Threat Analyst - Contract Opportunity
Location
Ireland (Hybrid/Remote options subject to client requirements)
Contract Type
12 Month Contract
Eligibility
Applicants must have full rights to work in Ireland without sponsorship.
Eligible candidates may hold:
- Irish Citizenship
- EU Citizenship
- Stamp 4
- Stamp 1G
- Equivalent unrestricted Irish work authorization
Unfortunately, visa sponsorship is not available for this position.
Overview
We are seeking an experienced Threat Analyst / Product Security Analyst to join a highly regulated organisation operating within the Medical Device, Healthcare, Financial Services, or other regulated software environments.
This role will focus on assessing software vulnerabilities, exploitability analysis, product security risk assessments, threat modelling, and supporting secure product development throughout the software lifecycle.
The successful candidate will act as a key link between Security, Product Development, Engineering, and Compliance teams, ensuring vulnerabilities are properly assessed, prioritised, and remediated based on real-world risk.
Key Responsibilities
- Perform vulnerability assessments and exploitability analysis across software products and applications.
- Review and assess CVE, CVSS, and CWE data to determine product and business impact.
- Conduct Threat Modelling activities using methodologies such as STRIDE and PASTA.
- Support Secure SDLC activities including security reviews and risk assessments.
- Analyse outputs from SAST, DAST, SCA, and SBOM tooling and determine remediation priorities.
- Evaluate third-party and open-source software risks.
- Perform product security risk assessments and residual risk evaluations.
- Collaborate with engineering teams to support vulnerability remediation and secure design initiatives.
- Produce clear technical documentation, risk assessments, and audit-ready security artefacts.
- Support security governance activities aligned with regulatory and compliance requirements.
Required Experience
Application & Product Security
- Product Security
- Application Security
- Secure SDLC
- Security Architecture Reviews
- Vulnerability Management
- Security Risk Assessments
Threat Analysis
- Threat Modelling (STRIDE preferred)
- Attack Surface Analysis
- Exploitability Analysis
- Vulnerability Triage
- Residual Risk Assessment
Security Tooling
- SAST
- DAST
- SCA
- SBOM
- Vulnerability Scanning Tools
Vulnerability Management
Experience working with:
- CVE
- CVSS
- CWE
- Vulnerability Remediation
- Dependency Risk Analysis
- Supply Chain Security
Governance & Compliance
Experience working within one or more of:
- NIST
- MITRE ATT&CK
- ISO 27001
- GDPR
- PCI-DSS
- FDA-regulated environments
- Medical Device Security Standards
- Financial Services Security Standards
Preferred Technical Skills
Experience with some of the following:
- Checkmarx
- Fortify
- Veracode
- SonarQube
- Burp Suite
- AppScan
- Snyk
- Black Duck
- JFrog Xray
- Mend
- Dependency-Track
- OWASP Dependency Check
Industry Experience
Candidates must have experience working in a highly regulated environment such as:
- Medical Devices
- Healthcare Software
- Financial Services
- Banking
- FinTech
- Pharmaceutical
- Life Sciences
Ideal Candidate
- Strong understanding of vulnerability assessment and exploitability analysis
- Experienced in Threat Modelling (STRIDE) and secure-by-design principles
- Comfortable assessing findings from SAST, DAST, SCA, and SBOM processes
- Able to distinguish between vulnerabilities that are merely present and vulnerabilities that are genuinely exploitable
- Strong stakeholder management and communication skills
- Able to translate technical risks into business-focused recommendations