Vulnerability Management Engineer (12 Month FTC)

innocent Alps GmbH; Greater London; On-site; GBP 111,000 - 166,000; Full time

Benefits offered by this job

Salary package

Private healthcare

Target-based bonus

Birthday day off

Free smoothies

Job summary

innocent is seeking a Vulnerability Management Engineer on a hands-on contract to implement Qualys across our technology estate. You’ll design scanning, prioritisation and remediation processes and roll out agents across servers, endpoints and cloud environments to improve asset visibility and reduce exposure to risks.

You will collaborate with security, infrastructure and cloud teams to embed vulnerability management into how we work, delivering dashboards and actionable reporting that informs

Qualifications

• Proven experience delivering vulnerability management initiatives that reduce risk.
• Experience deploying security tooling across complex environments.
• Solid understanding of vulnerability scoring and patch management.

Responsibilities

• Lead the implementation of Qualys across the business from setup to production.
• Build visibility across the technology estate and improve asset coverage.
• Design vulnerability scanning, prioritisation and remediation processes.
• Create dashboards and reporting to communicate risks clearly.
• Collaborate with infrastructure and cloud teams to reduce exposure to risks.

Tools

Qualys

VMDR

Patch Management

Security tooling

Windows

Linux

Azure

Risk-based prioritisation

Job description

Here at innocent, we’re on a mission to make it easier for everyone to get more fruit and veg into their bodies. We started back in 1999 and since then we’ve gone from selling a few smoothies at a music festival to becoming one of Europe’s biggest drinks companies with around 1,000 people (and the B Corp seal of approval).

It’s nice to be able to say things like that but we’re not patting ourselves on the back just yet. We want to show everyone that it’s possible to be a successful business while looking after people and the planet too, so we’re trying to get better in pretty much every way. And that’s where this job comes in.

Most people never think about vulnerability management when it's working well. That's kind of the point.

As innocent grows, so does the technology that helps us make, move and sell our drinks. We're looking for a Vulnerability Management Engineer to help us build the foundations that keep that technology secure, visible and well looked after.

This is a hands-on contract role with a clear goal: implement Qualys across our technology estate and turn vulnerability management into a capability that's embedded in how we work, not just another security tool sitting on a shelf.

You'll work across Security, Infrastructure and Cloud teams, helping us understand where our risks are, what matters most, and how we reduce them. By the end of the contract, you'll have left behind something lasting: a platform, a process, and a much clearer view of our technology landscape.

You'll be

• Leading the implementation of Qualys across the business, from setup through to production readiness.
• Building visibility across our technology estate so we know what's out there and what's happening.
• Rolling out agents across servers, endpoints and cloud environments to improve asset coverage and insight.
• Designing vulnerability scanning, prioritisation and remediation processes that teams can actually use.
• Creating dashboards and reporting that make security risks easier to understand and act on.
• Working with infrastructure and cloud teams to improve patching and reduce exposure to security risks.
• Connecting Qualys with other enterprise platforms, including service and asset management tools.
• Helping teams adopt consistent, practical vulnerability management practices.

You'll have

• Strong experience implementing and configuring Vulnerability Management Systems, including Vulnerability Management, Detection and Response (VMDR) and Patch Management capabilities.
• A track record of delivering vulnerability management initiatives that have driven meaningful risk reduction.
• Experience deploying security tooling across complex technology environments with lots of moving parts.
• A solid understanding of vulnerability scoring, risk-based prioritisation and patch management.
• Confidence working across Windows, Linux and Microsoft Azure environments.
• A pragmatic approach, strong stakeholder skills and a knack for turning complexity into clear action.

You'll get

• The chance to shape a vulnerability management capability from the ground up rather than inherit one.
• Ownership of a high-profile piece of work with visible outcomes and measurable impact.
• The opportunity to work closely with engineers, cloud specialists, infrastructure teams and security leaders.
• Exposure to a broad and varied technology estate spanning cloud and on-premise environments.
• The freedom to influence how vulnerability management is embedded across the business.
• The satisfaction of leaving things in better shape than you found them, with processes and tools that people genuinely want to use.

We want innocent to be a great place to work, so we do lots of stuff to make people feel at home and try to make sure everyone’s career is shaping up the way they want it to. There are plenty of opportunities to have a go at something new or take things further.

In exchange for helping us do business in the right way, you’ll get a solidrewards packagethat includes a salary (phew), private healthcare, a target-based bonus, and a bunch of other nice things like a day off on your birthday. And yes, you get free smoothies.

We also know that not all our drinkers come from the same background, or think the same – so why should we? At innocent, we want to be a great place to work where a diverse bunch of people from all backgrounds can turn up and thrive. When we hire, we want all the juice, bits, and pulp that make you who you are.

Even if you don’t think you can tick all the boxes, if the job sounds right for you, come and throw your hat in the ring.

Probably best to get your skates on though, as we might close this early if we get loads of applications.