Functional / Technical Business Analyst (Vulnerability Risk, Remediation Planning)

Devox Software

Location
Remote
Employment
Full-time
Level
Mid-level
Category
Product & Project Management
Posted

Description

We are looking for a Functional / Technical Business Analyst to join a discovery and risk assessment engagement, turning a large vulnerability backlog into a structured, risk-sequenced remediation plan for a UK enterprise client.

Project: A ten-week discovery and technical assessment engagement focused on triaging and sequencing a backlog of roughly 4,000 assets and their associated findings, ahead of a structured remediation roadmap.

Responsibilities:

Triage findings by severity and exploitability

Apply asset criticality scoring across the estate to enable risk-based sequencing

Define remediation options for grouped issues, including the relevant constraints

Maintain traceability between grouped findings, affected assets, owning applications, and proposed remediation

Distinguish confirmed findings from those requiring further validation

Requirements:

4+ years of experience analyzing vulnerability or technical debt backlogs at scale

Experience building or applying risk-scoring or asset criticality models

Strong structured data handling skills

Familiarity with Qualys output, including QID and host-level analysis, is desirable

Strong analytical mindset, able to work confidently with incomplete or conflicting source data

Upper-Intermediate English or higher

What We Offer:

Transparent strategy and thoughtful management that keep everyone aligned

Space for personal growth and career development without limits

A culture of continuous learning: internal courses, workshops, and English classes twice a week

Skill up events where we share experience and stay on top of trends

Competitive perks: flexible schedule, a strong compensation package, support for professional certifications, and generous vacation policy

Team spirit that thrives through regular events, gatherings, and celebrations

Apply at the source

This role was published by Devox Software and listed via Djinni. Applications are handled there, not on this site.

View & apply on djinni.co ↗