Security Analyst

Description

Job Summary: We are seeking a Vulnerability and Exposure Management Analyst for a Cyber Defense Center, coordinating and advising on the global vulnerability lifecycle. Key Highlights: 1. Key coordination and advisory role in cybersecurity. 2. Collaboration with international teams and influence on processes. 3. Opportunity to evolve into leadership responsibilities. Description **We are looking for a Vulnerability and Exposure Management Analyst** to join an established Cyber Defense Center within a global enterprise environment. This position sits at the core of the vulnerability lifecycle, acting as the liaison between security, infrastructure, and development teams, ensuring that identified vulnerabilities are appropriately prioritized, communicated, and remediated. More than focusing on scanning or direct technical remediation, this role plays a key coordination and advisory function, closely collaborating with internal stakeholders across multiple countries. #### **Your Responsibilities** * Manage the vulnerability and exposure lifecycle: + Triage + Prioritization + Assignment + Tracking * Analyze vulnerabilities across different domains: + Infrastructure + Web applications + APIs (in the future) * Apply risk-based prioritization using frameworks such as CVSS. * Provide clear and practical remediation guidance to internal teams. * Collaborate with infrastructure, cloud, and development teams to support remediation. * Serve as the first point of contact for internal stakeholders, managing: + Support requests + Incident resolution + Clarification of findings * Develop and maintain remediation guidelines for: + Misconfigurations (Non\-CVE) + Web application vulnerabilities * Contribute to process improvement, automation, and new initiatives. * Monitor and track remediation progress via dashboards and reports. * Help improve the global vulnerability management operational model. #### **What We Are Looking For** **Mandatory** * More than 5 years of experience in Cybersecurity Operations. * Practical experience in Vulnerability Management / Exposure Management. * Solid knowledge of: + CVEs and security misconfigurations. + Risk-based prioritization (CVSS or equivalent). * Experience in: + Infrastructure environments. + Web applications (OWASP mindset). * Good knowledge of: + Networking and operating systems (Windows/Linux). + Active Directory or IAM environments. * Excellent communication and stakeholder management skills. * Experience working with ticketing tools (Jira, ServiceNow, etc.). * Fluent English. **Desirable** * Experience in cloud environments (AWS, Azure, GCP). * Knowledge of CIS benchmarks or hardening standards. * Basic scripting skills (Python / PowerShell). * Familiarity with graph databases (e.g., Neo4j). #### **What Makes This Role Different** * You won’t just detect vulnerabilities—you’ll drive their resolution. * Highly collaborative role with significant exposure to international teams. * Opportunity to influence processes and define how vulnerability management is conducted. * Potential to evolve into leadership responsibilities over time. #### **Work Environment** * International, English-speaking environment. * Hybrid model (1\-2 office days per week). * Flexible hours with a high degree of autonomy. * Occasional travel within Europe. #### **Compensation and Benefits** * Salary: €51,000 – €56,000 (based on experience). * Flexible compensation plan (~€3,700 net/year). * Private health insurance. * Remote work allowance (1\-2 office days per week) and flexible schedule. * Wellness benefits. 51000\-56000 Barcelona Hybrid **Contact Person:** mfernandez@q\-techrec.com 681 285 025