Senior Vulnerability Manager

UK Home Office; Sheffield; Hybrid; GBP 34,440 - 57,400; Full time

Benefits offered by this job

Civil Service Pension

25 days annual leave

Public holidays + 1 privilege day

Hybrid/office‑home working

Job summary

Home Office is seeking a Vulnerability Management specialist to join Cyber Security. The role focuses on identifying vulnerabilities, assessing risk, and guiding remediation across a large, complex infrastructure.

You will join a team of cyber professionals dedicated to protecting critical digital assets and continuous development. The position emphasizes collaboration with multiple departments, effective reporting to stakeholders, and a proactive, service‑miented approach to vulnerability

Qualifications

• Experience leading vulnerability identification and risk assessment.
• Ability to translate technical risk into actionable remediation plans.
• Experience using vulnerability management tooling and reporting to stakeholders.

Responsibilities

• Vulnerability Identification – lead the process of identifying vulnerabilities in systems, apps and networks.
• Risk Assessment – evaluate scan results and classify risk to assets and operations.
• Remediation Planning – collaborate across departments to recommend remediation steps and configuration changes.
• Reporting – produce detailed reports on assessments and remediation efforts for stakeholders.
• Incident Management – coordinate with security teams to manage prioritised vulnerabilities.
• Tool management – implement and monitor vulnerability assessment tooling for large infrastructures.
• Vulnerability Management Service – onboard assets to tooling in line with service policies.

Skills

Vulnerability management

Risk assessment

Remediation planning

Reporting

Incident management

Stakeholder communication

Security tooling

Tools

Vulnerability scanners

Job description

Location: Sheffield | Salford (hybrid with 60% office attendance)

Salary: £49,850 plus skills allowance of up to £7,550 pending assessment

Advert close: 6th August 2026

Job summary

Cyber Security at the Home Office is at the front end of protecting one of the largest government departments and safeguarding the critical digital infrastructure. Vulnerability Management is a critical service within this operation, delivering a managed approach to proactively identifying vulnerabilities and developing effective remediation strategies.

The role of Vulnerability Management is to triage vulnerabilities by relevance and criticality to the organisation. Vulnerability Management then identify mitigations for those vulnerabilities and advise on implementing them.

You’ll join an expert team of cyber professionals, committed to fighting cyber-attack across a complex network of systems. You’ll be aided by a supportive organisational culture, and a commitment to further your continuous development.

Main Responsibilities

Your main day to day responsibilities will be:

• Vulnerability Identification – Lead the process of identifying and classifying technical vulnerabilities in systems, applications and networks to identify security weaknesses and potential risks. Utilise vulnerability management tools/technologies to identify, assess and report on vulnerabilities.
• Risk Assessment – Analyse and evaluate the results of vulnerability scans to determine the severity and potential impact of identified vulnerabilities, categorising them based on risk to assets and operations.
• Remediation Planning – Collaborate with multiple departments, technical teams and senior stakeholders to recommend remediation plans and complex configuration changes in support of vulnerability remediation.
• Reporting – Create and present detailed reports on vulnerability assessments, remediation efforts, and overall vulnerability management performance for stakeholders, management and technical teams.
• Incident Management – Work closely with other security teams and technical resolver groups to ensure comprehensive approach to managing prioritised vulnerabilities.
• Tool management - Knowledge and understanding of approaches and tooling used to perform vulnerability assessments against large and complex infrastructure. Implementing continuous monitoring processes to identify new vulnerabilities and assess the effectiveness of remediation efforts over time.
• Vulnerability Management Service - Onboard assets into the appropriate vulnerability management tooling in line with the Threat and Vulnerability Management Service. Ensure that all vulnerability management activities align with service polices, standards and procedures.

You’ll have a demonstrable passion for Vulnerability Management, with the following skills or strong experience in:

• Driving improvements in vulnerability management processes and practices, working with security and technology teams to deliver technical and operational change.
• Conducting vulnerability assessments using recognised frameworks, understanding severity and contextualising risk within an organisational environment to support effective prioritisation.
• Implementing and operating technical vulnerability management tooling, ensuring effective deployment, maintenance and use of data to identify, analyse and communicate security risk.
• Managing security risk, working collaboratively with stakeholders to drive remediation and achieving good security outcomes aligned to organisational prioritises and risk appetite.
• Communicating complex technical vulnerability risk clearly and effectively, producing high quality written and verbal reports tailored to technical specialists and non-technical senior stakeholders.
• Coordinating effective incident response activities in fast-paced environments, engaging with cross-functional teams to triage, contain and remediate security incidents.

Why work for us...

Find out more information at: Benefits - Home Office Careers, but some of the primary ones are:

• A Civil Service Pension with employer contribution rates of at least 28.97%.
• In-year reward scheme for one-off or sustained exceptional personal or team achievements.
• 25 days annual leave on appointment, rising with service.
• 8 days of public holidays, plus 1 additional privilege day.
• Where business needs allow, some roles may be suitable for a combination of office and home-based working. This is a non-contractual arrangement where all employees will be expected to spend a minimum of 60% of their working time in an office.

Sign-up on our website to receive emails with information about careers at the Home Office.

Click on apply now to be redirected to the full advert and application portal