Information & Cyber Security - Vulnerability Management Engineer - IT1
We are seeking a Vulnerability Management Engineer to support the identification, assessment and remediation of cyber security vulnerabilities across a complex technology environment. This role will help strengthen security resilience by ensuring that vulnerabilities are accurately understood, prioritised and addressed in line with business risk.
You will be responsible for operating and maintaining vulnerability scanning tools, conducting regular assessments across infrastructure, applications, cloud services and endpoints, and analysing results to distinguish genuine risks from false positives. You will work closely with technology, engineering and service teams to validate findings, agree remediation plans and track actions through to completion.
The role will involve producing clear vulnerability reports, dashboards and management information, highlighting trends, overdue actions, emerging threats and areas requiring escalation. You will contribute to risk-based prioritisation by considering factors such as exploitability, asset criticality, exposure, business impact and available threat intelligence. You may also support vulnerability assessments following significant changes, new technology deployments or the discovery of actively exploited threats.
As part of the wider information and cyber security function, you will help develop vulnerability management processes, standards and guidance. You will promote secure working practices, provide advice on remediation approaches and contribute to continuous improvements in tooling, automation and reporting. The role may also include supporting audit activity, documenting exceptions and assisting with security assurance exercises.
Applicants should have practical experience in vulnerability management, security operations, infrastructure or a related cyber security discipline. You will need knowledge of vulnerability scanning and assessment techniques, common security weaknesses, patch management and risk-based remediation. Familiarity with tools such as Tenable, Qualys, Rapid7 or equivalent platforms would be advantageous, along with an understanding of cloud, network, server and endpoint technologies.
Strong analytical, communication and stakeholder-management skills are essential. You should be able to explain technical risks clearly to both technical and non-technical audiences, manage competing priorities and work collaboratively across multiple teams. Relevant cyber security qualifications or certifications, such as Security+, CISSP, CISM or equivalent experience, would be welcomed.
Information & Cyber Security - Vulnerability Management Engineer - IT1
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Consultant
- Identity Access Management IAM
- IT Security Manager
- Security Architect
- Data Protection
- Cyber Security Consultant
- Governance and Compliance
- Risk Analyst
- SOC Analyst
- Application Security
LATEST JOBS
- Cyber Security Engineer
- Interim Cyber Security Interna...
- Lead DevSecOps Engineer
- Data Privacy Specialist UK
- Security and Compliance Engine...
- GCIO Operations Manager - Cybe...
- Information Security Analyst
- Senior Director - DevOps Secur...
- Head of Information Security
- Lead Cloud Security Engineer
- Cyber Policy Lead
- IT Security Auditor