Qube Research & Technologies
Vulnerability Management Engineer
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Qube Research & Technologies (QRT)
Qube Research & Technologies (QRT) is a global quantitative and systematic investment manager, operating in all liquid asset classes across the world. We are a technology- and data-driven group implementing a scientific approach to investing. Combining data, research, technology, and trading expertise has shaped our collaborative mindset, which enables us to solve the most complex challenges. QRT’s culture of innovation continuously drives our ambition to deliver high-quality returns for our investors.
Your Future Role within QRT
You will join the security function responsible for running the vulnerability management programme across infrastructure and cloud environments. You will work closely with Engineering and Infrastructure/Operations teams to identify, validate, prioritise, and track remediation of vulnerabilities in line with defined risk standards.
Vulnerability Discovery & Analysis
- Operate and maintain vulnerability scanning tools across on-premise, cloud, and hybrid environments.
- Analyse and validate vulnerability findings, reducing false positives and ensuring accurate risk assessment.
- Enrich findings with context such as exploitability, exposure, asset criticality, and compensating controls.
Technical Validation & Verification
- Perform manual validation of vulnerabilities where required, including configuration review and targeted testing.
- Support pre-deployment testing and post-remediation verification to confirm vulnerabilities have been effectively addressed.
- Validate patching outcomes and configuration changes using appropriate tools and techniques.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Remediation Support
- Work closely with infrastructure, cloud, and engineering teams to support remediation efforts.
- Provide clear technical guidance on vulnerability remediation, configuration changes, and patching approaches.
- Assist in the development of remediation playbooks and standard operating procedures.
Tooling & Automation
- Support the implementation and ongoing improvement of vulnerability management tooling.
- Develop scripts, queries, and automation to improve coverage, accuracy, and efficiency.
- Integrate vulnerability data with other security and operational systems where appropriate.
Reporting & Metrics
- Produce accurate vulnerability data, metrics, and dashboards to support reporting and tracking.
- Ensure vulnerability records are kept up to date and remediation status is accurately reflected.
Continuous Improvement & Threat Awareness
- Stay current on emerging vulnerabilities, attack techniques, and exploitation trends.
- Contribute to process improvements and technical enhancements within the vulnerability management function.
Incident & Security Support
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Support security incidents by identifying relevant vulnerabilities and providing technical context.
- Assist in rapid assessment and validation of vulnerabilities under active exploitation.
Your Present Skillset
- 3–6 years’ experience in vulnerability management, infrastructure security, or a related technical security role
- Hands-on experience with vulnerability scanning and assessment tools
- Strong understanding of operating systems, networking, and common infrastructure technologies
- Experience working in cloud environments (AWS and/or Azure)
- Ability to assess real-world risk beyond CVSS (exploitability, exposure, environment context)
- Scripting/automation capability (e.g., Python, PowerShell, or similar)
- Experience collaborating with engineering and operations teams to drive remediation
- Familiarity with patch management and configuration management practices
- Exposure to security standards or frameworks (e.g., NIST, ISO 27001)
- Experience in large-scale or enterprise environments
- Relevant technical certifications (optional)
QRT is an equal opportunity employer.
We welcome diversity as essential to our success. QRT empowers employees to work openly and respectfully to achieve collective success. In addition to professional achievement, we are offering initiatives and programs to enable employees achieve a healthy work-life balance.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location