We are looking for a
Vulnerability & Exposure Management Analyst
to join a mature Cyber Defense Center within a integral enterprise environment.
This role sits at the core of the vulnerability lifecycle, acting as a
bridge between security, infrastructure, and development teams, ensuring that identified vulnerabilities are properly prioritised, communicated, and remediated.
Rather than focusing on scanning or hands‑on remediation, this position plays a
key orchestration and advisory role, working closely with internal stakeholders across multiple countries.
Your responsibilities
Manage the lifecycle of vulnerabilities and exposures:
triage, prioritisation, assignment and follow‑up
infrastructure, web applications, and (in the future) APIs
Apply risk‑based prioritisation using frameworks such as CVSS
Provide
clear and actionable remediation guidance
to internal teams
Collaborate with infrastructure, cloud and development teams to support remediation
Act as a
first point of contact for internal stakeholders
handling:
support requests
troubleshooting
clarification of findings




Develop and maintain remediation guidelines for:
security misconfigurations (Non‑CVE)
Contribute to process improvements, automation and new initiatives
Monitor and track remediation progress through dashboards and reports
Help improve the overall vulnerability management operating model
What we’re looking forMust‑have
5+ years of experience in Cybersecurity Operations
Hands‑on experience in
Vulnerability Management / Exposure Management
Strong understanding of:
CVEs and security misconfigurations
risk prioritisation (CVSS or similar)
Experience across:
web applications (OWASP mindset)
Solid understanding of:
networking, OS (Windows/Linux)
Active Directory or IAM environments
Strong communication skills and stakeholder management
Experience working with ticketing systems (Jira, ServiceNow, etc.)
Nice to have
Exposure to cloud environments (AWS, Azure, GCP)
Knowledge of CIS benchmarks or hardening st

📌 Security Analyst (Madrid)
🏢 Q-Tech
📍 Madrid