Job Description
Find & Fix/Vulnerability Engineer:
Active UK SC Clearance is essentialHybrid - 1 day onsite per week from Stevenage or Filton
We are seeking a Vulnerability Management Engineer to take ownership of the full life cycle of vulnerability management across both internal systems and client environments. This is a key role focused on improving security posture through effective identification, prioritisation, and remediation of vulnerabilities across cloud and on-prem environments.
The RoleYou will be responsible for driving vulnerabilities through to full resolution-ensuring issues are not just identified but properly remediated, verified, and evidenced. Working closely with cross-functional teams, you will help balance risk reduction with operational stability while embedding secure practices at scale.
Key Responsibilities
* Own the end-to-end vulnerability remediation life cycle - from identification and validation through to remediation, verification, and closure
* Remediate cloud security issues using tools such as:
* Microsoft Defender for Cloud
* Azure Advisor
* AWS Inspector & Security Hub
* Conduct on-prem vulnerability scanning and coordinate remediation activities
* Translate security advisories into clear, actionable remediation tasks for engineering teams
* Resolve OS and application vulnerabilities via patching, hardening, and control implementation
* Collaborate with infrastructure, platform, and application teams to deploy fixes safely (including change control, testing, and rollback planning)
* Maintain comprehensive documentation and audit evidence, including root cause analysis and validation
* Produce regular reporting on vulnerability trends, SLA performance, and residual risk
* Deliver remediation at scale using DevOps practices and Infrastructure as Code (Terraform)
* Continuously improve vulnerability management processes and security baselines
Environment
* Hybrid cloud: Azure & AWS
* On-prem infrastructure environments
* Security tooling and enterprise vulnerability management frameworks
* Cross-functional collaboration across engineering, security, and operations teams
Key Requirements
* Proven experience in vulnerability management and remediation
* Strong exposure to Azure, AWS, and on-prem environments
* Experience with vulnerability scanning and security tools
* Understanding of security frameworks and best practices
* DevOps mindset with experience in automation, IaC (Terraform), and scalable solutions
* Strong stakeholder management and communication skills
* Active UK SC Clearance is essential