Senior Vulnerability Manager — Hybrid Security Lead

UK Home Office; Salford; Hybrid; GBP 50,000 - 57,000; Full time

Benefits offered by this job

Civil Service Pension

Reward Scheme

25 Days Leave

Public Holidays + Privilege Day

60% Office Time

Job summary

The UK Home Office in Sheffield/Salford is seeking a Vulnerability Management specialist to identify and triage vulnerabilities across complex IT systems. You will work within Cyber Security to drive remediation and risk reduction.

This hybrid role requires coordinating with cross-functional teams, reporting to stakeholders, and maintaining continuous monitoring to safeguard critical government digital infrastructure.

Qualifications

• Lead vulnerability identification across systems, apps and networks.
• Assess severity of findings and prioritise remediation.
• Define remediation plans with cross-functional teams.
• Produce detailed vulnerability reports for stakeholders.
• Coordinate incident management with security resolver groups.

Responsibilities

• Vulnerability Identification – Lead the process of identifying and classifying vulnerabilities.
• Risk Assessment – Evaluate scan results and classify risk.
• Remediation Planning – Propose remediation plans with stakeholders.
• Reporting – Present vulnerability assessments and remediation progress.
• Incident Management – Triage and coordinate response with security teams.
• Tool management – Manage tooling and continuous monitoring.
• Vulnerability Management Service – Onboard assets to tooling per service policies.

Skills

Vulnerability Identification

Risk Assessment

Remediation Planning

Reporting

Incident Management

Tooling

Vulnerability Management Tooling

Tools

Vulnerability Scanning Tools

Job description

The UK Home Office in Sheffield/Salford is seeking a Vulnerability Management specialist to identify and triage vulnerabilities across complex IT systems. You will work within Cyber Security to drive remediation and risk reduction.

This hybrid role requires coordinating with cross-functional teams, reporting to stakeholders, and maintaining continuous monitoring to safeguard critical government digital infrastructure.