Vulnerability Management Engineer
We are seeking a Vulnerability Management Engineer to help identify, assess and reduce security vulnerabilities across a complex technology estate. You will work closely with infrastructure, cloud, application and development teams to ensure vulnerabilities are managed consistently, prioritised according to risk and remediated within agreed timescales.
In this role, you will operate and maintain vulnerability scanning platforms, configure authenticated and unauthenticated scans, review results and investigate false positives. You will analyse findings from infrastructure, applications, operating systems, cloud services and network devices, translating technical information into clear, actionable remediation guidance for technical and non-technical stakeholders.
Your responsibilities will include maintaining vulnerability inventories, producing regular management reports and dashboards, tracking remediation activity, supporting risk acceptance processes and escalating overdue or high-risk issues. You will help define vulnerability management standards, improve scanning coverage and contribute to the development of metrics, service-level agreements and operating procedures.
You will also support the assessment of emerging threats, validate remediation through re-scanning and collaborate with security operations and incident response teams where vulnerabilities present an immediate risk. The role may involve contributing to penetration testing coordination, patch management governance, security tooling improvements and audit or regulatory requirements.
We are looking for experience in vulnerability management, security operations, infrastructure security or a related discipline. You should have practical knowledge of vulnerability scanning tools and common standards such as CVSS, CWE, OWASP and the NIST Cybersecurity Framework. Experience across Windows and Linux environments, cloud platforms, networking, databases and web applications would be advantageous.
You will need strong analytical and problem-solving skills, attention to detail and the ability to manage competing priorities. Excellent written and verbal communication is essential, along with the confidence to challenge constructively and build effective relationships across technical teams. Relevant security certifications, such as Security+, CEH, OSCP or equivalent experience, are desirable.
Vulnerability Management Engineer
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Consultant
- Identity Access Management IAM
- IT Security Manager
- Security Architect
- Data Protection
- Cyber Security Consultant
- Governance and Compliance
- Risk Analyst
- SOC Analyst
- Application Security
LATEST JOBS
- Cyber Security Engineer
- Interim Cyber Security Interna...
- Lead DevSecOps Engineer
- Data Privacy Specialist UK
- Security and Compliance Engine...
- GCIO Operations Manager - Cybe...
- Information Security Analyst
- Senior Director - DevOps Secur...
- Head of Information Security
- Lead Cloud Security Engineer
- Cyber Policy Lead
- IT Security Auditor