Senior Vulnerability Engineer — Drive Secure Fixes

London Stock Exchange Group; Greater London; Remote; GBP 90,000 - 120,000; Full time

Benefits offered by this job

healthcare

retirement planning

paid volunteering days

wellbeing initiatives

Job summary

London Stock Exchange Group is seeking a Senior Vulnerability Management Engineer to join our internal offensive security team, driving closure of penetration testing findings. You will translate test results into remediation guidance and work with application and platform teams to implement secure fixes.

The role requires hands-on pentesting or application security experience, remediation skills, and the ability to coordinate multiple teams to reduce risk at scale.

Qualifications

• Proven hands-on experience in penetration testing of Web Applications, APIs, Thick Client and common infrastructures.
• Proficiency with Burp Suite and common command-line tools; ability to write custom scripts.
• Experience in automating pentesting tasks.
• Solid understanding of application security, network protocols, and operating systems.

Responsibilities

• Analyze and review penetration test reports to understand technical impact, exploitability, and business risk.
• Develop, document and maintain remediation guidance and blue-prints for common vulnerability types.
• Provide consultation to application and platform teams on secure design and remediation approaches.
• Coordinate remediation activities across multiple teams with clear ownership and timelines.
• Validate fixes by retesting vulnerabilities and updating findings through closure.
• Manage and track the remediation backlog, SLAs, aging findings, and critical issues.
• Produce and maintain documentation on remediation processes, workflows, and controls for audit and compliance.
• Prepare and deliver regular status reports and metrics on remediation progress and risk reduction.
• Perform root cause analysis for recurring or systemic issues and implement long-term actions.
• Contribute to continuous improvement of the pentest-to-remediation lifecycle and SDLC/DevSecOps pipelines.

Skills

Penetration testing

Web Applications

APIs

Cloud platforms

Docker/Kubernetes

Burp Suite

Scripting

Secure coding

English communication

Threat Modelling

Enterprise security

Tools

Burp Suite

Docker

Kubernetes

CLI tools

Job description

London Stock Exchange Group is seeking a Senior Vulnerability Management Engineer to join our internal offensive security team, driving closure of penetration testing findings. You will translate test results into remediation guidance and work with application and platform teams to implement secure fixes.

The role requires hands-on pentesting or application security experience, remediation skills, and the ability to coordinate multiple teams to reduce risk at scale.