Lead Enterprise Vulnerability & Patch Engineer

Francisco Partners; Belfast City District; On-site; GBP 70,000 - 110,000; Full time

Job summary

Black Duck Software, Inc. seeks a Senior Vulnerability Management Engineer to own the enterprise program across cloud, endpoint, and application surfaces. You will drive risk-based identification, automated remediation, and verified closure in partnership with IT, Cloud, and Product teams.

Leading scanning architectures and data pipelines, you will govern policies, SLAs, and metrics that reduce exposure and MTTR while aligning with security standards and compliance requirements.

Qualifications

• 5–7+ years in vulnerability management or closely related cybersecurity/IT engineering roles.
• Hands-on experience with enterprise vulnerability scanning technologies (infrastructure, cloud, container, application).
• Experience with ITSM/CMDB integrations and automated patching.

Responsibilities

• Govern end-to-end vulnerability management lifecycle—intake, scanning, triage, risk scoring, remediation orchestration, verification, and reporting.
• Apply CVSS, EPSS, and KEV signals for risk-based prioritization; codify triage logic into policy and dashboards.
• Enforce remediation SLAs; manage risk acceptances and time-bound exceptions; report aging trends to leadership.
• Drive asset coverage across servers, endpoints, cloud services, and applications; close inventory gaps with asset owners.
• Design and maintain enterprise automated patching across server, endpoint, and cloud workloads; align with change management.
• Mentor other team members; lead cross-team workstreams and promote engineering best practices.

Skills

Vulnerability management

Cybersecurity

IT engineering

Tools

Vulnerability scanners

ITSM

CMDB

Job description

Black Duck Software, Inc. seeks a Senior Vulnerability Management Engineer to own the enterprise program across cloud, endpoint, and application surfaces. You will drive risk-based identification, automated remediation, and verified closure in partnership with IT, Cloud, and Product teams.

Leading scanning architectures and data pipelines, you will govern policies, SLAs, and metrics that reduce exposure and MTTR while aligning with security standards and compliance requirements.