Vulnerability Analyst – Hybrid (Belgium)

About the role

We are looking for a Group Vulnerability Analyst to join our cyber security team in Belgium. The role focuses on vulnerability and exposure management across a large, multi‑entity enterprise, combining analysis, coordination and stakeholder engagement. You will work in a hybrid model, collaborating with security, IT operations and business units to reduce cyber risk.

Key responsibilities

• Coordinate vulnerability scanning and discovery activities across the organisation.
• Analyse and prioritise identified vulnerabilities based on CVSS scores and business impact.
• Track remediation actions, escalating critical issues and ensuring timely closure.
• Produce reports, dashboards and management updates to improve visibility.
• Collaborate with security, infrastructure and operations teams to align processes.
• Support continuous improvement of the vulnerability management programme.

Required profile

• Minimum 3 years of experience in vulnerability management, security operations or infrastructure security.
• Strong analytical, communication and stakeholder‑management abilities.
• Experience working in large‑scale or multi‑entity organisations is a plus.
• Familiarity with cloud or infrastructure security and compliance initiatives such as NIS2 is advantageous.

Required skills

• Hands‑on experience with vulnerability scanning tools (Qualys, Tenable, Rapid7, Microsoft Defender Vulnerability Management).
• Good understanding of CVEs and CVSS scoring methodology.
• Knowledge of remediation workflows and risk‑acceptance processes.

What we offer

• Long‑term engagement in a strategic cyber security programme.
• Hybrid working model with high autonomy.
• Opportunity to work with experienced cyber security professionals in a complex enterprise environment.