covenant hr · AE
Posted:
Company - Our client is a leading global technology and consulting organization specializing in cybersecurity, digital transformation, and mission-critical enterprise solutions. They support complex technology environments and help organizations strengthen security, manage risk, and improve operational resilience. Job Title - Vulnerability Management Analyst Location - 100% Remote (EMEA Region) Role Type - Contract (Minimum 1 Year) Must Have Skills: Hands-on vulnerability management and triage experience, including assessing newly disclosed vulnerabilities, identifying affected assets, and determining enterprise exposure and impact. Strong expertise in CVE, CPE, CVSS, and risk assessment methodologies, including evaluating exploitability, threat intelligence, proof-of-concept exploits, and assigning defensible risk and severity ratings. Broad enterprise technology knowledge across Microsoft, VMware, Oracle/Java, Citrix, F5, cloud environments, and enterprise open-source technologies, including patch management and software release lifecycles. Excellent technical documentation and communication skills, with the ability to produce accurate, audit-ready vulnerability assessments detailing exposure, impact, risk rationale, remediation recommendations, and escalation requirements. Responsibilities and Job Details: Review, analyze, and triage newly disclosed vulnerabilities across complex enterprise technology environments. Determine whether identified vulnerabilities impact customer applications, infrastructure, platforms, or other enterprise assets. Evaluate vulnerability exploitability using threat intelligence, published advisories, proof-of-concept exploits, and potential attack paths. Assess organizational exposure and assign appropriate risk and severity ratings using CVE, CPE, CVSS, and client-specific risk assessment criteria. Analyze vulnerabilities affecting Microsoft, VMware, Oracle/Java, Citrix, F5, cloud platforms, and enterprise open-source technologies. Evaluate patch availability, vendor advisories, software release lifecycles, and potential remediation options. Develop and maintain comprehensive, audit-ready vulnerability assessments, including technical findings, business impact, risk justification, and recommended actions. Identify and escalate critical or high-risk vulnerabilities requiring immediate attention or further investigation. Support ongoing vulnerability management operations, ensuring timely analysis and consistent assessment quality. Collaborate with globally distributed cybersecurity teams to maintain effective communication, documentation, and shift handoffs. Contribute to a 24x5 global vulnerability triage and assessment operation, working an anticipated 40-hour week within the EMEA coverage model.