Technical Vulnerability Management Engineer

Salary: £104,000 - 117,000 per year

Requirements

• We ideally want experience in a technical security role such as Penetration Testing, Offensive Security, Application Security or Vulnerability Management.
• We want hands-on experience in penetration testing or offensive security.
• We want a good understanding of how vulnerabilities are discovered, exploited and remediated.
• We want strong Linux knowledge and confidence working from the command line.
• We want scripting experience using Python, Bash or similar.
• We want familiarity with CVE, CVSS, NVD and common vulnerability management practices.
• We want a methodical approach to analysing technical risk and prioritising remediation.
• We want strong communication skills with the ability to explain technical issues to non-security stakeholders.
• It would be beneficial if we have experience with vulnerability management platforms such as Tenable, Qualys, Rapid7 or Microsoft Defender VM.
• It would be beneficial if we have experience with OWASP Top 10.
• It would be beneficial if we have experience with security automation.
• It would be beneficial if we have experience with enterprise vulnerability management.
• It would be beneficial if we have experience with cloud infrastructure security.
• It would be beneficial if we have relevant certifications such as OSCP, CREST CRT, GPEN or similar.

Responsibilities

• We analyse newly published CVEs and security advisories to understand technical impact and exploitability.
• We assess the potential impact of vulnerabilities across enterprise infrastructure and systems.
• We identify affected assets using internal tooling and vulnerability data sources.
• We work closely with engineering and system owners to prioritise and coordinate remediation activities.
• We write Python, Bash or similar scripts to automate repetitive analysis and operational tasks.
• We produce clear technical documentation, vulnerability assessments and remediation guidance.
• We support ongoing improvements to vulnerability management processes.

Technologies

• Bash
• Cloud
• Support
• Linux
• OWASP
• Python
• Security

More

We are supporting one of the worlds leading technology companies in hiring a contractor to join our Information Security Assurance team. This is an excellent opportunity for someone with a background in penetration testing or offensive security who enjoys understanding how vulnerabilities work and helping engineering teams reduce security risk at scale. Rather than carrying out traditional penetration testing engagements, we analyse newly disclosed vulnerabilities, assess their potential impact across a large enterprise environment and work with internal stakeholders to drive remediation. The role is based in London with 3 days onsite and 2 days remote, offered at up to £450 per day PAYE equivalent inside IR35, with an initial 3-month contract and a strong expectation of long-term extension, starting ASAP.

last updated 29 week of 2026