Cybersecurity Analyst – Vulnerability Management

About the role

FORFIRM is expanding its Cybersecurity practice and seeks a Vulnerability Management Specialist to own the full vulnerability lifecycle across enterprise and Azure Virtual Desktop environments. You will work closely with technical teams and business stakeholders to reduce risk and strengthen the security posture.

Key responsibilities

• Plan, configure and run vulnerability scans with Qualys or Nessus across networks, servers, endpoints, applications and cloud environments.
• Assess Azure Virtual Desktop (AVD) security, including session hosts, golden images, host pools and underlying Azure resources using agent‑based and network scanning.
• Analyze scan results, eliminate false positives, prioritize findings by CVSS severity, exploitability and business impact, and define remediation plans with IT and infrastructure teams.
• Verify compliance of AVD hosts and images against security baselines such as CIS Benchmarks and produce technical and executive reports with KPIs and risk trends.
• Maintain scan templates, policies, asset inventories and support audits (ISO 27001, NIS2, GDPR).

Required profile

• Minimum 3 years of hands‑on vulnerability management or security operations experience.
• Strong practical knowledge of Qualys (VMDR, Cloud Agent) and Tenable Nessus.
• Solid understanding of networking (TCP/IP, firewalls, segmentation) and Windows/Linux systems.
• Familiarity with CVSS, MITRE ATT&CK, OWASP and CIS Benchmarks.
• Excellent analytical, problem‑solving and reporting skills; professional proficiency in English.

Required skills

• Qualys, Tenable Nessus
• Azure Virtual Desktop, Microsoft Entra ID, Intune, Microsoft Defender for Cloud
• Windows, Linux
• TCP/IP, firewalls, network segmentation
• CVSS, MITRE ATT&CK, OWASP, CIS Benchmarks
• Python, PowerShell, Bash scripting
• SIEM, patch management, ITSM tools