Cpl
Senior Vulnerability Management Engineer
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Senior Vulnerability Management Engineer
Location: Remote (UK)
Contract: Initial 6 Months
Day Rate: Up to £320 per day (Inside IR35)
The Opportunity
We are looking for an experienced Senior Vulnerability Management Engineer to lead the delivery and continuous improvement of an enterprise vulnerability management programme supporting critical security and compliance initiatives.
This is a hands-on technical role where you'll take ownership of authenticated vulnerability scanning, remediation governance and compliance reporting, working closely with Security, Infrastructure, Networking and Compliance teams to ensure vulnerabilities are identified, prioritised and remediated in line with agreed service levels.
You'll play a key role in building scalable vulnerability management capabilities while supporting security certifications, audit readiness and broader enterprise cyber security objectives.
Key Responsibilities
- Own the end-to-end vulnerability management process across enterprise infrastructure.
- Configure and manage authenticated vulnerability scanning across Windows, Linux, macOS and cloud environments.
- Prioritise vulnerabilities using CVSS scoring and drive remediation activities across technical teams.
- Define and monitor remediation SLAs, ensuring critical vulnerabilities are resolved within agreed timeframes.
- Develop and maintain dashboards, reporting and evidence packs demonstrating ongoing control effectiveness.
- Build and improve continuous evidence pipelines to support compliance and audit requirements.
- Maintain risk exception registers, documenting accepted risks, compensating controls and remediation plans.
- Partner with internal and external auditors to demonstrate compliance and support security assessments.
- Collaborate with Infrastructure, Networking, Endpoint Engineering, Compliance and Security teams to coordinate remediation activities.
- Integrate vulnerability management processes with ITSM platforms to automate ticket creation, ownership and SLA tracking.
- Contribute to the ongoing development of enterprise vulnerability management, patch management and security governance processes.
- Identify opportunities to automate vulnerability management activities through scripting and tooling.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What We're Looking For
- 7+ years' experience in Vulnerability Management, Security Engineering or a similar cyber security role.
- Strong hands-on experience administering enterprise vulnerability management platforms such as:
- Microsoft Defender Vulnerability Management
- Qualys
- Tenable
- Rapid7
- Strong understanding of vulnerability management methodologies, CVSS scoring and remediation lifecycle management.
- Experience supporting compliance frameworks such as:
- Cyber Essentials Plus
- ISO 27001
- SOC 2
- PCI DSS
- Experience preparing audit evidence and working directly with auditors or external assessors.
- Experience building reporting and evidence dashboards using tools such as Power BI, Splunk or Microsoft Sentinel.
- Knowledge of vulnerability scanning across Windows, Linux, macOS and cloud infrastructure.
- Experience integrating vulnerability management with ITSM platforms for automated workflow management.
- Strong stakeholder management skills with the ability to work across Security, Infrastructure, Compliance and Engineering teams.
- Excellent analytical, troubleshooting and problem-solving abilities.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
If you are interested please apply or send your CV to luke.sandilands@cpl.com
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location