Vulnerability Management Engineer

Reference: s6am16nq1733srsh9sdu

We are seeking a Vulnerability Management Engineer to help identify, assess and reduce security vulnerabilities across a complex technology estate. You will work closely with infrastructure, cloud, application and development teams to ensure vulnerabilities are managed consistently, prioritised according to risk and remediated within agreed timescales.

In this role, you will operate and maintain vulnerability scanning platforms, configure authenticated and unauthenticated scans, review results and investigate false positives. You will analyse findings from infrastructure, applications, operating systems, cloud services and network devices, translating technical information into clear, actionable remediation guidance for technical and non-technical stakeholders.

Your responsibilities will include maintaining vulnerability inventories, producing regular management reports and dashboards, tracking remediation activity, supporting risk acceptance processes and escalating overdue or high-risk issues. You will help define vulnerability management standards, improve scanning coverage and contribute to the development of metrics, service-level agreements and operating procedures.

You will also support the assessment of emerging threats, validate remediation through re-scanning and collaborate with security operations and incident response teams where vulnerabilities present an immediate risk. The role may involve contributing to penetration testing coordination, patch management governance, security tooling improvements and audit or regulatory requirements.

We are looking for experience in vulnerability management, security operations, infrastructure security or a related discipline. You should have practical knowledge of vulnerability scanning tools and common standards such as CVSS, CWE, OWASP and the NIST Cybersecurity Framework. Experience across Windows and Linux environments, cloud platforms, networking, databases and web applications would be advantageous.

You will need strong analytical and problem-solving skills, attention to detail and the ability to manage competing priorities. Excellent written and verbal communication is essential, along with the confidence to challenge constructively and build effective relationships across technical teams. Relevant security certifications, such as Security+, CEH, OSCP or equivalent experience, are desirable.

COMPETITIVE SALARY
Added 30/10/2026
Reference: s6am16nq1733srsh9sdu

Vulnerability Management Engineer

London, England, United Kingdom Permanent Threat Management

Other similar jobs

Azure DevSecops Engineer

Added 29/10/2026

We are seeking an experienced Azure DevSecOps Engineer to design, implement and continuously improve secure, reliable cloud platforms and delivery processes. You will work across development, operations and security teams to embed security throughout the software development lifecycle, enabling efficient delivery without compromising resilience, governance or compliance. Your responsibilities will include designing and maintaining Azure infrastructure, supporting cloud migration and modernisation initiatives, and developing automated CI/CD pipelines using tools such as Azure DevOps and GitHub Actions. You will manage infrastructure as code with technologies including Terraform, Bicep or ARM templates, while promoting repeatable, well-documented and scalable engineering practices. You will...

Learn more

AWS DevSecOps & LLMOps Engineer

Added 23/09/2026

We are seeking an AWS DevSecOps & LLMOps Engineer to design, automate, and operate secure, scalable cloud platforms and machine learning services. You will work across software engineering, cloud infrastructure, cybersecurity, and artificial intelligence teams to build reliable delivery pipelines and enable the safe deployment of large language model (LLM) applications. This role is suited to an experienced engineer who enjoys solving complex technical problems and embedding security, quality, and operational excellence throughout the development lifecycle. Your responsibilities will include designing and managing AWS environments using services such as EKS, ECS, Lambda, S3, IAM, CloudFormation, and Terraform. You will develop...

Learn more

Information Security Engineer

Added 21/09/2026

We are seeking an Information Security Engineer to help protect critical systems, applications, networks and data in a rapidly evolving technology environment. In this role, you will contribute to the design, implementation and continuous improvement of security controls across cloud and on-premises infrastructure. You will work closely with engineering, infrastructure, risk and compliance teams to identify vulnerabilities, reduce operational risk and support secure delivery of technology services. Your responsibilities will include monitoring and responding to security events, investigating incidents, supporting vulnerability management and recommending appropriate remediation activities. You will help develop and maintain security policies, standards, procedures and technical documentation,...

Learn more

Information & Cyber Security - Vulnerability Management Engineer - IT1

Added 02/11/2026

We are seeking a Vulnerability Management Engineer to support the identification, assessment and remediation of cyber security vulnerabilities across a complex technology environment. This role will help strengthen security resilience by ensuring that vulnerabilities are accurately understood, prioritised and addressed in line with business risk. You will be responsible for operating and maintaining vulnerability scanning tools, conducting regular assessments across infrastructure, applications, cloud services and endpoints, and analysing results to distinguish genuine risks from false positives. You will work closely with technology, engineering and service teams to validate findings, agree remediation plans and track actions through to completion. The role...

Learn more

Vice President, Threat and Vulnerability Management Engineer

Added 12/10/2026

We are seeking a Vice President, Threat and Vulnerability Management Engineer to lead the strategy, architecture, and execution of enterprise-wide cyber risk reduction initiatives. This senior role will combine technical leadership with programme ownership, overseeing the identification, assessment, prioritisation, and remediation of vulnerabilities across infrastructure, applications, cloud environments, endpoints, and emerging technologies. The successful candidate will establish a risk-based vulnerability management framework aligned with business objectives, regulatory expectations, and industry best practice. Responsibilities will include directing vulnerability discovery and assessment activities, improving scanning and validation capabilities, and developing effective remediation processes with technology and business teams. You will define risk...

Learn more

Cyber Security Engineer (Vulnerability Management)

Added 09/10/2026

We are seeking a Cyber Security Engineer specialising in Vulnerability Management to help identify, assess and reduce security risks across a complex technology environment. You will be responsible for operating and improving vulnerability management processes, ensuring that weaknesses in infrastructure, applications, cloud services and endpoints are detected, prioritised and remediated effectively. Working closely with security, infrastructure, application development and operational teams, you will provide practical guidance that strengthens the organisation’s overall security posture. Key responsibilities will include configuring and maintaining vulnerability scanning tools; planning and executing authenticated and unauthenticated scans; validating findings; and analysing results to distinguish genuine risks from...

Learn more

Vulnerability Management Engineer (12 Month FTC)

Added 28/09/2026

We are seeking a Vulnerability Management Engineer for a 12-month fixed-term contract to support the identification, assessment and remediation of security vulnerabilities across a complex technology environment. This role will be responsible for helping strengthen the organisation’s security posture by ensuring vulnerabilities are accurately identified, prioritised according to risk and addressed within agreed timescales. You will manage and improve vulnerability scanning processes across infrastructure, endpoints, applications and cloud environments, working with security, infrastructure, development and service teams to investigate findings and coordinate remediation activity. Responsibilities will include configuring and maintaining vulnerability management tools, reviewing scan results, validating false positives, producing...

Learn more

Vulnerability Management Engineer

Added 04/09/2026

We are seeking a Vulnerability Management Engineer to help identify, assess, prioritise, and reduce security weaknesses across a complex technology environment. In this role, you will support the full vulnerability management lifecycle, from discovery and validation through remediation, reporting, and risk acceptance. You will work closely with infrastructure, cloud, application, endpoint, and operations teams to ensure vulnerabilities are addressed in line with defined service levels and business priorities. Your responsibilities will include configuring and maintaining vulnerability scanning and assessment tools; developing authenticated and unauthenticated scan policies; analysing results to remove false positives and identify meaningful risk; and producing clear reports...

Learn more

Senior Security Architect - SecOps and Vulnerability Management

Added 26/10/2026

We are seeking an experienced Senior Security Architect to lead the development and delivery of security operations and vulnerability management capabilities across a complex technology environment. This is a strategic and hands-on role, responsible for strengthening security resilience, reducing exposure to cyber threats and ensuring that security controls support business objectives. You will define and maintain security architecture principles, standards and roadmaps covering security operations, vulnerability identification, threat detection, incident response and remediation. Working closely with infrastructure, cloud, application, engineering and risk teams, you will ensure that security is embedded throughout the technology lifecycle and that new solutions are designed...

Learn more

Vulnerability Management Lead

Added 21/10/2026

We are seeking an experienced Vulnerability Management Lead to oversee the identification, assessment and remediation of security vulnerabilities across a complex technology estate. This is a key role within the cyber security function, providing technical leadership and helping to strengthen resilience against emerging threats. You will develop and manage the vulnerability management programme, establishing effective processes for vulnerability discovery, risk assessment, prioritisation and remediation. Working closely with infrastructure, cloud, application development and operational teams, you will ensure that vulnerabilities are addressed within agreed service levels and that risk-based decisions are clearly documented. Your responsibilities will include leading vulnerability scanning and...

Learn more

Senior Director, Exposure & Vulnerability Management

Added 16/10/2026

We are seeking a Senior Director, Exposure & Vulnerability Management to lead the development and execution of a global, risk-based programme that identifies, prioritises and reduces cyber exposure across a complex technology estate. This is a senior leadership role with responsibility for setting strategy, strengthening operational resilience and ensuring that vulnerabilities and external attack-surface risks are managed in line with business priorities and regulatory expectations. You will lead teams responsible for vulnerability assessment, remediation governance, threat-informed prioritisation, attack-surface management and exposure analytics. Working closely with information security, infrastructure, cloud, engineering, enterprise architecture, risk, audit and business stakeholders, you will establish...

Learn more

Head of Threat & Vulnerability Management

Added 06/10/2026

We are seeking a strategic and technically accomplished Head of Threat & Vulnerability Management to lead the development and delivery of an enterprise-wide capability that identifies, assesses and reduces cyber risk. This role will provide expert direction across threat intelligence, vulnerability assessment, security testing and remediation, ensuring that risks are understood, prioritised and addressed in line with business objectives and regulatory expectations. You will work closely with technology, infrastructure, application, risk and governance teams to embed secure-by-design principles and strengthen organisational resilience. Key responsibilities will include setting the strategy, policies, standards and operating model for threat and vulnerability management; leading...

Learn more

Vulnerability, Threat & Exposure Management Analyst

Added 25/09/2026

We are seeking a Vulnerability, Threat & Exposure Management Analyst to strengthen the organisation’s ability to identify, assess and reduce cyber risk across its technology estate. In this role, you will support the continuous management of vulnerabilities, threats and external exposures, helping security and technology teams prioritise remediation based on business impact, exploitability and threat intelligence. You will work with stakeholders across infrastructure, applications, cloud, networks and business operations to promote effective risk reduction and resilient security practices. Key responsibilities will include coordinating vulnerability scanning and exposure assessments, validating findings, analysing trends and producing clear risk-based reports for technical and...

Learn more

Assistant Vice President, Vulnerability Management

Added 24/09/2026

We are seeking an experienced Assistant Vice President, Vulnerability Management to lead and mature an enterprise-wide programme for identifying, assessing, prioritising and remediating security vulnerabilities. This senior leadership role will establish a proactive, risk-based approach to vulnerability management across infrastructure, applications, cloud environments, endpoints and third-party services. You will provide strategic direction while ensuring effective operational delivery, clear governance and measurable improvements in the organisation’s security posture. Key responsibilities include defining the vulnerability management strategy, policies, standards and operating model; overseeing vulnerability scanning, validation, threat-informed prioritisation and remediation tracking; and ensuring timely escalation of critical risks. You will partner closely...

Learn more

Head of Vulnerability Management - Government Digital Service - G6

Added 15/09/2026

We are seeking an experienced Head of Vulnerability Management to lead the development and delivery of a mature, risk-based vulnerability management capability across a complex digital and technology estate. This is a senior role requiring strong leadership, sound technical judgement and the ability to influence stakeholders at all levels. You will set the strategic direction for identifying, assessing, prioritising and remediating vulnerabilities, ensuring that security risks are understood and managed effectively. You will oversee vulnerability scanning, threat intelligence, exposure assessment, remediation tracking and reporting across infrastructure, applications, cloud services and third-party environments. Working closely with cyber security, architecture, engineering, service...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.