Vulnerability and Risk Analyst

About the role

We are looking for a proactive Vulnerability and Risk Analyst to protect our digital assets and IT infrastructure. You will work closely with cross‑functional teams to implement risk‑management strategies, ensure compliance with security standards, and defend against emerging threats.

Key responsibilities

• Conduct contextual risk analysis to evaluate how multiple risk factors impact operations.
• Apply standardized risk methodologies (e.g., NIST, ISO) to quantify and qualify risk.
• Manage vulnerability‑assessment tools and automate risk reporting using data‑analysis techniques.
• Leverage OSINT and dorking techniques to discover exposed sensitive data.
• Perform moderate penetration‑testing to validate findings.
• Collaborate with teams responsible for network, compute, storage, virtualization, web and mobile applications.
• Document risk assessments and produce clear technical reports.

Required profile

• Bachelor’s degree in Computer Science, Mathematics, Software Engineering, Physics, Data Science or related field.
• 6+ years of experience in cybersecurity risk management and compliance.
• Professional certifications such as CISSP, CISM, ISO 27001 Lead Auditor, CCNP, GEVA, or vendor‑specific credentials (Tenable, Rapid7).

Required skills

• Vulnerability‑management tools (any commercial or open‑source solution).
• Data‑analysis tools: Excel, Python, Power BI.
• OSINT techniques and dorking.
• Penetration‑testing experience.
• Network, compute, storage, and virtualization infrastructure knowledge.
• Web and mobile application security.
• Security operations and hands‑on configuration.
• Professional technical writing.