Cyber Security Analyst – OT Vulnerability Management (Hybrid, London)

About the role

We are supporting a major enterprise operating in a complex critical infrastructure environment and are looking for a Cyber Security Analyst specialised in Operational Technology (OT) Vulnerability Management. The role will be hybrid, based in London, and will focus on identifying, assessing and mitigating vulnerabilities across OT systems.

Key responsibilities

• Identify, assess and manage vulnerabilities in OT environments.
• Conduct regular vulnerability scans using tools such as Tenable, Qualys, Rapid7 or Microsoft Defender.
• Interpret CVSS scores, perform threat modelling and prioritise risk remediation.
• Monitor security alerts, investigate anomalies and support incident response.
• Coordinate patch management and remediation workflows with stakeholders.
• Produce clear reports on technical findings and communicate risk to non‑technical audiences.

Required profile

• Proven experience in cyber security, vulnerability management or OT security.
• Hands‑on experience with vulnerability scanning tools (Tenable, Qualys, Rapid7, Microsoft Defender).
• Understanding of CVSS scoring, threat modelling and risk prioritisation.
• Experience monitoring security alerts and managing patch processes.
• Strong analytical, reporting and stakeholder‑management abilities.
• Exposure to OT/ICS environments or critical infrastructure is highly desirable.

Required skills

• Tenable
• Qualys
• Rapid7
• Microsoft Defender
• CVSS scoring
• Threat modelling
• Risk prioritisation
• Patch management
• OT/ICS knowledge

What we offer

• 6‑month contract at £375 per day (outside IR35).
• Hybrid working arrangement.
• Opportunity to work in a large‑scale, security‑focused critical infrastructure environment.