A global medical device company is seeking a Vulnerability Analyst with experience in non-connected devices and known component threats to support on a 6-month contract basis.

You'll support product security activity across medical device products already in the field. The role will focus on vulnerability assessment, CVE review, exploitability analysis, affected component assessment, mitigation tracking, and technical security documentation within a regulated product environment.

This is not a SOC, SIEM, or infrastructure security role. It is focused on application and product vulnerability assessment.

• Vulnerability assessment experience
• CVE analysis and exploitability assessment
• Product security or application security experience
• SBOM, SCA, SAST, DAST, or secure software development exposure
• Technical documentation and mitigation tracking experience

• Experience with medical devices, regulated software, quality-led environments, or safety-critical products

• Experience with Windows-based applications, .NET, product software, or regulated application environments

This is a strong fit for vulnerability analysts or AppSec specialists who want to work close to product security, known vulnerability assessment, CVE impact analysis, and regulated medical device documentation.

Please visit our website to find out more about our Key Information Documents. Please note that the documents provided contain generic information. If we are successful in finding you an assignment, you will receive a Key Information Document which will be specific to the vendor set-up you have chosen and your placement.

To find out more about Real, please visit our website

Real Staffing, a trading division of SThree Partnership LLP is acting as an Employment Business in relation to this vacancy | Registered office | 8 Bishopsgate, London, EC2N 4BQ, United Kingdom | Partnership Number | OC387148 England and Wales