Vulnerability & Patch Management Engineer

Cyber Security training courses; United Kingdom; Hybrid; GBP 83,000 - 97,000; Full time

Job summary

Cyber Security training courses in the United Kingdom is seeking a Vulnerability & Patch Management Engineer on a 6‑month contract. The role is hybrid in the North West, with 1‑2 days onsite per week, and a daily rate of £450–£525.

You will own remediation and patching across OS, infrastructure and third‑party apps, working with infrastructure, cloud and application teams to resolve vulnerabilities efficiently and in line with security standards.

Qualifications

• Hands-on vulnerability remediation and patching across OS, infrastructure and third-party apps.
• Experience with endpoint management and patch automation.
• Strong scripting skills for automation (PowerShell).
• Proficiency with Intune and Windows server environments.
• Knowledge of Cyber Essentials/Plus requirements is a plus.

Responsibilities

• Own vulnerability remediation and patching across the technology estate.
• Identify, assess and prioritise vulnerabilities based on risk and business impact.
• Deploy OS and third‑party patches across environments.
• Develop, enhance and automate patch management processes.
• Package and deploy applications using endpoint management platforms.
• Troubleshoot failed deployments and implement remediation actions.
• Assess dependencies and potential service impacts before changes.
• Collaborate with infra, cloud and app teams to coordinate remediation.
• Verify that vulnerabilities have been remediated.
• Support improvements to processes aligned to Cyber Essentials Plus.

Skills

Vulnerability management

Patch management

Endpoint management

PowerShell scripting

Microsoft Intune

Windows server

Cyber Essentials

Tools

ManageEngine Patch Manager

Pulseway

SCCM / MECM

Job description

Contract: 6 Months

Location: North West (Hybrid, 1-2 days per week onsite preferred)

Rate: £450 - £525 per day

IR35: Inside IR35

Start Date: Ideally within 2 weeks

I'm working with a large organisation looking to engage an experienced Vulnerability & Patch Management Engineer on an initial 6-month contract.

This is a hands-on delivery role focused on reducing vulnerability exposure across the technology estate, improving patch management processes, and driving greater automation across remediation activities.

The Role

You’ll take ownership of vulnerability remediation and patching activities across operating systems, infrastructure, and third-party applications. Working closely with infrastructure, cloud, and application teams, you’ll help ensure vulnerabilities are resolved efficiently, safely, and in line with security and compliance requirements.

The successful contractor will also play a key role in developing more automated and scalable patch management processes, helping to strengthen the organisation’s overall security posture.

Key Responsibilities

• Manage vulnerability remediation and patching activities across the technology estate.
• Identify, assess and prioritise vulnerabilities based on risk, impact and business criticality.
• Deploy operating system and third-party application patches.
• Develop, enhance and automate patch management processes.
• Package and deploy applications using endpoint management platforms.
• Troubleshoot failed deployments and implement remediation actions where required.
• Assess system dependencies and potential service impacts before implementing changes.
• Collaborate with infrastructure, cloud and application teams to coordinate remediation activities.
• Validate and verify that vulnerabilities have been successfully remediated.
• Support improvements to processes and controls aligned to Cyber Essentials Plus requirements.
• Review and optimise existing patch management tooling and practices.
• Provide occasional infrastructure and network support where required.

Key Skills & Experience

• Vulnerability management and remediation
• Patch management across enterprise environments
• Endpoint and infrastructure management
• Application packaging and deployment
• Microsoft Intune
• PowerShell scripting and automation
• Windows server and desktop environments
• Vulnerability scanning and remediation tools
• Working collaboratively across infrastructure, cloud and application teams

Desirable Experience

• ManageEngine Patch Manager
• Pulseway
• SCCM / MECM
• Other enterprise patching and endpoint management tools
• Cyber Essentials and Cyber Essentials Plus programmes
• Network engineering and infrastructure troubleshooting
• Cloud migration environments

About You

You’ll be a hands-on engineer who enjoys solving problems and delivering outcomes rather than simply providing recommendations. You’ll be comfortable working independently, taking ownership of remediation activities, and engaging with multiple technical teams to drive issues through to resolution.

A strong understanding of system dependencies, change impact and operational risk will be essential, alongside excellent communication and stakeholder management skills.