Senior InfoSec Analyst Vulnerability ManagementCharles River Laboratories · Tranent, Scotland, United Kingdom

Senior InfoSec Analyst Vulnerability Management

🗓️ Posted 2026-09-12 Tranent, Scotland, United Kingdom Full-time Hybrid ICT
💰 Salary Not shared 📊 Market 4,500 GBP–6,000 GBP/mo

About the Company

For 75 years, Charles River employees have worked together to assist in the discovery, development and safe manufacture of new drug therapies. When you join our family, you will have a significant impact on the health and well-being of people across the globe. Whether your background is in life sciences, finance, IT, sales or another area, your skills will play an important role in the work we perform. In return, we'll help you build a career that you can feel passionate about. The vulnerability analyst is a hands-on practitioner and representative of the vulnerability management practice in the cyber security defense. This is a technical role, and candidates must possess a solid understanding of information security, applications, operating systems, networking, cloud infrastructure, and attacker tactics, techniques, and procedures (TTPs). Responsibilities of this position include vulnerability management, reporting, remediation and continuous assessment, penetration testing and red teaming. This position will work remote from home office located in the UK or India only. Must be able to work UK business hours, regarless of home location.

Requirements

  • ● Manage vulnerabilities across applications, endpoints, databases, networking devices, and mobile, cloud and third-party assets.
  • ● Conduct continuous discovery and vulnerability assessment of enterprise-wide assets.
  • ● Support auditors in their duties that focus on compliance and risk reduction.
  • ● Perform penetration tests against company owned assets, including internal and cloud-based assets, as well as web applications and APIs.
  • ● Perform other duties as assigned.
  • ● Education: Bachelor's degree (B.A./B.S.) or equivalent in computer science, information technology, or related discipline.
  • ● Experience: Minimum of 5 years related experience in information security operations, vulnerability management, or related discipline.
  • ● An equivalent combination of education and experience may be accepted as a satisfactory substitute for the specific education and experience listed above.
  • ● Understanding of OWASP, CVSS, the MITRE ATT&CK framework and the software development lifecycle.
  • ● Capable of scripting in Python, Bash, Perl or PowerShell.
  • ● Certification/Licensure: IT security related certification desired (e.g., Security +, CISSP, CISA, GCED, GPEN, GCIH, or similar professional certification).
  • ● Other:
  • ● Must have strong interpersonal, teamwork, self-initiative skills.
  • ● Must be able to work UK business hours, regarless of home location.