Overview
In this contract you will own vulnerability identification, prioritisation and remediation across a large IT estate. You will work hands-on to use Rapid7/InsightVM, interpret findings and craft remediation plans for infrastructure engineers across multiple sites. Your mission is to strengthen Cyber Essentials Plus readiness and drive timely closure of vulnerabilities. You will collaborate with engineering teams and continuously improve remediation processes, reporting and governance.
Pay / Benefits
- remote work
- outside IR35
- 6-week contract
- contract role
- potential travel between regions
- competitive rate
Responsibilities
- Run, analyse and report on vulnerability scans using Rapid7
- Identify, validate and prioritise vulnerabilities by risk/severity
- Produce actionable vulnerability and remediation reports
- Map vulnerabilities to devices, apps and sites
- Develop and maintain a structured remediation process
- Create remediation plans and technical actions for engineering teams
- Coordinate remediation across multiple sites/endpoints
- Track remediation through to closure and re-scan to validate fixes
- Identify issues such as vulnerable/unsupported software, outdated versions, missing patches and insecure configurations
- Support Cyber Essentials Plus audit readiness and remediation
- Improve vulnerability management processes and reporting
Key requirements
- Strong vulnerability management and remediation experience
- Hands-on Rapid7 / InsightVM experience
- Vulnerability scanning, assessment and remediation knowledge
- Experience producing and interpreting Rapid7 reports
- Understanding of endpoint/software vulnerabilities and patching
- Experience creating remediation processes and technical remediation plans
- Experience working with infrastructure/engineering teams
- Knowledge of Cyber Essentials / Cyber Essentials Plus
- Strong analytical and problem-solving skills
- Hands-on, doer mindset rather than solely governance-focused
- analytical thinking
- problem-solving
- collaboration with engineering teams
- Rapid7 / InsightVM
- vulnerability scanning and remediation
- reporting and metrics
Vulnerability Management Lead employer: VIQU Limited
Join a leading Investment Banking firm in London, where you will thrive in a dynamic hybrid work environment that fosters innovation and collaboration. With a strong emphasis on employee growth, you will have access to continuous learning opportunities and the chance to work on complex projects that make a real impact in the financial sector. Our inclusive work culture values your contributions and encourages you to take ownership of your projects, ensuring a rewarding and meaningful career path.
