Vulnerability Management & Application Security Analyst

We are seeking a Vulnerability Management & Application Security Analyst to support the AWPT programme through vulnerability triage, risk assessment, remediation validation, and stakeholder coordination. The role includes improving Jira workflows, automation, dashboards, and reporting to manage vulnerabilities throughout their lifecycle.

Candidates must have at least 1 year of hands-on penetration testing experience.

Key Responsibilities:

Workflow Development & Automation:

• Enhance vulnerability triage workflows and automation capabilities within Jira.
• Develop dashboards and reports to monitor vulnerability status, remediation progress, and lifecycle performance.
• Implement automation to improve finding correlation, duplicate identification, and tracking.
• Support integration with AI-powered penetration testing tools.

Vulnerability Triage & Application Security:

• Review and triage findings generated by AI-powered penetration testing tools.
• Assess exploitability, severity, technical impact, and business impact to prioritise vulnerabilities.
• Identify false positives and duplicate findings using supporting evidence.
• Coordinate with application teams to review findings, agree on remediation plans, and resolve technical queries.
• Review code changes, application logs, and supporting evidence to assess remediation.
• Retest vulnerabilities and validate the effectiveness of fixes.
• Recommend closure, risk acceptance, or severity adjustments based on evidence and established approval processes.

Process Management & Governance:

• Manage vulnerability tracking in Jira from identification through remediation and closure.
• Coordinate stakeholders and facilitate the resolution of outstanding issues.
• Escalate critical, disputed, or overdue vulnerabilities.
• Produce vulnerability governance reports and metrics.
• Support management updates with clear reporting on risks, remediation progress, and unresolved issues.

Requirements:

• Minimum 1 year of hands-on penetration testing experience, including identifying, validating, and retesting security vulnerabilities.
• Practical experience in vulnerability management, triage, prioritisation, and risk assessment.
• Working knowledge of application security, common application vulnerabilities, and remediation approaches.
• Ability to assess exploitability and distinguish valid findings from false positives.
• Experience using Jira for vulnerability tracking, workflow management, dashboards, and reporting.
• Ability to review code changes, logs, and technical evidence to validate remediation.
• Strong stakeholder management and communication skills, with the ability to work effectively with application teams and management.

Preferred Experience:

• Jira administration and workflow automation.
• Integration of security tools with vulnerability management workflows.
• Exposure to AI-powered penetration testing tools.
• Development of vulnerability governance metrics and management reports.

Skills Priority:

• Vulnerability Management, Triage & Risk Assessment
• Application Security
• Penetration Testing
• Jira Administration & Workflow Management
• Stakeholder Management

To apply,simply click the "Apply" button or send your updated profile to [email protected] 

EA Licence No.:18S9405 / EA Reg. No.:R1330864

Percept Solutions is expanding and actively seeking talented individuals. We encourage applicants to follow Percept Solutions on LinkedIn at https://www.linkedin.com/company/percept-solutions/to stay informed about new opportunities and events.

Skills

Dashboards, Workflow Automation, Risk assessment, insurance, Triage, Remediation, Code Remediation, Direct experience, Vulnerability, reduce false-positives, Workflow Management, Penetration Testing, JIRA, Correlation Analysis, Team Management, Risk Mitigation, Security Applications