Senior Vulnerability Management Engineer: Remediation Lead

LSEG; United Kingdom; In loco; GBP 85.000 - 110.000; Tempo pieno

Vantaggi offerti da questo lavoro

Healthcare

Retirement planning

Paid volunteering days

Wellbeing initiatives

Descrizione del lavoro

London Stock Exchange Group (LSEG) is seeking a Senior Vulnerability Management Engineer to join our internal offensive security team, translating findings into actionable remediation guidance and coordinating with application and platform teams to implement secure fixes.

The ideal candidate has hands-on pentesting or application security experience, can remediate vulnerabilities, and coordinate multiple stakeholders to reduce risk at scale in a highly technical, delivery-focused role.

Competenze

• Hands-on experience in pentesting of web apps, APIs, and infrastructures.
• Proficiency with Burp Suite and scripting for automation.
• Experience automating pentesting tasks.
• Strong understanding of app security, networks, and OS.

Mansioni

• Analyze penetration test reports for impact and risk.
• Develop remediation guidance and blueprints for common vulnerabilities.
• Coordinate remediation across teams with clear ownership.
• Validate fixes by retesting and updating findings.
• Produce status reports and metrics to management.
• Lead root-cause analysis and long-term corrective actions.
• Improve testing methodologies and SDLC/DevSecOps integration.

Conoscenze

Penetration testing

Web apps testing

APIs testing

Cloud platforms

Burp Suite

CLI tools

Automation scripting

Strumenti

Burp Suite

Docker

Kubernetes

CLI tools

Descrizione del lavoro

London Stock Exchange Group (LSEG) is seeking a Senior Vulnerability Management Engineer to join our internal offensive security team, translating findings into actionable remediation guidance and coordinating with application and platform teams to implement secure fixes.

The ideal candidate has hands-on pentesting or application security experience, can remediate vulnerabilities, and coordinate multiple stakeholders to reduce risk at scale in a highly technical, delivery-focused role.