Information & Cyber Security - Vulnerability Management Engineer - IT1

Reference: r7glp4mixi4bzlx5dd2i

We are seeking a Vulnerability Management Engineer to support the identification, assessment and remediation of cyber security vulnerabilities across a complex technology environment. This role will help strengthen security resilience by ensuring that vulnerabilities are accurately understood, prioritised and addressed in line with business risk.

You will be responsible for operating and maintaining vulnerability scanning tools, conducting regular assessments across infrastructure, applications, cloud services and endpoints, and analysing results to distinguish genuine risks from false positives. You will work closely with technology, engineering and service teams to validate findings, agree remediation plans and track actions through to completion.

The role will involve producing clear vulnerability reports, dashboards and management information, highlighting trends, overdue actions, emerging threats and areas requiring escalation. You will contribute to risk-based prioritisation by considering factors such as exploitability, asset criticality, exposure, business impact and available threat intelligence. You may also support vulnerability assessments following significant changes, new technology deployments or the discovery of actively exploited threats.

As part of the wider information and cyber security function, you will help develop vulnerability management processes, standards and guidance. You will promote secure working practices, provide advice on remediation approaches and contribute to continuous improvements in tooling, automation and reporting. The role may also include supporting audit activity, documenting exceptions and assisting with security assurance exercises.

Applicants should have practical experience in vulnerability management, security operations, infrastructure or a related cyber security discipline. You will need knowledge of vulnerability scanning and assessment techniques, common security weaknesses, patch management and risk-based remediation. Familiarity with tools such as Tenable, Qualys, Rapid7 or equivalent platforms would be advantageous, along with an understanding of cloud, network, server and endpoint technologies.

Strong analytical, communication and stakeholder-management skills are essential. You should be able to explain technical risks clearly to both technical and non-technical audiences, manage competing priorities and work collaboratively across multiple teams. Relevant cyber security qualifications or certifications, such as Security+, CISSP, CISM or equivalent experience, would be welcomed.

COMPETITIVE SALARY
Added 02/11/2026
Reference: r7glp4mixi4bzlx5dd2i

Information & Cyber Security - Vulnerability Management Engineer - IT1

Newcastle upon Tyne, England, United Kingdom Permanent Security Engineer

Other similar jobs

Cyber Security Engineer (Vulnerability Management)

Added 09/10/2026

We are seeking a Cyber Security Engineer specialising in Vulnerability Management to help identify, assess and reduce security risks across a complex technology environment. You will be responsible for operating and improving vulnerability management processes, ensuring that weaknesses in infrastructure, applications, cloud services and endpoints are detected, prioritised and remediated effectively. Working closely with security, infrastructure, application development and operational teams, you will provide practical guidance that strengthens the organisation’s overall security posture. Key responsibilities will include configuring and maintaining vulnerability scanning tools; planning and executing authenticated and unauthenticated scans; validating findings; and analysing results to distinguish genuine risks from...

Learn more

Vulnerability Management Engineer

Added 30/10/2026

We are seeking a Vulnerability Management Engineer to help identify, assess and reduce security vulnerabilities across a complex technology estate. You will work closely with infrastructure, cloud, application and development teams to ensure vulnerabilities are managed consistently, prioritised according to risk and remediated within agreed timescales. In this role, you will operate and maintain vulnerability scanning platforms, configure authenticated and unauthenticated scans, review results and investigate false positives. You will analyse findings from infrastructure, applications, operating systems, cloud services and network devices, translating technical information into clear, actionable remediation guidance for technical and non-technical stakeholders. Your responsibilities will include maintaining...

Learn more

Vice President, Threat and Vulnerability Management Engineer

Added 12/10/2026

We are seeking a Vice President, Threat and Vulnerability Management Engineer to lead the strategy, architecture, and execution of enterprise-wide cyber risk reduction initiatives. This senior role will combine technical leadership with programme ownership, overseeing the identification, assessment, prioritisation, and remediation of vulnerabilities across infrastructure, applications, cloud environments, endpoints, and emerging technologies. The successful candidate will establish a risk-based vulnerability management framework aligned with business objectives, regulatory expectations, and industry best practice. Responsibilities will include directing vulnerability discovery and assessment activities, improving scanning and validation capabilities, and developing effective remediation processes with technology and business teams. You will define risk...

Learn more

Vulnerability Management Engineer (12 Month FTC)

Added 28/09/2026

We are seeking a Vulnerability Management Engineer for a 12-month fixed-term contract to support the identification, assessment and remediation of security vulnerabilities across a complex technology environment. This role will be responsible for helping strengthen the organisation’s security posture by ensuring vulnerabilities are accurately identified, prioritised according to risk and addressed within agreed timescales. You will manage and improve vulnerability scanning processes across infrastructure, endpoints, applications and cloud environments, working with security, infrastructure, development and service teams to investigate findings and coordinate remediation activity. Responsibilities will include configuring and maintaining vulnerability management tools, reviewing scan results, validating false positives, producing...

Learn more

Vulnerability Management Engineer

Added 04/09/2026

We are seeking a Vulnerability Management Engineer to help identify, assess, prioritise, and reduce security weaknesses across a complex technology environment. In this role, you will support the full vulnerability management lifecycle, from discovery and validation through remediation, reporting, and risk acceptance. You will work closely with infrastructure, cloud, application, endpoint, and operations teams to ensure vulnerabilities are addressed in line with defined service levels and business priorities. Your responsibilities will include configuring and maintaining vulnerability scanning and assessment tools; developing authenticated and unauthenticated scan policies; analysing results to remove false positives and identify meaningful risk; and producing clear reports...

Learn more

Senior Security Architect - SecOps and Vulnerability Management

Added 26/10/2026

We are seeking an experienced Senior Security Architect to lead the development and delivery of security operations and vulnerability management capabilities across a complex technology environment. This is a strategic and hands-on role, responsible for strengthening security resilience, reducing exposure to cyber threats and ensuring that security controls support business objectives. You will define and maintain security architecture principles, standards and roadmaps covering security operations, vulnerability identification, threat detection, incident response and remediation. Working closely with infrastructure, cloud, application, engineering and risk teams, you will ensure that security is embedded throughout the technology lifecycle and that new solutions are designed...

Learn more

Senior Security Architect - SecOps and Vulnerability Management

Added 07/09/2026

We are seeking a Senior Security Architect to lead the design and continuous improvement of SecOps and vulnerability management capabilities across a complex technology environment. This is a strategic and hands-on role for an experienced security professional who can translate business and technology risks into practical, resilient security solutions. You will define architecture principles, security standards and operating models that strengthen the organisation’s ability to identify, assess, prioritise and respond to cyber threats. Key responsibilities will include developing and maintaining security architecture for security operations, vulnerability management, threat detection, incident response and security monitoring. You will evaluate existing controls, identify...

Learn more

Vulnerability Management Lead

Added 21/10/2026

We are seeking an experienced Vulnerability Management Lead to oversee the identification, assessment and remediation of security vulnerabilities across a complex technology estate. This is a key role within the cyber security function, providing technical leadership and helping to strengthen resilience against emerging threats. You will develop and manage the vulnerability management programme, establishing effective processes for vulnerability discovery, risk assessment, prioritisation and remediation. Working closely with infrastructure, cloud, application development and operational teams, you will ensure that vulnerabilities are addressed within agreed service levels and that risk-based decisions are clearly documented. Your responsibilities will include leading vulnerability scanning and...

Learn more

Senior Director, Exposure & Vulnerability Management

Added 16/10/2026

We are seeking a Senior Director, Exposure & Vulnerability Management to lead the development and execution of a global, risk-based programme that identifies, prioritises and reduces cyber exposure across a complex technology estate. This is a senior leadership role with responsibility for setting strategy, strengthening operational resilience and ensuring that vulnerabilities and external attack-surface risks are managed in line with business priorities and regulatory expectations. You will lead teams responsible for vulnerability assessment, remediation governance, threat-informed prioritisation, attack-surface management and exposure analytics. Working closely with information security, infrastructure, cloud, engineering, enterprise architecture, risk, audit and business stakeholders, you will establish...

Learn more

Head of Threat & Vulnerability Management

Added 06/10/2026

We are seeking a strategic and technically accomplished Head of Threat & Vulnerability Management to lead the development and delivery of an enterprise-wide capability that identifies, assesses and reduces cyber risk. This role will provide expert direction across threat intelligence, vulnerability assessment, security testing and remediation, ensuring that risks are understood, prioritised and addressed in line with business objectives and regulatory expectations. You will work closely with technology, infrastructure, application, risk and governance teams to embed secure-by-design principles and strengthen organisational resilience. Key responsibilities will include setting the strategy, policies, standards and operating model for threat and vulnerability management; leading...

Learn more

Vulnerability, Threat & Exposure Management Analyst

Added 25/09/2026

We are seeking a Vulnerability, Threat & Exposure Management Analyst to strengthen the organisation’s ability to identify, assess and reduce cyber risk across its technology estate. In this role, you will support the continuous management of vulnerabilities, threats and external exposures, helping security and technology teams prioritise remediation based on business impact, exploitability and threat intelligence. You will work with stakeholders across infrastructure, applications, cloud, networks and business operations to promote effective risk reduction and resilient security practices. Key responsibilities will include coordinating vulnerability scanning and exposure assessments, validating findings, analysing trends and producing clear risk-based reports for technical and...

Learn more

Assistant Vice President, Vulnerability Management

Added 24/09/2026

We are seeking an experienced Assistant Vice President, Vulnerability Management to lead and mature an enterprise-wide programme for identifying, assessing, prioritising and remediating security vulnerabilities. This senior leadership role will establish a proactive, risk-based approach to vulnerability management across infrastructure, applications, cloud environments, endpoints and third-party services. You will provide strategic direction while ensuring effective operational delivery, clear governance and measurable improvements in the organisation’s security posture. Key responsibilities include defining the vulnerability management strategy, policies, standards and operating model; overseeing vulnerability scanning, validation, threat-informed prioritisation and remediation tracking; and ensuring timely escalation of critical risks. You will partner closely...

Learn more

Head of Vulnerability Management - Government Digital Service - G6

Added 15/09/2026

We are seeking an experienced Head of Vulnerability Management to lead the development and delivery of a mature, risk-based vulnerability management capability across a complex digital and technology estate. This is a senior role requiring strong leadership, sound technical judgement and the ability to influence stakeholders at all levels. You will set the strategic direction for identifying, assessing, prioritising and remediating vulnerabilities, ensuring that security risks are understood and managed effectively. You will oversee vulnerability scanning, threat intelligence, exposure assessment, remediation tracking and reporting across infrastructure, applications, cloud services and third-party environments. Working closely with cyber security, architecture, engineering, service...

Learn more

Vulnerability Management Analyst

Added 14/09/2026

We are seeking a Vulnerability Management Analyst to support the identification, assessment, prioritisation, and remediation of security weaknesses across a complex technology environment. In this role, you will help reduce cyber risk by coordinating vulnerability management activities across infrastructure, applications, cloud services, endpoints, and network devices. You will work closely with security, infrastructure, development, and service teams to ensure vulnerabilities are understood, addressed, and tracked through to resolution. Your responsibilities will include operating and maintaining vulnerability scanning tools, reviewing scan results, validating findings, and assessing vulnerabilities based on severity, exploitability, asset criticality, and business impact. You will produce clear reports...

Learn more

Head of Vulnerability Management

Added 14/09/2026

We are seeking an experienced Head of Vulnerability Management to lead the development and delivery of a comprehensive, risk-based vulnerability management programme. This is a strategic leadership role responsible for reducing cyber risk across a complex technology environment, including cloud platforms, on-premises infrastructure, applications, endpoints and third-party services. You will define the vulnerability management vision, establish effective governance and ensure that security risks are identified, prioritised and remediated in line with business objectives and regulatory expectations. You will lead a team of vulnerability management specialists and work closely with Security Operations, Infrastructure, Engineering, Architecture, Risk, Compliance and Technology leadership. Responsibilities...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.