Vulnerability Analyst - Product Security | Contract/Freelance

A global medical device company is seeking a Vulnerability Analyst with experience in non-connected devices and known component threats to support on a 6-month contract basis.

You'll support product security activity across medical device products already in the field. The role will focus on vulnerability assessment, CVE review, exploitability analysis, affected component assessment, mitigation tracking, and technical security documentation within a regulated product environment.

This is not a SOC, SIEM, or infrastructure security role. It is focused on application and product vulnerability assessment.

Essential Skills

Vulnerability assessment experience
CVE analysis and exploitability assessment
Product security or application security experience
SBOM, SCA, SAST, DAST, or secure software development exposure
Technical documentation and mitigation tracking experience

Desirable Skills

Experience with medical devices, regulated software, quality-led environments, or safety-critical products
Experience with Windows-based applications, .NET, product software, or regulated application environments

This is a strong fit for vulnerability analysts or AppSec specialists who want to work close to product security, known vulnerability assessment, CVE impact analysis, and regulated medical device documentation.

Please click to find out more about our Key Information Documents. Please note that the documents provided contain generic information. If we are successful in finding you an assignment, you will receive a Key Information Document which will be specific to the vendor set-up you have chosen and your placement.

To find out more about Real, please visit

Real Staffing, a trading division of SThree Partnership LLP is acting as an Employment Business in relation to this vacancy | Registered office | 8 Bishopsgate, London, EC2N 4BQ, United Kingdom | Partnership Number | OC(phone number removed) England and Wales