Senior Threat, Vulnerability & Testing Leader (Hybrid, 6m)

SEFE Marketing & Trading Ltd; Greater London; Hybrid; GBP 95,000 - 130,000; Full time

Job summary

SEFE Marketing & Trading Ltd in London is seeking a Senior Manager, Security Threat, Vulnerability & Testing to lead enterprise threat intelligence, vulnerability management, and security testing across cyber, OT, physical, and people security domains.

You will translate complex findings into clear, risk-based insights for senior stakeholders, drive threat modelling and remediation lifecycles, and collaborate with Security Operations, GRC and business teams to strengthen resilience and reduce

Qualifications

• Proven experience leading threat intelligence, vulnerability management, or security assurance in large enterprises.
• Ability to translate technical findings into risk-based insights for executives.
• Strong stakeholder management across security, technology, operations, and business units.

Responsibilities

• Own and evolve threat intelligence capability across cyber, OT, physical, and people security domains.
• Lead threat modelling framework, identify attack paths, and deliver enterprise-wide visibility of vulnerabilities and threats.
• Drive end-to-end vulnerability management lifecycle: discovery, risk-based prioritisation, remediation tracking, governance.
• Deliver and oversee security testing programme: pentesting, scenario exercises, control assessments.
• Collaborate with Security Operations, GRC, and Business Resilience to inform detection, response, and risk management.

Skills

Threat intelligence

Vulnerability management

Security testing

Threat hunting

Stakeholder management

Job description

SEFE Marketing & Trading Ltd in London is seeking a Senior Manager, Security Threat, Vulnerability & Testing to lead enterprise threat intelligence, vulnerability management, and security testing across cyber, OT, physical, and people security domains.

You will translate complex findings into clear, risk-based insights for senior stakeholders, drive threat modelling and remediation lifecycles, and collaborate with Security Operations, GRC and business teams to strengthen resilience and reduce