Cybersecurity Engineer - Vulnerability & Exposure Management

About the role

Jacobs is hiring a Cybersecurity Engineer for its Cyber Security team. You will help reduce cyber risk by driving vulnerability remediation, strengthening endpoint security controls and improving visibility of security exposure across a global technology estate. The role works across infrastructure, cloud, desktop engineering and security teams.

Key responsibilities

• Lead vulnerability and exposure management across enterprise environments, identifying, prioritising and remediating security risks
• Work with technology teams to drive remediation programmes and reduce organisational cyber risk
• Support endpoint security capabilities including application control, allowlisting, privilege management and endpoint hardening
• Use data, reporting and dashboards to show cyber exposure, remediation performance and security outcomes
• Assess emerging vulnerabilities and threats and give risk-based recommendations to stakeholders
• Act as a trusted security partner across infrastructure, cloud, application and operational teams

Required profile

• Experience in cybersecurity, vulnerability management, security engineering or endpoint security
• Strong understanding of risk-based vulnerability management and remediation prioritisation
• Experience with vulnerability management platforms such as Tenable, Qualys or Rapid7
• Experience with ServiceNow Vulnerability Response or similar remediation workflows
• Knowledge of endpoint security technologies and strong stakeholder engagement
• Ability to turn technical security risks into business outcomes

Required skills

• Application control, allowlisting, privilege management and endpoint hardening
• Zero Trust principles, least-privilege administration and endpoint security architecture
• Vulnerability assessment, exposure management, patch and remediation management
• Microsoft Windows Server and Windows 11, Linux, Active Directory and Entra ID
• Microsoft Intune, Microsoft Defender for Endpoint and cloud platforms (Azure, AWS or Google Cloud)
• ServiceNow Vulnerability Response; scripting with PowerShell and Python; API integrations and dashboard development

What we offer

• Flexible working with remote and hybrid options and no mandated office attendance
• A global network of expertise and a culture built on safety, integrity, inclusion and belonging
• Well-being benefits, paid parental leave and fertility, adoption and surrogacy assistance