Vulnerability Management Specialist

About the role

Our enterprise client is looking for senior Cyber Vulnerability Management Specialists with penetration‑testing experience to join a large cyber team. The role focuses on identifying, assessing and reducing cyber risk across complex enterprise environments, both external and internal.

Key responsibilities

• Continuously discover, assess and prioritise cyber exposures across infrastructure, cloud, applications, APIs and internet‑facing assets.
• Drive vulnerability and exposure management from assessment through remediation, collaborating with asset owners and engineering teams.
• Prioritise remediation using threat intelligence, exploitability, business impact and attack‑path analysis.
• Lead response to critical exposure events, large‑scale exploitation campaigns and emerging threats.
• Validate high‑risk findings and evaluate security controls through technical analysis.

Required profile

• Strong hands‑on experience in exposure, vulnerability or attack‑surface management within a large enterprise.
• Proven penetration‑testing background.
• Ability to prioritise risks based on exploitability, business context and threat intelligence rather than severity alone.
• Excellent analytical and investigative skills with clear communication to technical and non‑technical stakeholders.

Required skills

• Experience with platforms such as Tenable, Qualys, Rapid7, runZero or similar.
• Technical knowledge of infrastructure, cloud platforms, containers, APIs, identity services and modern DevSecOps environments.
• Hands‑on exposure‑management, vulnerability assessment and security‑scanning tools.