cheltenham or London

Technical Account Manager – Vulnerability Analyst

This is an exciting opportunity to join a dynamic security solutions team in which you will be responsible for the management and delivery of client security programs. As part of a passionate delivery team, you must have a passion for IT security as well as a desire to deliver a high-quality service to our client base. A good working knowledge Vulnerability Exposure Management and Service Now is a strong positive for this role.

Responsibilities:

This is an opportunity to work in a fun and challenging environment, using market leading security testing tools and platforms to provide security testing services to our large client base. You will play a key role in delivering and managing client security programs all year round, as well as building relationships with clients and ensuring that our services are meeting their needs. You will also be given every opportunity to help shape the direction of the department as well as assist with the development of new service lines offered by the company.

• Setting up security programs with clients based on their requirements
• Running network and application vulnerability scans
• Manually verifying all vulnerabilities identified in scans
• Writing and delivering client reports
• Analysis of external attack surface outputs, to identify risk
• Work directly with customers to provide prioritization for remediation
• Providing support and answering queries from clients

Experience / Skills:

• Good understanding and experience of Linux and Windows operating systems
• Good understanding and exposure to network and web application security
• Experience of using network and application scanning tools and utilities, such as Nexpose Rapid 7, HP WebInspect, IBM AppScan , Tenable Nessus, Burp, NMAP etc
• Understanding of how vulnerabilities can be linked and the impact on risk
• Experience of EASM platforms such as Cycognito
• Experience of ITSM’s such as Service Now
• Good interpersonal and communication skills
• Capable of handling high work loads
• Ability to work, and manage time and tasks independently
• Ability to communicate with customers in a clear and concise manner
• Excellent customer handling skills

Desirable competencies:

• Degree in Computer Science / Engineering or equivalent experience
• Experience in Information Security
• CRT and/or IASME Vulnerability assessment Plus certification
• Understanding of web services architecture and commonly employed technologies
• Exposure to software development and understanding of secure code development
• Knowledge and understanding of PCI DSS requirements, in particular PCI ASV testing
• Understanding of SIEM products and services within a SOC environment
• UK Security Check (SC) clearance is desirable but not essential

About NCC Group

We are passionate about helping our customers to protect their brand, value and reputation against the ever-evolving threat landscape. We fuel that passion with investment – in our people, our business and we want to invite talented people to join us in our vision to be the leading cyber security advisor.

The NCC Group family has 2,500 members located around the world providing a trusted advisory service to 15,000 customers. Our heart is in our space.

About your application

We review every application received and will get in touch if your skills and experience match what we’re looking for. If you don’t hear back from us within 10 days please don’t be too disappointed – we may keep your CV on our database for any future vacancies and we would encourage you to keep an eye on our career opportunities as there may be other suitable roles.

If you do not want us to retain your details please email emily.coates@nccgroup.com. All personal data is held in accordance with the NCC Group Privacy Policy. We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments to support you during the application process, please tell us at any stage

Please note that this role has background clearance as mandatory due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process.