Hybrid Vulnerability Management Engineer & Security Automation

First Intuition; Greater London; Hybrid; GBP 55,000 - 90,000; Full time

Benefits offered by this job

25 days annual leave

FI Days

Hybrid working available

Private Medical Insurance

Pension

Job summary

First Intuition is seeking a hands-on Security Engineer with a focus on vulnerability management to reduce cyber risk across our rapidly expanding organisation. You will own the end-to-end lifecycle from identification to verification, prioritisation and remediation, while supporting security operations with automation and tooling improvements.

The role requires turning security findings into measurable risk reductions, developing automation in Python, and collaborating with Security,

Qualifications

• Two to three years’ experience in cyber security or related technical role.
• Hands-on experience with vulnerability scanning, assessment and remediation using Qualys or a comparable enterprise platform.
• Demonstrable ability to analyse, validate and prioritise vulnerabilities using technical and business risk factors.
• Practical experience driving remediation across Windows, Linux, endpoints, networks, cloud services or applications.
• Scripting capability for security automation. Either Python or PowerShell is strongly preferred.
• An understanding of CVEs, CVSS, known exploited vulnerabilities, threat intelligence, attack paths, security hardening and compensating controls.
• An understanding of security operations, including security monitoring, alert investigation and incident response processes.
• A practical understanding of Zero Trust security principles.
• The ability to manage multiple remediation activities and maintain momentum from identification through to verified closure.
• Strong written and verbal communication skills, with the ability to explain technical risks and remediation requirements to technical and non-technical stakeholders.

Responsibilities

• Operate and continuously improve the end-to-end vulnerability management lifecycle across endpoints, servers, networks, cloud services and applications.
• Run and review authenticated vulnerability assessments using Qualys, validate findings and reduce false positives.
• Prioritise vulnerabilities using exploitability, threat intelligence, internet exposure, asset criticality, business impact and technical severity rather than relying on CVSS alone.
• Translate findings into clear remediation plans with defined owners, target dates and verification criteria.
• Work with system and application owners to remediate vulnerabilities through patching, configuration changes, hardening, upgrades or compensating controls.
• Develop security automation, preferably using Python, to improve vulnerability triage, remediation workflows, data enrichment and fix validation.
• Test, coordinate and validate security patches and configuration changes while balancing security risk and operational impact.
• Support the SOC from an engineering perspective by improving security tooling, integrations, alert enrichment and automated response processes.
• Assist with security investigations where vulnerabilities, insecure configurations or missing patches may have contributed to an event.
• Use threat intelligence to provide context for vulnerability prioritisation, security alerts and emerging threats.
• Apply Zero Trust principles when implementing or improving endpoint, identity, network and cloud security controls.
• Review network-device configurations and firewall rule sets using Nipper Studio or comparable security auditing tools.
• Track vulnerabilities, exceptions and remediation progress through to verified closure.
• Produce security metrics and dashboards covering exposure, vulnerability ageing, remediation performance and residual risk.
• Maintain technical documentation, remediation playbooks and security automation code.
• Carry out tasks as delegated by the Information Systems Security Manager from time to time.

Skills

Vulnerability management

Python scripting

Threat intelligence

Security engineering

Zero Trust

Communication

Tools

Qualys

Nipper Studio

Defender for Endpoint

Azure/AWS security tools

Job description

First Intuition is seeking a hands-on Security Engineer with a focus on vulnerability management to reduce cyber risk across our rapidly expanding organisation. You will own the end-to-end lifecycle from identification to verification, prioritisation and remediation, while supporting security operations with automation and tooling improvements.

The role requires turning security findings into measurable risk reductions, developing automation in Python, and collaborating with Security,