At a Glance
- Tasks: Investigate and fix complex endpoint vulnerabilities using cutting-edge tools.
- Company: Join Coforge, a forward-thinking tech company in London.
- Benefits: Enjoy hybrid work, competitive salary, and opportunities for professional growth.
- Other info: Dynamic team environment with excellent career advancement potential.
- Why this job: Make a real difference by enhancing security and protecting users.
- Qualifications: Experience with vulnerability management, PowerShell, and Microsoft SCCM/MECM required.
The predicted salary is between 51750 - 63250 £ per year.
Work-mode : Hybrid - 3 days weekly from office
Skills : Vulnerability, Qualys, Power Shell and Microsoft SCCM/MECM
We at Coforge are looking for Vulnerability Engineer in London, UK.
- Scope & Description of Required Work
- Own the technical investigation and remediation of complex endpoint vulnerabilities across the workstation estate.
- Analyse and prioritise findings from Qualys and other approved security platforms, considering technical impact, business risk and remediation feasibility.
- Perform structured root cause analysis for vulnerabilities, failed deployments, recurring non-compliance and endpoint health issues.
- Design, test and deliver sustainable engineering fixes that remove underlying causes and reduce repeated manual remediation.
- Create, test, peer review and deploy enterprise application packages, security updates and configuration changes through Microsoft SCCM/MECM and related endpoint tooling.
- Develop and maintain Power Shell automation for detection, remediation, validation, reporting and operational health checks.
- Troubleshoot SCCM/MECM client health, software distribution, content delivery, deployment status and patch installation failures.
- Use controlled pilot groups, technical validation and rollback planning to reduce deployment risk.
- Work with the End User Platform and Security teams to agree remediation strategy, technical ownership and delivery priorities.
- Recommend improvements to packaging standards, deployment controls, vulnerability workflows, reporting and endpoint engineering processes.
- Produce clear technical documentation, remediation records, runbooks, knowledge articles and audit evidence.
- Provide accurate progress, risk and dependency updates for vulnerability, compliance and service reporting.
- Support remediation across physical workstations, laptops and Citrix virtual desktop environments.
- Apply ITIL best practice across Incident, Request, Problem and Change management activities.
- Perform system administration and advanced troubleshooting within Windows, Active Directory, Group Policy and Microsoft 365 environments.
- Ensure solutions comply with TMHCC security policies, technical standards, controls and agreed service levels.
- Out of Scope
- Activities not explicitly listed in the Scope & Description of Required Work.
- Changes to production services that have not completed the required TMHCC change control and approval process.
- Ownership of security policy, risk acceptance decisions or business risk sign-off.
- Work on unsupported platforms or systems outside the agreed endpoint estate unless separately authorised.
- Deliverables & Delivery Milestones
- Prioritised vulnerability remediation backlog based on approved security data and agreed delivery priorities.
- Tested and peer-reviewed SCCM/MECM packages, security updates and configuration changes.
- Production-ready Power Shell detection, remediation and validation scripts.
- Root cause analysis records for recurring vulnerabilities, failed deployments and endpoint health issues.
- Pilot, validation and rollback evidence for controlled deployments.
- Runbooks, knowledge articles, remediation records and audit evidence.
- Regular progress, risk, dependency and outcome reporting.
- Delivery milestones and target dates to be agreed during onboarding and maintained through the applicable planning and change processes.
- Acceptance Criteria
- Agreed vulnerability remediation activities are completed in line with approved priorities, change controls and service levels.
- Delivered packages, scripts and configuration changes pass agreed testing, peer review, pilot and technical validation requirements before production deployment.
- Remediation includes clear evidence of outcome, validation results and rollback arrangements where applicable.
- Root causes and recurring failure patterns are documented, with permanent engineering actions or technical debt items recorded where required.
- Technical documentation, runbooks, knowledge articles, remediation records and audit evidence are complete, accurate and stored in the agreed TMHCC location.
- Progress, risks, dependencies and blockers are reported accurately through the agreed governance process.
- Solutions comply with TMHCC security policies, technical standards and operational processes.
- Deliverables are accepted by the TMHCC Hiring Manager or nominated technical owner.
- #J-18808-Ljbffr
Vulnerability Engineer employer: Coforge
Coforge is an excellent employer that fosters a collaborative and innovative work culture, particularly for those in the tech space. Located in London, employees benefit from a vibrant city atmosphere, ample professional growth opportunities, and a commitment to cutting-edge technology, ensuring that team members are at the forefront of industry advancements. With a focus on employee development and a supportive environment, Coforge stands out as a rewarding place to build a meaningful career in data architecture.
StudySmarter Expert Advice🤫
We think this is how you could land Vulnerability Engineer
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Coforge, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Coforge
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Coforge. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Vulnerability Engineer
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Coforge insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Coforge that you’re committed to staying ahead in the game.
How to prepare for a job interview at Coforge
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Coforge to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Coforge.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
