Threat and Vulnerability Management Consultant

Barclay Simpson; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

Barclay Simpson is seeking a Threat and Vulnerability Management Consultant for a regulator. The role focuses on assessing current VM tooling, telemetry, and reporting capabilities, while identifying opportunities to enhance automation, exposure visibility, KEV intelligence integration, and executive-level assurance reporting.

The successful candidate will help modernise VM processes through AI-driven capabilities and best-practice security operations, working with cross-functional teams to

Qualifications

• Proven experience as a Threat Exposure or VM Analyst/SME.
• Strong technical understanding of end-to-end Vulnerability Management processes.
• Hands-on experience across Azure and AWS cloud environments.
• Experience with VM tooling such as Qualys, Microsoft Defender, CrowdStrike, and cloud-native platforms.
• Broad understanding of AI technologies and their application within cybersecurity and VM processes.
• Ability to work autonomously and proactively drive initiatives forward.
• Strong stakeholder engagement and communication skills, with experience presenting findings to both technical and senior audiences.

Responsibilities

• Review and assess current Vulnerability Management processes, tooling, and telemetry across enterprise environments.
• Engage with Security Operations teams and Product Groups to identify process improvements and automation opportunities.
• Evaluate and enhance existing tooling including Qualys, Microsoft Defender, CrowdStrike, and cloud-native security capabilities.
• Support the testing, implementation, and optimisation of AI capabilities within the VM lifecycle.
• Improve threat exposure visibility, KEV intelligence integration, and continuous assurance reporting.
• Produce clear reporting and recommendations for both technical teams and executive stakeholders.
• Contribute to the development of scalable, proactive VM capabilities aligned to evolving threat landscapes and offensive AI trends.

Skills

Threat Exposure

Vulnerability Management

Azure

AWS

Qualys

Microsoft Defender

CrowdStrike

AI in security

Automation

Stakeholder engagement

Tools

Qualys

Microsoft Defender

CrowdStrike

Azure

AWS

Job description

Threat and Vulnerability Management Consultant required for a regulator. This role will focus on assessing current VM tooling, telemetry, and reporting capabilities, while identifying opportunities to enhance automation, exposure visibility, KEV intelligence integration, and executive-level assurance reporting. The successful candidate will play a key role in modernising VM processes through the adoption of AI-driven capabilities and best-practice security operations.

Key Responsibilities

• Review and assess current Vulnerability Management processes, tooling, and telemetry across enterprise environments
• Engage with Security Operations teams and Product Groups to identify process improvements and automation opportunities
• Evaluate and enhance existing tooling including Qualys, Microsoft Defender, CrowdStrike, and cloud-native security capabilities
• Support the testing, implementation, and optimisation of AI capabilities within the VM lifecycle
• Improve threat exposure visibility, KEV intelligence integration, and continuous assurance reporting
• Produce clear reporting and recommendations for both technical teams and executive stakeholders
• Contribute to the development of scalable, proactive VM capabilities aligned to evolving threat landscapes and offensive AI trends

Required Skills & Experience

• Proven experience as a Threat Exposure or Vulnerability Management Analyst/SME
• Strong technical understanding of end-to-end Vulnerability Management processes
• Hands-on experience across Azure and AWS cloud environments
• Experience with VM and security tooling such as Qualys, Microsoft Defender, CrowdStrike, and cloud-native platforms
• Broad understanding of AI technologies and their application within cybersecurity and VM processes
• Ability to work autonomously and proactively drive initiatives forward
• Strong stakeholder engagement and communication skills, with experience presenting findings to both technical and senior audiences

Desirable Experience

• Experience implementing automation within security operations or VM programmes
• Knowledge of KEV intelligence and threat prioritisation frameworks
• Exposure to continuous assurance or executive cyber reporting initiatives