Vulnerability Research Analyst

Vulnerability Research Analyst

You’ll help a vulnerability management team understand what a newly disclosed CVE actually means for their estate. That means real analysis, not scanner output: is it exploitable here, what is the likely attack path, and what should be fixed first. You’ll join a new follow-the-sun team that a global consultancy is building for a large enterprise client.

The essentials

• £500 to £700 per day
• UK-based, hybrid working
• Contract, 12-month minimum
• Covering the EMEA shift of a 24x5 follow-the-sun service

What you’ll actually do

• Triage newly disclosed vulnerabilities and decide whether they affect the client’s applications and assets
• Research beyond what scanning tools report, using vendor advisories, exploit and proof-of-concept (PoC) details, threat intelligence and exploitation trends
• Assess exploitability, compensating controls and likely attack paths, and document exposure clearly
• Assign severity and risk ratings mapped to CVE, CPE and CVSS, with a clear rationale
• Explain impact to application, infrastructure and security teams and support their remediation decisions
• Keep audit-ready case notes across BAU work and urgent escalations

What you’ll need

Essential:

• Hands-on vulnerability triage and risk assessment across the full vulnerability management workflow
• Fluency with CVE, CPE and CVSS
• Experience using threat intelligence and exploit information to judge real-world risk
• Confidence advising stakeholders on risk priorities, not just reporting findings
• Clear technical writing
• Familiarity with enterprise platforms such as Microsoft, VMware, Oracle/Java, Citrix and F5, and their patch and release cycles

Nice to have:

• Hands-on use of AI tools in security work, including AI-assisted analysis or agentic AI
• Experience with cloud environments and large-scale open-source use in enterprise estates

If your experience is mainly running scans, compliance scanning or managing vulnerability management tooling, this role probably isn’t the right fit.

What’s in it for you

• A minimum 12 month contract on a 15-person team being built across EMEA, North America and APAC
• Advisory work where your analysis directly shapes what gets fixed and when

Apply

LT Harper is handling this search on the client’s behalf. If you’re interested, apply directly on this advert. If you have any questions, or would like to refer someone, reach out to Catherine Burn at c.burn@ltharper.com.