Security Analyst – Vulnerability Management

About the role

We are looking for a Security Analyst to join our partner’s team in Switzerland. You will act as the bridge between ethical hackers and client security teams, ensuring vulnerability reports are accurate, actionable, and properly prioritized. This role blends hands‑on technical analysis with incident response, communication, and community engagement.

Key responsibilities

• Review, validate and assess incoming vulnerability reports for uniqueness, relevance and actionability.
• Perform technical analysis, proof‑of‑concept validation and severity assessment of reported issues.
• Calculate and apply CVSS scores to prioritize remediation efforts.
• Serve as the primary contact for escalation handling, incident triage and researcher mediation.
• Provide remediation guidance and clear technical feedback to customers and internal stakeholders.
• Conduct security testing across web, mobile, system and network environments.
• Stay up‑to‑date with emerging threats, malware trends and attack techniques.
• Mentor junior analysts and contribute to knowledge‑sharing within the team.

Required profile

• Minimum 2 years of experience in penetration testing, security testing or vulnerability assessment.
• Strong understanding of ethical hacking principles and bug bounty ecosystems.
• Solid knowledge of the OWASP Top 10 and common web application vulnerabilities.
• Experience working in high‑pressure or incident‑driven environments with strong prioritisation skills.
• Fluent English; Dutch is a plus.

Required skills

• Penetration testing
• Vulnerability assessment
• OWASP Top 10 knowledge
• CVSS scoring
• Mac, Windows and Linux environments
• Web, mobile and network security testing
• Incident triage
• Bug bounty platform familiarity