Security Analyst (Vulnerability Management)

About the role

This position is based in Spain and sits at the intersection of cybersecurity operations and global security research. You will evaluate and manage incoming vulnerability reports from an active ethical‑hacker community, acting as the bridge between researchers and client security teams.

Key responsibilities

• Review, validate and assess vulnerability reports for uniqueness, relevance and actionability.
• Perform technical analysis, proof‑of‑concept validation and severity assessment, including CVSS scoring.
• Provide remediation guidance and clear technical feedback to customers and internal stakeholders.
• Conduct security testing across web, mobile, system and network environments.
• Mentor junior analysts and contribute to knowledge‑sharing initiatives.
• Collaborate with customer success teams to ensure value is derived from findings.

Required profile

• Minimum 2 years of experience in penetration testing, security testing or vulnerability assessment.
• Strong understanding of ethical hacking principles and bug bounty ecosystems.
• Familiarity with OWASP Top 10 and common web application vulnerabilities.
• Ability to work under pressure, prioritize incidents and communicate technical issues clearly.
• Fluent in English; Dutch is a plus.

Required skills

• Penetration testing
• Security testing
• Vulnerability assessment
• Ethical hacking
• Bug bounty platforms
• OWASP Top 10 knowledge
• Mac, Windows and Linux environments
• CVSS scoring