Senior Vulnerability Management Analyst

Overview

Bruker is enabling scientists to make breakthrough discoveries and develop new applications that improve the quality of human life. Bruker's high-performance scientific instruments and high-value analytical and diagnostic solutions enable scientists to explore life and materials at molecular, cellular and microscopic levels. In close cooperation with our customers, Bruker is enabling innovation, improved productivity and customer success in life science molecular research, in applied and pharma applications, in microscopy and nano analysis, and in industrial applications, as well as in cell biology, preclinical imaging, clinical phenomics and proteomics research and clinical microbiology.

Today, worldwide more than 11,000 employees are working on this permanent challenge at over 90 locations on all continents. Bruker continues to build upon its extensive range of products and solutions, its broad base of installed systems and a strong reputation among its customers. Being one of the world's leading analytical instrumentation companies, Bruker is strongly committed to further fully meeting its customers' needs as well as to continue to develop state-of-the-art technologies and innovative solutions for today's analytical questions.

Responsibilities

Position Overview

The Senior Vulnerability Management Analyst plays a critical role in safeguarding Bruker's global IT environment. This position is responsible for managing, improving, and scaling the enterprise vulnerability management program using Tenable.sc, Tenable.io, Matrix
42, and the neo
42 Tenable Connector.

The analyst oversees vulnerability intake, prioritization, operational workflows, and remediation tracking across IT Operations and business stakeholders, ensuring timely mitigation and strong governance.

Key Responsibilities

Vulnerability Scanning & Data Integration

Manage and optimize vulnerability scanning across Tenable.sc and Tenable.io platforms.
Oversee automated import of scan data into Matrix
42 via the neo
42 Tenable Connector.
Ensure asset–vulnerability correlation accuracy through validation of IP imports, auto‑linking logic (Name/MAC/IP), and classification of unlinked devices.
Investigate and resolve data discrepancies between Tenable and Matrix
42 (e.g., stale, disposed, or outbound assets).

Vulnerability Prioritization & Problem Creation

Review and validate automatically created problems based on VPR score, CVSS severity, and Bruker risk criteria.
Ensure each vulnerability is correctly logged, categorized, and assigned within the ITSM ecosystem.
Maintain ownership of all vulnerability problems under the Info Sec function.

Remediation Workflow & Task Management

Create and manage remediation tasks per asset or per vulnerability using Matrix
42 workflows.
Assign tasks to principal asset owners, IT operational teams, or security roles, based on Bruker's ownership model.
Configure and manage automated escalation workflows (informational notifications, 14‑day and 28‑day escalation cycles).
Monitor overdue, stalled, or reactivated tasks and proactively follow up with stakeholders.

Cross‑Functional Collaboration

Liaise with regional IT Operations teams (Collaboration Services, Workplace Engineering, Infrastructure) to coordinate remediation efforts.
Engage business users (non‑IT) for remediation items requiring functional ownership.
Support process transparency by providing clear instructions, vulnerability descriptions, remediation steps, and reference documentation.

Analysis, Reporting & Governance

Conduct detailed vulnerability analysis using Tenable toolsets (IP Summary, Host Detail views, analytic dashboards).
Track remediation progress, measure KPIs, and prepare executive reporting for risk and compliance functions.
Maintain accurate audit trails of actions taken to ensure compliance with internal and external standards.
Support internal and external audits by providing evidence, reports, and process explanations.

Process Improvement & Continuous Optimization

Identify gaps and workflow inefficiencies in Bruker's vulnerability management lifecycle, including user‑mapping issues and task assignment errors.
Partner with neo
42 and internal…