National AI Awards 2025Discover AI's trailblazers! Join us to celebrate innovation and nominate industry leaders.

Nominate & Attend

Vulnerability Analyst

NCC Group
Greater London
3 weeks ago
Create job alert

Position Title:Vulnerability Analyst

Location:Manchester/London/Cheltenham/Hybrid

Role Purpose: 

This is an exciting opportunity to join a dynamic security solutions team in which you will be responsible for the management and delivery of client security programs. As part of a passionate delivery team, you should have a strong passion for IT security and a customer-centric approach to providing high-quality service to our clients. Solid experience of running Vulnerability Exposure Management programs is essential. 

Summary:

This is an opportunity to work in a fun and challenging environment, using market leading security testing tools and platforms to provide security testing services to our large client base. You will play a key role in delivering and managing client security programs all year round, as well as building relationships with clients and ensuring that our services are meeting their needs. You will also be given every opportunity to help shape the direction of the department as well as assist with the development of new service lines offered by the company.

Client Security Programs: Design and set up security programs tailored to client requirements.

Vulnerability Scans: Conduct network and application vulnerability scans.

Validation: Manually verify vulnerabilities identified in scans.

Reporting: Write and deliver comprehensive client reports.

Client Support: Work directly with clients on vulnerability issues, providing support and answering queries.Providing support and answering queries from clientsin a timely manner

What we are looking for in you:

Operating Systems:Proficiency with Linux and Windows systems.

Network Security: Strong understanding and experience in network security.

Cloud Security: Knowledge of cloud security concepts.

Tools & Utilities: Experience with vulnerability management tools (Qualys, Nexpose Rapid 7, HP WebInspect, IBM AppScan , Tenable Nessus, Burp, NMAP)), External Attack Surface Management, ITSM (Service Now)and cloud vulnerability tools (AWS Inspector, GCP Security Command Center, Tenable, Qualys, Rapid 7).

Aggregator Platforms: Familiarity with platforms like Vulncan.io, Prism.

Vulnerability Exposure Management:Strong experience of running Vulnerability Management, an understanding of how vulnerabilities can be linked and the impact on risk

Soft Skills: Excellent interpersonal and communication skills, proactive problem-solving,strong team player and strongin customer management.

Experience: Minimum of 2 years in a security-related role.

Desirable competencies:

Education: Degree in Computer Science/Engineering or equivalent experience.

Information Security: Understanding of web services architecture and commonly employed technologies. Exposure to software development and understanding of secure code development.

Compliance: Experience/willingness to assess Cyber Essential assessments and knowledge of PCI DSS PCI DSS requirements, in particular PCI ASV testing.

Cloud Services: Understanding of cloud services, architecture, and technologies.

Certifications: CPSA or higher qualifications are desirable.

Clearance: UK Security Check (SC) clearance is desirable.

Behaviours:

Focusing on Clients and Customers.

Working as One NCC.

Always Learning.

Being Inclusive and Respectful. 

Delivery Brilliantly.

Why NCC Group?

At NCC Group, our mission is to create a more secure digital future. That mission underpins everything we do, from our work with our incredible clients to groundbreaking research shaping our industry. Our teams' partner with clients across a multitude of industries, delving into, securing new products, and emerging technologies, as well as solving complex security problems. As global leaders in cyber and escrow, NCC Group is a people-powered business seeking the next group of brilliant minds to join our ranks.

Our colleagues are our greatest asset, and NCC Group is committed to providing an inclusive and supportive work environment that fosters creativity, collaboration, authenticity, and accountability. We want colleagues to put down roots at NCC Group, and we offer a comprehensive benefits package, as well as opportunities for learning and development and career growth. We believe our people are at their brilliant best when they feel bolstered in all aspects of their well-being, and we offer wellness programs and flexible working arrangements to provide that vital support.

What do we offer in return?

We have a high-performance culture which is balanced evenly with world-class well-being initiatives and benefits;

⏰Flexible working 

💸 Financial & Investment 

Pension 

Life Assurance

Share Save Scheme

Maternity & Paternity leave

🙋🏾Community & Volunteering Programmes 

⚡ Green Car Scheme 

🚴 Cycle Scheme 

🏥 Healthcare 

🏙️ Office Lifestyle 

🧑🏻‍🤝‍🧑🏻 Employee Referral Program 

🧘🏻 Lifestyle & Wellness 

🎓 Learning & Development 

👨🏿‍🦽 Diversity & Inclusion 

So, what’s next? 

Related Jobs

View all jobs

Vulnerability Analyst

Vulnerability Analyst

Vulnerability Analyst

Vulnerability Analyst

OT Vulnerability Analyst

Cyber Vulnerability Analyst

National AI Awards 2025

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

How to Get a Better Cyber Security Job After a Lay-Off or Redundancy

Redundancy is never easy—especially in a fast-moving field like cyber security, where your skills and experience are constantly evolving. But if you’ve recently been made redundant from a cyber security role, know this: the UK cyber workforce remains in high demand, and your expertise is more valuable than ever. Whether you’re a SOC analyst, penetration tester, incident responder, security architect or GRC specialist, there are still thousands of opportunities across sectors including finance, defence, government, retail, and critical infrastructure. This guide will help you turn redundancy into a career relaunch, with a clear action plan tailored to the UK cyber security job market.

Cyber Security Jobs Salary Calculator 2025: Check Your Market Value in Seconds

Why yesterday’s pay survey no longer protects you. “Could I earn more at a managed SOC?” “Is that fintech’s offer really competitive?” Every UK cyber‑security professional asks some version of those questions—usually after another colleague lands a pay rise, a recruiter sends a tempting JD, or a fresh breach makes headline news. Yet salary guides published even last year feel as out‑of‑date as a forgotten antivirus signature. Since 2024, ransomware gangs switched to double‑extortion, deepfake phishing exploded, & the EU’s NIS2/DORA regulations bled into UK contracts despite Brexit. With each shift, salary bands move. To cut through stale averages, CybersecurityJobs.tech distilled a three‑factor formula that lets you estimate a realistic 2025 salary in under a minute. Feed in your role, your UK region, & your seniority level. The output arms you with data‑driven leverage for your next appraisal, job application, or freelance rate card. This article explains the formula, reveals the forces pushing cyber pay ever higher, & outlines five practical moves to boost your market value within ninety days.

How to Present Cyber Security Solutions to Non-Technical Audiences: A Public Speaking Guide for Job Seekers

Cyber security is no longer just an IT issue—it’s a board-level priority. Whether you’re applying for a role in penetration testing, security operations, risk management, or compliance, your ability to clearly explain cyber threats and solutions to non-technical stakeholders is vital. This guide will help cyber security job seekers develop one of the most in-demand soft skills in the industry: public speaking. You’ll learn how to simplify complex concepts, structure effective presentations, use storytelling and analogies, and handle common stakeholder questions with confidence.