Role: Vulnerability Management Engineer / Specialist
Experience: 5–8+ years
Domain: Cyber Security – Vulnerability Management

Role Objective

Responsible for identifying, assessing, prioritising and driving remediation of security vulnerabilities across infrastructure, applications, cloud and network environments to reduce organisational cyber risk.

Key Responsibilities

• Perform vulnerability scanning and assessment across servers, endpoints, network devices, databases and cloud environments.
• Administer enterprise vulnerability-management platforms such as Tenable Nessus/Tenable.io, Qualys VMDR or Rapid7 InsightVM.
• Analyse vulnerabilities based on CVSS score, exploitability, asset criticality and business impact.
• Prioritise critical/high-risk vulnerabilities and coordinate remediation with infrastructure, application, cloud and network teams.
• Track vulnerabilities from identification through remediation, validation and closure.
• Perform rescanning and validation after patching/remediation.
• Manage vulnerability ageing, SLA breaches, exceptions and risk-acceptance cases.
• Identify zero-day and actively exploited vulnerabilities, including assessment against CISA KEV where applicable.
• Develop vulnerability dashboards covering critical/high vulnerabilities, ageing, SLA compliance, remediation trends and risk exposure.
• Support patch and vulnerability governance meetings and drive ownership of outstanding remediation actions.
• Investigate recurring vulnerabilities and recommend permanent corrective actions.
• Support vulnerability remediation across Windows, Linux, network, middleware and cloud platforms.
• Create and maintain SOPs, remediation guidance, audit evidence and operational documentation.
• Work with Incident Management, SOC, Cyber Security, Infrastructure and Application teams during critical security events.
• Support audits and compliance requirements related to vulnerability and patch management.

Mandatory Technical Skills

• Tenable / Qualys / Rapid7 vulnerability-management platforms
• CVSS, CVE and CISA KEV understanding
• Vulnerability scanning and risk-based prioritisation
• Windows and Linux vulnerability remediation knowledge
• Network and infrastructure security fundamentals
• Azure/AWS cloud vulnerability-management concepts
• Patch and configuration management
• Reporting and security dashboards
• ServiceNow or equivalent ITSM platform
• Strong vulnerability analysis and RCA capabilities

Good to Have

• Microsoft Defender Vulnerability Management
• PowerShell/Python automation
• Application and container vulnerability-management exposure
• CIS Benchmarks and security-hardening knowledge
• SIEM/SOC integration experience
• Security certifications such as Security+, CEH, CISSP or relevant vendor certifications

Key Deliverables

Discovery & Scanning → Risk Assessment → Prioritisation → Remediation Coordination → Rescan & Validation → Exception Management → Compliance & Reporting

Key KPIs

• Critical/High vulnerability ageing
• Remediation SLA compliance
• Reduction in overdue vulnerabilities
• Vulnerability recurrence rate
• Scan coverage
• Risk acceptance/exception ageing
• Critical vulnerability remediation effectiveness