Location(s):UK, Europe and Africa : UK : London
BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments.
Job Title: Vulnerability Analyst
Location: London: We offer a range of hybrid and flexible working arrangements : please speak to your recruiter about the options for this particular role.
Grade: GG11
Referral Bonus: GBP 5000
What You'll Be Doing
The Vulnerability Analyst is to manage the identification and analysis of security vulnerabilities and support required remediation across National Highways infrastructure (IT and OT). The Vulnerability Analyst will co:ordinate with various digital teams across NH to ensure all vulnerability are addressed in a timely manner. The Analyst will continually improve vulnerability tooling and process while supporting the improvement of the security capability of National Highways through dashboard monitoring and retrospective assessments.
:
Planning, execution and management of vulnerability assessment and scanning activities across the National Highway's networks, systems, and applications.
:
Ensure vulnerability scans and assessments are run periodically in line with policies and standards across the IT, OT, and cloud infrastructure.
:
Prioritise vulnerabilities based on their severity, exploitability, and potential business impact to guide remediation efforts effectively.
:
Collaborate with 3rd party services suppliers and internal stakeholders to ensure that identified vulnerabilities are patched and remediated in a timely manner.
:
Help establish and improve patch management processes and coordinate with system owners and vendors to ensure patch deployment and validation.
:
Generate comprehensive vulnerability assessment reports and communicate findings to relevant stakeholders, including IT management, System owners and CSO. Clearly articulate the risks associated with identified vulnerabilities and provide recommendations for remediations.
:
Monitor Threat Intel feeds, vulnerabilities databases to proactively identify and respond to new vulnerabilities and attack vector.
:
Support integration of personnel and physical security with the SOC Team
:
Transition work to SOC Operations team
Skills and Experience
:
Digital vulnerability subject matter expertise and technical knowledge within cyber security.
:
Ability to manage various stakeholders within and outside the company.
:
Ability to make rational, realistic and sound decisions based on good analysis of the full facts and consideration of the different options and outcomes.
:
Ability to communicate effectively and constructively, in a clear and concise manner with key stakeholders.
The Team
The SOC (Security Operation Centre) function exists to facilitate a holistic approach to detecting, responding, and coordinating security events at National Highways. This work is to deliver the SOC Capability Programme which has a primary objective to uplift current capabilities, deliver new capabilities and optimise current services.
Benefits
As well as a competitive pension scheme, BAE Systems also offer employee share plan, an extensive range of flexible discounted health, wellbeing and lifestyle benefits including a green care scheme, private health plans and shopping discounts : you may also be eligible for an annual incentive.
Why BAE Systems?
This is a place where you'll be able to make a real difference. You'll be part of an inclusive culture which values diversity, rewards integrity and merit, and where you'll be empowered to fulfil your potential. We welcome candidates from all backgrounds and particularly from