Cybersecurity Specialist - Threat Man. Triage Analyst
Via agency · Cavendish Professionals
Full-time
Budapest
Cavendish Professionals are currently looking to speak to experienced Vulnerability Threat Management Triage Analysts to support the identification, analysis and triage of critical cybersecurity vulnerabilities at one of our clients in Budapest OR Warsaw. The successful candidate will have a strong background in Information Security, vulnerability management and threat analysis.
Tasks
- Perform daily, in-depth analysis of critical vulnerabilities from various intelligence sources to determine their risk, potential impact and relevance to the clients technology landscape.
- Investigate the use and exposure of vulnerable technologies across the firm by retrieving technology data through database queries and engaging directly with engineering teams and product owners.
- Assess the exploit status of vulnerabilities, leveraging threat intelligence and security research to prioritize remediation efforts effectively.
- Coordinate the analysis and delivery of actionable Information Security Vulnerability Findings to internal stakeholders, providing clear and interpretative analysis.
- Continue urgent vulnerability triage activities, taking over and managing the handover from Singapore.
- Support attestation tracking and evidence reviews for L0 24--48 hour GEMs, where status confirmation is often required before vulnerability signatures are developed.
- Support the transition of the VTM Risk Treatment Process from SharePoint to ServiceNow, focusing on governance and execution aspects beyond the technical migration undertaken by the client.
Requirements
- Minimum of 5 years' experience working in Information Security, with a strong background in vulnerability management and threat analysis.
- Deep understanding of Information Security and Vulnerability Management processes, patch development and application/system architecture.
- Strong proficiency in SQL for database querying and data analysis.
- Experience analyzing critical vulnerabilities and assessing their risk, potential impact and relevance to an organization's technology landscape.
- Ability to assess vulnerability exploit status using threat intelligence and security research.
- Knowledge of programming and/or scripting languages, with a preference for Python, and experience with or knowledge of industry-standard vulnerability scanning tools, such as Qualys and Snyk.
- Fluent in English, with excellent written and verbal communication skills.
- Ability to articulate complex technical findings and translate them into clear, actionable information for both technical and business stakeholders.
- Strong analytical, research and problem-solving skills, with the ability to conduct assessments and analysis under pressure.
- Bachelor's degree in Computer Science, Information Security or a related field, or equivalent experience.