Vulnerability Analyst

Company DescriptionAt Frasers Group we’re rethinking retail. Through digital innovation and unique store experiences, we’re serving our consumers with the world’s best sports, premium and luxury brands globally. As a leader in the industry, we’re elevating the retail experience for our consumers through our collection of established brands, including Sports Direct, FLANNELS, USC, Frasers, and GAME. Why join us? Our vision - We are building the planet’s most admired and compelling brand ecosystem Our purpose - We are elevating the lives of the many with access to the world’s best brands and experiences At Frasers Group, we fear less and do more. Our people are forward thinkers who are driven to operate outside of their comfort zone to change the future of retail, embracing challenges along the way. The potential to elevate your career is massive, the experience unrivalled. To be able to make the most of it you need to live and breathe our principles: • Own it and back yourself - Own the basics, own your role and own the result • Think without limits - Think, think fast, think fearlessly • Be relevant - Relevant to our people, our partners and the planet Are you ready to join the Fearless? Job DescriptionThe Role: We are seeking a Vulnerability Analyst to support and enhance Frasers Group’s cybersecurity capabilities by identifying, assessing, and helping remediate vulnerabilities across our global retail, digital, and enterprise environments. Reporting to the SecOps Manager, this role will focus on the day-to-day delivery of vulnerability management activities. The Vulnerability Analyst will play a hands-on role in identifying security weaknesses, assessing risk, and working with technical and operational teams to ensure timely remediation. The role will also support the coordination of operational penetration testing activities, ensuring testing is effectively scheduled, delivered, and tracked through to remediation. Working closely with risk and operational teams, the Vulnerability Analyst will help translate technical findings into business risk, ensuring vulnerabilities are prioritised based on real-world impact and exploitability. By combining vulnerability data with threat context and operational insight, the role will contribute to reducing the organisation’s overall attack surface. In addition, the role will support security monitoring and incident response activities when required, particularly in identifying vulnerabilities linked to active threats. Key Responsibilities: • Support the delivery of the vulnerability management programme across enterprise, cloud, and retail environments. • Perform regular vulnerability assessments using scanning tools, security platforms, and threat intelligence sources. • Analyse and triage vulnerabilities, prioritising remediation based on risk, exploitability, and business impact. • Support the coordination of operational penetration testing activities, including scheduling, scoping, and tracking remediation of findings. • Ensure penetration testing results are clearly documented, prioritised, and fed into remediation workflows. • Work closely with risk and operational teams to identify vulnerabilities associated with high-risk processes or emerging threats. • Collaborate with engineering, infrastructure, and operational teams to track and support remediation of identified vulnerabilities. • Monitor and report on vulnerability status, risks, and remediation progress to the SecOps Manager and relevant stakeholders. • Support incident response activities by identifying root-cause vulnerabilities and contributing to remediation actions. • Assist in improving vulnerability scanning coverage, tooling, and processes. • Contribute to identifying attack paths and systemic weaknesses within the environment. • Apply industry frameworks such as MITRE ATT&CK and CVSS to support vulnerability assessment and prioritisation. • Support integration of vulnerability data into monitoring and ticketing systems. • Document findings, remediation actions, and lessons learned to support knowledge sharing. • Work with operational teams to support secure configuration and reduce recurring vulnerabilities. Qualifications• 2+ years experience in a similar role with experience supporting a vulnerability management programme across enterprise, cloud, and/or retail environments. • Hands‑on experience conducting vulnerability assessments using scanning tools and security platforms. • Strong communication skills and experience building relationships and working across different departments. • Ability to produce clear documentation of findings, risks, and remediation actions • Security related qualification are desirable but not necessary for this role. Additional InformationAlong with your benefits package we also offer a wide range of perks for our colleagues: Frasers Champion - Our employees are at the heart of our business and we ensure individuals are recognised every single m