Vulnerability & Patch Management Engineer

Key Responsibilities

• Own the vulnerability management lifecycle across the estate from scanning and detection through to remediation and closure.
• Coordinate and oversee patch management schedules across servers both on prem and cloud endpoints network devices and 3rd party applications working closely with infrastructure application and security teams.
• Identify Triage and prioritise vulnerabilities based on severity exploitability and business risk (e.g. CVSS scoring threat intelligence).
• Track remediation SLAs and escalate overdue or high risk vulnerabilities to relevant stakeholders and senior management.
• Maintain and report on vulnerability and patching KPIs/metrics providing regular reporting to Service Delivery and Corporate Technology Leadership.
• Liaise with third party vendors and internal teams to ensure timely patch availability and application.
• Support audit and compliance requirements (e.g. ISO 27001 Cyber Essentials PCI-DSS) by maintaining accurate vulnerability and patching records.
• Continuously improve vulnerability management processes tooling and automation to increase remediation speed and coverage.
• Act as the escalation point for critical/zero-day vulnerabilities requiring emergency patching.

Qualifications :

Key Skills & Experience

• Proven experience in vulnerability management patch management or IT security operations.
• Strong understanding of vulnerability scanning tools (Qualys Rapid7) and patch management platforms (Ninja One Ivanti Intune).
• Familiarity with risk frameworks and scoring methodologies (CVSS NIST etc.).
• Experience working within ITIL aligned service delivery environments particularly change and incident management.
• Strong stakeholder management skills  able to work across infrastructure cloud infosec and application teams.
• Ability to produce clear reporting and communicate risk to both technical and non-technical audiences.
• Relevant certifications advantageous (e.g. CompTIA Security CISSP ITIL Foundation).

Key Relationships

• Service Delivery Management
• Information Security / CISO function
• Infrastructure & Application teams
• Change & Release Management
• Third-party vendors/suppliers

Additional Information :

Your Wellbeing - We take your health and well-being very seriously by providing a range of benefits to give you and your family peace of mind. These include:

• Market leading family friendly policies such as access to our Maternity Adoption and Paternity policies from Day 1 of your employment
• Free access to Headspace a mindfulness & meditation digital health app
• Free access to Peppy digital health app that offers personalised support through fertility treatment becoming a parent or menopause
• EAP (Employee Assistance Programme) - Offering you support on a wide range of subjects including financial concerns mental wellbeing and more general queries around family work housing and health
• Cycle to work scheme
• Discounts on gym membership
• Contributory pension scheme & death in service

Your Lifestyle - Its important you strike the right balance between your work and personal life. We provide benefits to support you when at work and when youre enjoying your leisure time.

• Minimum of 27 days holiday per year
• Option to buy or sell holiday days through our flexi-holiday scheme
• Discounts on gym membership nationwide
• Access to discounts on a range of high street and online brands
• Community support and charitable giving

Your Contribution - Were focused on rewarding those that go the extra mile in helping us achieve our goals.

• Participation in our annual discretionary bonus scheme designed to reward your contribution to our success
• Proudly Shawbrook recognition scheme focused on recognising our role models and thanking our colleagues for a job well done

Remote Work :

No

Employment Type :

Full-time