Security Engineer - Vulnerability Management
Job Description
[Up to c. $400k Comp Package (or equivalent) | Office-Led Working]
Role Overview
We’re representing a highly technical quantitative finance organisation that is continuing to expand its cybersecurity capability as the scale and complexity of its technology environment grows. This position sits within a specialist Cybersecurity team combining security expertise with a strong software engineering culture.
The mandate is to strengthen vulnerability management through better engineering, automation and risk intelligence. Rather than relying on high-volume manual triage, you’ll improve how vulnerabilities are discovered, contextualised, prioritised and driven through remediation across a substantial technology estate. This is a hands-on individual contributor role for someone who understands vulnerability management deeply but also thinks like an engineer - comfortable building integrations, working with security data, improving tooling and determining which exposures create meaningful real-world risk...
Role Snapshot
- Bring substantial hands-on vulnerability management experience from a complex technology environment, with strong knowledge of scanning, asset discovery, remediation workflows and verification
- Operate as an experienced security engineering IC - there is no fixed years requirement, although the scope will typically suit someone with 5+ years of relevant security engineering or vulnerability management experience
- Own and improve the vulnerability lifecycle across identification, technical validation, prioritisation, routing, remediation monitoring and closure
- Work deeply with platforms such as Rapid7, Tenable, Qualys or equivalent, including understanding scanner coverage, authentication failures, stale data and gaps across different asset types
- Build automation, integrations and supporting tooling rather than relying on repetitive operational processes, with code and configuration managed through normal engineering practices such as version control and peer review
- Analyse vulnerability, asset and security data across multiple sources, including building or debugging pipelines that turn inconsistent inputs into dependable information
- Incorporate software inventory and SBOM information to identify where vulnerable libraries and components exist across internally used software
- Apply threat modelling, exploitability, exposure and environmental context when prioritising remediation rather than treating severity scores as the sole indicator of risk
- Develop useful measurements around scanning coverage, remediation performance, service levels and overall programme health, giving engineering teams clear visibility into where action is required
- (Preferred) Experience applying AI-assisted automation, broad cybersecurity knowledge or adjacent security engineering expertise that improves decision-making beyond conventional vulnerability management
...
Apply for this role
All fields marked with * are required.