Senior Vulnerability Management Engineer: Automation & Risk

HCLTech; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Vacation per year

Term life insurance

Business travel insurance

Job summary

HCLTech is seeking a Senior Vulnerability Management Engineer in London with 3–6 years of VM/information security experience. You will own the end-to-end VM programme across endpoints, servers, network devices, and apps, tuning scanners, prioritising risks, integrating with patch management and SOC functions, and driving automation across the stack.

Responsibilities include defining VM SLA, leading risk acceptance, and delivering monthly dashboards for CISO leadership.

Qualifications

• 3–6 years in vulnerability management / information security.
• Experience with enterprise vulnerability management tools and security operations.
• Ability to translate vulnerabilities into remediation actions for multiple teams.

Responsibilities

• Own and operate the enterprise vulnerability management programme across all domains.
• Design and maintain scan policies and schedules in VM tools.
• Perform risk-based vulnerability prioritisation with CVSS, asset criticality and threat intel.
• Translate findings into remediation tasks for patch management teams.
• Define and enforce VM SLA policies and incident communication.
• Lead risk acceptance processes with compensating controls and sign-off.
• Integrate VM tooling with SIEM, ITSM, and CMDB for automation.
• Automate reporting and remediation tracking via Python and REST APIs.
• Monitor threat intel feeds and coordinate emergency patching for zero-days.
• Oversee web app VM management and cloud vulnerability posture.
• Produce monthly VM dashboards for leadership review.

Skills

Risk communication

Programme management

Analytical mindset

Collaborative

Threat intelligence awareness

Documentation

Tools

Qualys VMDR

Tenable Security Centre/InsightVM

Rapid7 InsightVM

Burp Suite Pro

OWASP ZAP

HCL AppScan

Burp/ZAAP Web App Scanning

AWS Inspector

Microsoft Defender for Cloud

Prisma Cloud

Snyk

Trivy

ServiceNow VR module

Splunk

Microsoft Sentinel

ServiceNow CMDB

Python scripting

Job description

HCLTech is seeking a Senior Vulnerability Management Engineer in London with 3–6 years of VM/information security experience. You will own the end-to-end VM programme across endpoints, servers, network devices, and apps, tuning scanners, prioritising risks, integrating with patch management and SOC functions, and driving automation across the stack.

Responsibilities include defining VM SLA, leading risk acceptance, and delivering monthly dashboards for CISO leadership.