Vulnerability Lifecycle Lead: Security Risk & Remediation

Barclays; Greater London; Hybrid; GBP 65,000 - 100,000; Full time

Benefits offered by this job

Hybrid work model

London office

Job summary

Barclays is seeking a Vulnerability Management Analyst based in London to own the end-to-end vulnerability lifecycle across the estate, from scanning through remediation tracking and reporting. You will provide security input during change/design, influencing stakeholders to enable secure business evolution.

The role involves coordinating with several engineering teams to ensure timely remediation, supporting PCI DSS requirements, and delivering risk-based prioritisation for fixes.

Qualifications

• Experience in vulnerability management, security operations, or related security discipline.
• Familiarity with multiple scanning tools across infrastructure, applications, and cloud/container domains.
• Ability to contextualise vulnerabilities beyond CVSS scores for risk-based prioritisation.
• Knowledge of PCI DSS vulnerability requirements and risk acceptance processes.
• Strong data analysis and dashboard creation skills.
• Experience with ticketing/workflow tools (e.g., Jira, ServiceNow).

Responsibilities

• Own end-to-end vulnerability lifecycle across the estate, from scanning to remediation tracking.
• Provide security input during change/design, engaging with stakeholders to influence security strategy.
• Deliver regular vulnerability trend reporting to risk and compliance forums and board-level updates.
• Coordinate with multiple engineering teams to ensure timely remediation of identified vulnerabilities.
• Support CISO/CIO and product teams with security reviews for third-party products and services.

Skills

Vulnerability management

Security operations

Threat modeling

Risk assessment

Stakeholder management

DevSecOps

SLA management

Communication

Tools

Tenable

Qualys

Rapid7

SAST/DAST/SCA tools (Semgrep, Snyk, Checkmarx, Burp Suite)

Cloud/container scanning (Wiz, Prisma Cloud, Trivy)

Jira

ServiceNow

Job description

Barclays is seeking a Vulnerability Management Analyst based in London to own the end-to-end vulnerability lifecycle across the estate, from scanning through remediation tracking and reporting. You will provide security input during change/design, influencing stakeholders to enable secure business evolution.

The role involves coordinating with several engineering teams to ensure timely remediation, supporting PCI DSS requirements, and delivering risk-based prioritisation for fixes.