Senior Vulnerability Management Engineer
Primary stack
Nice to have's
Job description
About the Position
We are seeking a Senior Vulnerability Management Engineer to build and operate the vulnerability management program supporting Cyber Essentials Plus (CE+) certification and broader enterprise compliance objectives. This role is the technical owner of authenticated vulnerability scanning, SLA-driven remediation coordination, and the continuous evidence pipeline required to demonstrate ongoing control effectiveness to assessors and executive leadership.
Responsibilities
- Own end-to-end vulnerability management for CE+ in-scope assets - endpoints, servers, and supporting infrastructure.
- Configure and operate authenticated vulnerability scanning across Windows, macOS, Linux, and cloud workloads.
- Define and enforce SLA logic aligned to CE+ v3.3 - Critical/High vulnerabilities (CVSS ≥7.0) remediated within 14 days.
- Build and own the continuous evidence pipeline - scan coverage reporting, SLA compliance dashboards, vulnerability lifecycle audit trails, and quarterly attestation packs.
- Own the exception register - document risk-accepted items with compensating controls, named risk owners, and remediation roadmaps.
- Partner directly with CE+ assessors during certification and recertification cycles; serve as the technical voice defending control effectiveness.
- Coordinate remediation across Device Engineering, Device Trust, Networking, and business asset owners.
- Integrate vulnerability findings with ITSM workflows to ensure auto-ticketing, ownership assignment, and SLA tracking.
- Contribute to broader enterprise vulnerability and patch management strategy as scope expands into Network, Data Center, and Cloud Infrastructure.
- Support adjacent compliance frameworks by leveraging the VM evidence foundation.
Requirements
- 7+ years of experience in vulnerability management, security engineering, or related roles.
- Hands-on experience operating enterprise vulnerability management platforms (Microsoft Defender Vulnerability Management, Qualys, Tenable, or Rapid7).
- Strong understanding of CVSS scoring, vulnerability prioritization, and remediation lifecycle management.
- Experience producing audit evidence for compliance frameworks (CE+, SOC 2, ISO 27001, PCI, or equivalent).
- Demonstrated ability to partner with auditors, assessors, or regulators in a technical capacity.
- Strong cross-functional collaboration skills - comfortable working with compliance, engineering, networking, and business stakeholders.
Nice to Have
- Direct experience with Cyber Essentials Plus or comparable UK/EU certification schemes.
- Experience with Microsoft Defender for Endpoint and Defender Vulnerability Management at scale.
- Familiarity with patch management platforms.
- Experience building security evidence dashboards using Power BI, Splunk, or equivalent.
- Scripting and automation skills (PowerShell, Python, KQL).
- Industry certifications: GIAC GCIH, GCED, GPEN, CISSP, or equivalent.
We Offer
- Competitive daily rate.
- Opportunity to work with a leading organization in the technology sector.
- Remote work options.
About the Company
Cpl is a leading recruitment and managed services company, providing expert solutions to businesses across various sectors. We are committed to delivering high-quality services and fostering a culture of innovation and excellence.
For further specification details, please contact Lindsay O’Leary at 00 353 86 8311808.
© CPL Jobs Sp. z o.o. NIP: 7010256845. This job description was sourced from the employer's public career page. TheJob is not the employer — we index the posting and route candidates to the source. All content rights and hiring decisions belong to the employer.
Cpl is a Global provider of workforce solutions to startup companies, multinationals and SMEs in every sector from Pharmaceuticals to Fund Accounting.Founded in 1989, the Cpl Group now comprises 22 brands spanning more than 41 offices in 11 countries.Cpl’s core goal is to power business growth through people. Each of our Cpl divisions and brands offers innovative, sector-focused solutions across recruitment, outsourcing, training, and consultancy. We offer a combination of scale and industry-expertise across the group with over 300 recruitment consultants dedicated to specific sectors and skillsets, including:• IT• Construction• Science• Customer Support• Engineering• Finance• Retail• Banking• HR• Sales• Administration• Marketing• Supply Chain