Vulnerability & Exposure Management Analyst

Vulnerability & Exposure Management Analyst Aplicar We are looking for a Vulnerability & Exposure Management Analyst to join a mature Cyber Defense Center within a global enterprise environment. This role sits at the core of the vulnerability lifecycle, acting as a bridge between security, infrastructure, and development teams , ensuring that identified vulnerabilities are properly prioritised, communicated, and remediated. Rather than focusing on scanning or hands-on remediation, this position plays a key orchestration and advisory role , working closely with internal stakeholders across multiple countries. Your responsibilities Manage the lifecycle of vulnerabilities and exposures: triage, prioritisation, assignment and follow-up Analyse vulnerabilities across different domains: infrastructure, web applications, and (in the future) APIs Apply risk-based prioritisation using frameworks such as CVSS Provide clear and actionable remediation guidance to internal teams Collaborate with infrastructure, cloud and development teams to support remediation Act as a first point of contact for internal stakeholders , handling: support requests troubleshooting clarification of findings Develop and maintain remediation guidelines for: security misconfigurations (Non-CVE) web application vulnerabilities Contribute to process improvements, automation and new initiatives Monitor and track remediation progress through dashboards and reports Help improve the overall vulnerability management operating model What we’re looking for Must-have 5+ years of experience in Cybersecurity Operations Hands-on experience in Vulnerability Management / Exposure Management Strong understanding of: CVEs and security misconfigurations risk prioritisation (CVSS or similar) Experience across: infrastructure environments web applications (OWASP mindset) Solid understanding of: networking, OS (Windows/Linux) Active Directory or IAM environments Strong communication skills and stakeholder management Experience working with ticketing systems (Jira, ServiceNow, etc.) Fluent English Nice to have Exposure to cloud environments (AWS, Azure, GCP) Knowledge of CIS benchmarks or hardening standards Basic scripting (Python / PowerShell) Familiarity with graph-based data (e.g., Neo4j) What makes this role different You will not just detect vulnerabilities — you will drive their resolution Highly collaborative role with strong exposure to international teams Opportunity to influence processes and shape how vulnerability management is done Potential to grow into leadership responsibilities over time Working environment International and English-speaking environment Hybrid model (1–2 office days/week) Flexible schedule with high autonomy Occasional travel within Europe Compensation & benefits Salary: 51k-56k€ (depending on experience) Flexible compensation package (~3.7k net/year) Private health insurance Remote work allowance (1-2 days/week office) and flexible hours Wellbeing benefits Departamento Security Puesto Vulnerability Ubicaciones Barcelona Estado remoto Híbrido Salario anual 51.000 € - 56.000 € Acerca de Q-Tech En Q-tech , vivimos y respiramos tecnología. Somos ese equipo que conecta a las mejores mentes del mundo IT con empresas que están listas para comerse el mercado. Llevamos años cazando talento tech, y nos gusta hacerlo de la manera más artesanal posible; nos gusta el trato cercano, real y auténtico. Amamos lo que hacemos y creemos que el talento no se busca, ¡se atrae! 🚀 Nos movemos como pez en el agua en la comunidad IT, siempre al tanto de lo último en tecnología, startups, y los movimientos del sector. Si eres un crack en lo que haces o una empresa buscando uno, ¡hablamos el mismo idioma! Fundada en 2000 Compañeros 20 Facturación 2M