X4 Technology
Cyber Security Consultant (Tenable)
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Vulnerability Remediation Governance & Management Lead – Contract
Location: Leeds – 1 day per week onsite
Duration: 5 weeks initially + chance to extend or go permanent
Rate: Competitive Depending on experience Outside IR35
Clearance: Active SC Clearance required from offset
Start: By 19th August
Interviews: Taking place this week
We are currently recruiting for an experienced Vulnerability Remediation Governance & Management Lead for an urgent 5-week initial engagement within a large, complex and highly regulated technology environment.
The role will focus on driving the governance and remediation of vulnerabilities across a hybrid technology estate, working closely with Cyber Security, Infrastructure, Cloud, Applications and Service Management teams.
This is an ideal opportunity for a vulnerability management specialist with strong governance and stakeholder management experience, particularly someone who has worked with Tenable and complex regulated environments.
Key Responsibilities
- Lead the end-to-end vulnerability remediation governance process, from identification and triage through to remediation, validation and closure.
- Use Tenable to monitor vulnerability exposure, remediation progress, ageing, recurring vulnerabilities and SLA performance.
- Establish risk-based prioritisation based on severity, exploitability, asset criticality, exposure and potential business/service impact.
- Lead remediation and vulnerability burn-down sessions with technical teams.
- Ensure vulnerabilities have clear ownership, remediation plans and target dates.
- Challenge overdue remediation and escalate material risks where required.
- Manage vulnerability risk registers, exceptions, compensating controls and formal risk acceptance.
- Validate remediation evidence and coordinate rescans to confirm vulnerabilities have been successfully addressed.
- Produce clear operational and management reporting covering vulnerability backlogs, ageing, SLA performance, critical/high-risk exposure and remediation trends.
- Identify systemic barriers to remediation and drive improvement actions.
- Work with Cyber Defence, Incident Response and Threat Intelligence teams to prioritise vulnerabilities associated with active or credible threats.
- Support audit and assurance activity by maintaining clear evidence of remediation and risk decisions.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Essential Experience
- Active SC Clearance – essential and required from the start of the engagement.
- Proven experience in vulnerability remediation governance and management.
- Strong working knowledge of Tenable, ideally Tenable.io / Tenable One.
- Experience translating vulnerability scanner findings into practical, risk-based remediation plans.
- Strong understanding of vulnerability lifecycle management, including discovery, triage, prioritisation, remediation, validation and reporting.
- Experience managing risk registers, remediation actions, exceptions and risk acceptance.
- Experience coordinating remediation across complex hybrid environments.
- Strong stakeholder management skills, including the ability to challenge technical teams around overdue or insufficient remediation.
- Experience producing reporting and MI for senior stakeholders and governance forums.
- Understanding of security and risk frameworks such as NIST, ISO 27001 and NCSC guidance.
- Strong understanding of patching, configuration remediation and vulnerability validation.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable
- Experience working within public-sector or highly regulated environments.
- Knowledge of NHS DSPT, NCSC CAF or similar security assurance requirements.
- Experience with Azure, AWS or Microsoft 365 security remediation.
- Experience integrating vulnerability data with ServiceNow, Jira, CMDB or GRC platforms.
- Exposure to Microsoft Defender, Qualys, Rapid7, CrowdStrike, Sentinel or similar security tooling.
- Relevant security or vulnerability management certifications.
Apply Now
This is an urgent 5-week initial engagement, with interviews taking place this week and a target start date of 19th August.
Active SC clearance is essential from day one.
Outside IR35 | Competitive Rate | Leeds – 1 day per week | 5 weeks initially
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location