LOCATION(S): UK, EUROPE & AFRICA : UK : LONDON

BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments.

SKILLS & EXPERIENCE

• Digital vulnerability subject matter expertise and technical knowledge within cyber security.
• Ability to manage various stakeholders within and outside the company.
• Ability to make rational, realistic and sound decisions based on good analysis of the full facts and consideration of the different options and outcomes.
• Ability to communicate effectively and constructively, in a clear and concise manner with key stakeholders.

The Vulnerability Analyst is to manage the identification and analysis of security vulnerabilities and support required remediation across National Highways infrastructure (IT and OT). The Vulnerability Analyst will co-ordinate with various digital teams across NH to ensure all vulnerability are addressed in a timely manner. The Analyst will continually improve vulnerability tooling and process while supporting the improvement of the security capability of National Highways through dashboard monitoring and retrospective assessments.

• Planning, execution and management of vulnerability assessment and scanning activities across the National Highway’s networks, systems, and applications.
• Ensure vulnerability scans and assessments are run periodically in line with policies and standards across the IT, OT, and cloud infrastructure.
• Prioritise vulnerabilities based on their severity, exploitability, and potential business impact to guide remediation efforts effectively.
• Collaborate with 3rd party services suppliers and internal stakeholders to ensure that identified vulnerabilities are patched and remediated in a timely manner.
• Help establish and improve patch management processes and coordinate with system owners and vendors to ensure patch deployment and validation.
• Generate comprehensive vulnerability assessment reports and communicate findings to relevant stakeholders, including IT management, System owners and CSO. Clearly articulate the risks associated with identified vulnerabilities and provide recommendations for remediations.
• Monitor Threat Intel feeds, vulnerabilities databases to proactively identify and respond to new vulnerabilities and attack vector.
• Support integration of personnel and physical security with the SOC Team
• Transition work to SOC Operations tea

WHAT YOU’LL BE DOING

The Vulnerability Analyst is to manage the identification and analysis of security vulnerabilities and support required remediation across National Highways infrastructure (IT and OT). The Vulnerability Analyst will co-ordinate with various digital teams across NH to ensure all vulnerability are addressed in a timely manner. The Analyst will continually improve vulnerability tooling and process while supporting the improvement of the security capability of National Highways through dashboard monitoring and retrospective assessments.

• Planning, execution and management of vulnerability assessment and scanning activities across the National Highway’s networks, systems, and applications.
• Ensure vulnerability scans and assessments are run periodically in line with policies and standards across the IT, OT, and cloud infrastructure.
• Prioritise vulnerabilities based on their severity, exploitability, and potential business impact to guide remediation efforts effectively.
• Collaborate with 3rd party services suppliers and internal stakeholders to ensure that identified vulnerabilities are patched and remediated in a timely manner.
• Help establish and improve patch management processes and coordinate with system owners and vendors to ensure patch deployment and validation.
• Generate comprehensive vulnerability assessment reports and communicate findings to relevant stakeholders, including IT management, System owners and CSO. Clearly articulate the risks associated with identified vulnerabilities and provide recommendations for remediations.
• Monitor Threat Intel feeds, vulnerabilities databases to proactively identify and respond to new vulnerabilities and attack vector.
• Support integration of personnel and physical security with the SOC Team
• Transition work to SOC Operations team