Manager, Security Threat, Vulnerability and Testing (m/f/d)

SEFE Marketing & Trading Ltd; Greater London; Hybrid; GBP 95,000 - 130,000; Full time

Job summary

SEFE Marketing & Trading Ltd in London is seeking a Senior Manager, Security Threat, Vulnerability & Testing to lead enterprise threat intelligence, vulnerability management, and security testing across cyber, OT, physical, and people security domains.

You will translate complex findings into clear, risk-based insights for senior stakeholders, drive threat modelling and remediation lifecycles, and collaborate with Security Operations, GRC and business teams to strengthen resilience and reduce

Qualifications

• Proven experience leading threat intelligence, vulnerability management, or security assurance in large enterprises.
• Ability to translate technical findings into risk-based insights for executives.
• Strong stakeholder management across security, technology, operations, and business units.

Responsibilities

• Own and evolve threat intelligence capability across cyber, OT, physical, and people security domains.
• Lead threat modelling framework, identify attack paths, and deliver enterprise-wide visibility of vulnerabilities and threats.
• Drive end-to-end vulnerability management lifecycle: discovery, risk-based prioritisation, remediation tracking, governance.
• Deliver and oversee security testing programme: pentesting, scenario exercises, control assessments.
• Collaborate with Security Operations, GRC, and Business Resilience to inform detection, response, and risk management.

Skills

Threat intelligence

Vulnerability management

Security testing

Threat hunting

Stakeholder management

Job description

IN SHORT

As Senior Manager, Security Threat, Vulnerability & Testing, you will lead SEFE’s enterprise threat intelligence, vulnerability management, security testing, and proactive threat detection capabilities. Working across cyber, operational technology (OT), physical security, and people security domains, you will ensure emerging threats and vulnerabilities are identified early, prioritised appropriately, and addressed in line with business risk, resilience, and regulatory requirements.

What Will You Do

• Own and evolve SEFE’s enterprise threat intelligence capability, providing insight into emerging threats, threat actors, attack techniques, and risks across cyber, OT, physical, and people security domains.
• Lead the organisation’s threat modelling framework, partnering with domain teams to identify attack paths, assess risks, and deliver enterprise-wide visibility of systemic vulnerabilities and emerging threats.
• Drive the end-to-end vulnerability management lifecycle, ensuring effective discovery, risk-based prioritisation, remediation tracking, and governance across applications, infrastructure, cloud, endpoints, and OT environments.
• Deliver and oversee the security testing programme, including penetration testing, scenario-based exercises, control assurance activities, and cross-domain security assessments that strengthen organisational resilience.
• Collaborate closely with Security Operations, GRC, Business Resilience, and other security functions to ensure threat intelligence, security testing outcomes, and vulnerability insights directly inform detection, response, and risk management activities.
• Lead continuous improvement initiatives that strengthen security maturity, enhance assurance capabilities, improve threat visibility, and reduce organisational exposure to both emerging and persistent threats.

What Will You Bring

• Proven experience leading threat intelligence, vulnerability management, threat hunting, security testing, or security assurance functions within complex enterprise environments.
• Strong understanding of threat actors, attack methodologies, and security risks across cyber, operational technology (OT), physical security, and insider threat domains.
• Experience developing and operating enterprise security programmes, including threat modelling, vulnerability management, penetration testing, and proactive threat detection capabilities.
• Ability to translate complex technical findings into clear, risk-based insights that support business decision-making and executive-level understanding.
• Strong stakeholder management and collaboration skills, with experience working across security, technology, operational, and business teams as well as managing external security partners and service providers.
• Analytical, pragmatic, and outcome-focused approach, with the credibility to influence senior stakeholders and drive security improvements through partnership and leadership.

You don’t need to meet every requirement. If the role excites you, we’d love to hear from you.

About Us

SEFE is an international energy company anchored in Europe, delivering energy solutions that ensure reliable and affordable supply. Our activities span the entire energy value chain – from origination and trading to sales, transport and storage. With decades of trading expertise and a growing LNG portfolio, SEFE is one of Europe’s leading suppliers to industrial customers, providing more than 200 TWh of gas and power each year. We supply over 50,000 clients, from small businesses to municipalities and multinational organisations. By investing in clean energies, we support our customers on their decarbonisation journey and contribute to the energy transition. SEFE employs over 2,000 people worldwide and is owned by the Federal Government of Germany.

Securing energy – now and for the future.

Our Benefits

We’re committed to creating an inclusive environment that embraces diversity and fosters the development of knowledge, skills, and experience. Whatever your role, you’ll find an open, welcoming atmosphere that empowers you, and recognises your contribution.

This is a contract role, initially for 6 months with the potential to extend. Based in our London office, conveniently located close to travel networks we offer the opportunity to follow a hybrid working model.

Join SEFE and help us secure gas supply across Europe and shape a better, more sustainable tomorrow.