Senior Vulnerability Analyst (CTEM)

About the role

SITA is hiring a CTEM Analyst (listed as Senior Vulnerability Analyst) to support its Continuous Threat Exposure Management program. You will identify, validate, prioritize and track security exposures across the enterprise, helping reduce organizational risk by analysing vulnerabilities, misconfigurations, attack paths and threat intelligence. You report to the Senior Manager, Service Operations within the Cybersecurity & Risk Management Team.

Key responsibilities

• Maintain visibility of the enterprise exposure inventory across cloud environments, identities, endpoints, applications, infrastructure and external attack surfaces.
• Perform vulnerability assessments and analyse vulnerability, asset, threat intelligence, attack-path and configuration data to identify elevated risks.
• Prioritize exposures using business risk, exploitability, asset criticality and threat intelligence, and validate exposures safely.
• Coordinate remediation with infrastructure, cloud, application and technology teams, and track progress, exceptions, compensating controls and risk acceptance.
• Support attack-path analysis, purple team exercises, tabletop activities, security assessments and control validation.
• Build CTEM dashboards, executive summaries, operational metrics and regular reports for leadership and stakeholders.

Required profile

• 3-5 years of experience in vulnerability management, exposure management, cloud security, security operations or risk management.
• End-to-end experience with the vulnerability and exposure lifecycle, including discovery, prioritization, remediation coordination, validation, exception management and closure.
• Bachelor's degree in Information Technology, Cybersecurity, Computer Science or a related field, or equivalent practical experience.
• At least one industry-recognized cybersecurity certification (e.g. Security+, CySA+, GSEC, SC-200, AZ-500, CISSP).

Required skills

• Familiarity with vulnerability scanners, CSPM, attack surface management tools and CMDB or asset inventory solutions.
• Knowledge of CVSS, EPSS, CISA KEV, exploitability analysis and asset criticality.
• Understanding of attack-path analysis, SOC detection requirements, security monitoring and the MITRE ATT&CK framework.
• Data analysis and reporting tools such as Excel, Power BI, KQL, SQL or Python.

Nice to have

• Experience supporting CTEM in large enterprises.
• Familiarity with cloud-native tools on Azure, 365, AWS or hybrid clouds.
• Experience in purple team exercises or attack simulation programs.

What we offer

• Flexibility: up to 2 days a week from home, flexible days, and up to 30 days a year working from anywhere.
• Employee Assistance Program and a wellbeing platform.
• Learning ecosystem with platforms such as LinkedIn Learning, Pluralsight and Harvard Business Publishing.
• Competitive benefits tailored to local market and employment status.