Security Consultant - Vulnerability Management

Contract Duration: 3 Months (Potential for Extension)
Location: Remote
IR35: Outside IR35

We are seeking an experienced Security Engineer specialising in Vulnerability Management to enhance our security posture. You will be responsible for identifying, assessing, and mitigating vulnerabilities across our infrastructure, ensuring proactive risk management and compliance with security standards.

• Lead the vulnerability management program, including scanning, assessment, and remediation coordination.
• Deploy, configure, and manage vulnerability scanning tools (e.g., Qualys, Tenable, Rapid7).
• Analyze and prioritize vulnerabilities based on risk, impact, and exploitability.
• Work closely with IT and security teams to develop and implement remediation plans.
• Provide threat intelligence insights to enhance vulnerability detection and response.
• Ensure compliance with security standards such as ISO 27001, NIST, CIS, and GDPR.
• Generate reports and dashboards to communicate risk posture to stakeholders.

• Proven experience in Vulnerability Management, Threat Intelligence, and Risk Assessment.
• Strong understanding of network security, operating systems, cloud security, and DevSecOps.
• Hands-on experience with vulnerability scanning and risk assessment tools.
• Familiarity with patch management, secure coding practices, and remediation strategies.
• Strong analytical and problem-solving skills with a proactive security mindset.
• Relevant certifications (e.g., CISSP, CEH, GIAC GSEC, OSCP) are desirable.