Hybrid Vulnerability Risk Engineer

Met Office

Devon and Torbay

Hybrid

GBP 44,503 - 54,392

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Civil Service pension

Market supplement £2,200 per year

Annual leave 27.5–32.5 days + BH

Job summary

The Met Office is seeking a Vulnerability Management Engineer to protect organisational systems, data and services by identifying, evaluating, and driving remediation of vulnerabilities. You will work within Cyber Security Operations, coordinating with IT Operations, SOC and development teams and configuring enterprise vulnerability scanners across networks, servers, endpoints, apps, and cloud.

The role emphasizes risk-based prioritisation, cross-team collaboration, and clear guidance on

Qualifications

Demonstrable commitment to continuous learning and professional development in cybersecurity.
Experience with vulnerability management across infrastructure, cloud, and security platforms.
Ability to communicate risk to technical and non-technical stakeholders.
Understand vulnerability remediation lifecycle and prioritisation.

Responsibilities

Plan, configure, and execute vulnerability scans across enterprise environments including cloud and on-premise systems.
Analyse vulnerabilities to determine severity, exploitability, and business impact using risk-based methodologies.
Coordinate remediation activity across IT and development teams to ensure vulnerabilities are resolved within agreed SLAs.
Produce clear reports, dashboards, and metrics for technical and senior stakeholders.
Act as a subject matter expert for vulnerability management and risk treatment.
Support response to critical vulnerabilities and zero-day threats in collaboration with security operations.
Drive continuous improvement of vulnerability management processes, tooling, and documentation.