Senior Vulnerability Manager

ESO UK Limited; Belfast; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading tech company in Belfast seeks a Senior Vulnerability Manager to enhance cybersecurity. The role involves prioritizing vulnerabilities, managing KPIs, and collaborating with IT teams. Ideal candidates have 3+ years in IT or security, excellent communication skills, and experience with vulnerability management tools. This position supports critical applications that protect communities and save lives, offering a dynamic work environment with comprehensive benefits.

Benefits

Life insurance (4× base salary)

Private medical insurance

Flexible hybrid working policy

Enhanced parental leave

Qualifications

• 3+ years of experience in IT or security, including vulnerability management.
• Great communication skills to relate with technical and non-technical stakeholders.
• Proven ability to coordinate and influence large groups.

Responsibilities

• Prioritise vulnerabilities with a risk-based approach.
• Manage KPIs and KRIs related to scanning and vulnerabilities.
• Review and manage vulnerability and patching exception requests.

Skills

Communication skills

Analytical skills

Planning and project management

Methodical troubleshooting

Education

3+ years in IT or security

Experience with vulnerability management

Tools

Tenable

Qualys

Rapid7

Microsoft native tools

Job description

How You'll Support Our Mission

ESO's teams are growing, and our software is in demand globally by firefighters, paramedics, hospitals and governments.

To meet this demand, we are building an industry‑leading cyber security team in Belfast to protect our customers and data from a variety of fast‑moving and constantly evolving threats.

We are looking for a Senior Vulnerability Manager to join our Belfast and US teams, working alongside our IT, Fire, Hospital and EMS Engineering teams to secure mission‑critical applications that help our customers protect their communities and save lives.

You will lead in identifying, evaluating and prioritising vulnerabilities across a diverse range of technologies and contexts, including software development, operating system, enterprise application vulnerabilities, penetration test findings and automated scan results from in‑house tooling.

What You'll Be Doing – day to day

• Prioritise vulnerabilities across the organisation with a risk‑based approach and utilize vendor and community disclosures, 0day threats intelligence and credible information sources.
• Manage and measure key performance indicators (KPIs) and key risk indicators (KRIs) related to scan coverage, vulnerability and exception counts across all platforms.
• Identify and resolve gaps related to scanning, remediation and reporting issues.
• Review and manage vulnerability and patching exception requests from a risk perspective and advise application and asset owners.
• Coordinate, scope and manage penetration tests of key systems globally.
• Coordinate time‑sensitive vulnerability response to remediate the highest criticality vulnerabilities across systems.
• Lead campaigns to systematically and strategically reduce business risk by closing open vulnerabilities with application, asset owners and support groups.
• Produce informative, easy‑to‑understand dashboards and metrics.
• Help ESO colleagues get answers to security questions and be a key part of our cyber security team, with tangible impact on the security of people and systems.
• Respond to security and compliance issues generated via analysis or automated tools.
• Work collaboratively cross‑team to impart expertise across the organisation.
• Be detail‑oriented, working shoulder‑to‑shoulder with technology teams.

Who You Are – essential qualifications

• 3+ years of experience in IT or security, including vulnerability management, IT risk assessment, assurance or control testing processes.
• Great communication skills to communicate with technical and non‑technical stakeholders.
• Proven ability to coordinate and influence large groups, with strong planning and project management skills.
• Strong analytical skills, attention to detail and methodical troubleshooting of complex issues.

Your experience should include

• Working with hardware, software and vendor vulnerabilities.
• Establishing policies, procedures and SLAs for vulnerability management and remediation.
• Working with toolsets for vulnerability management (Tenable, Qualys, Rapid7, Microsoft native), patch management (Microsoft native, Jamf, NinjaOne) and cloud‑specific (Defender product suite, CrowdStrike).
• Passion for what you do and understanding how your work impacts ESO's success.

Desired experience

• Enterprise vulnerability management including patch management and remediation activities in a large company.
• Experience in the implementation, reporting and management of DAST and SAST tooling in a large enterprise environment.
• Experience with CMDB / asset management tooling and implementations.
• Experience with code repositories (GitHub, BitBucket) and integration into CI/CD pipelines.

Benefits & Perks

• Life insurance (4× base salary)
• Income protection insurance
• A generous pension contribution
• Private medical insurance including optical and dental
• A health cash plan
• Modern City Centre office and flexible hybrid working policy
• AwardCo Recognition Programme
• Enhanced paternity and maternity leave pay (12 weeks full pay after 6 months’ service)
• Enhanced short and long‑term sick pay
• 25 days holiday, increasing year on year until you reach 5 years of service + 14 additional days

About ESO

ESO is a fast‑paced, growing data, technology and research company passionate about improving community health and safety through the power of data. We pioneer innovative, user‑friendly software to meet the changing needs of today’s EMS agencies, fire departments and hospitals. We are small enough to be nimble and fun, but big enough to be a great place to work. We serve thousands of customers from offices across the US, Canada and Northern Ireland.

Are you ready to make a difference?

ESO is committed to creating a diverse and inclusive work environment and is proud to be an equal opportunity employer. We invite you to consider opportunities at ESO regardless of gender, gender identity, gender reassignment, age, religious or similar philosophical belief, race, national origin, political opinion, sexual orientation, disability, marital or civil partnership status or other non‑merit factor. Our Equal Opportunity Statement of Policy for Northern Ireland is available on request.

Applicant Privacy Notice – please review the privacy policy which details how your data is collected, used and protected.