Find & Fix Vulnerability Engineer

Find & Fix / Vulnerability Engineer:

Active UK SC Clearance is essential

Hybrid – 1 day onsite per week from Stevenage or Filton

We are seeking a Vulnerability Management Engineer to take ownership of the full lifecycle of vulnerability management across both internal systems and client environments. This is a key role focused on improving security posture through effective identification, prioritisation, and remediation of vulnerabilities across cloud and on-prem environments.

The Role

You will be responsible for driving vulnerabilities through to full resolution—ensuring issues are not just identified but properly remediated, verified, and evidenced. Working closely with cross-functional teams, you will help balance risk reduction with operational stability while embedding secure practices at scale.

Key Responsibilities

Own the end-to-end vulnerability remediation lifecycle — from identification and validation through to remediation, verification, and closure

Remediate cloud security issues using tools such as:

Microsoft Defender for Cloud

Azure Advisor

AWS Inspector & Security Hub

Conduct on-prem vulnerability scanning and coordinate remediation activities

Translate security advisories into clear, actionable remediation tasks for engineering teams

Resolve OS and application vulnerabilities via patching, hardening, and control implementation

Collaborate with infrastructure, platform, and application teams to deploy fixes safely (including change control, testing, and rollback planning)

Maintain comprehensive documentation and audit evidence, including root cause analysis and validation

Produce regular reporting on vulnerability trends, SLA performance, and residual risk

Deliver remediation at scale using DevOps practices and Infrastructure as Code (Terraform)

Continuously improve vulnerability management processes and security baselines

Environment

Hybrid cloud: Azure & AWS

On-prem infrastructure environments

Security tooling and enterprise vulnerability management frameworks

Cross-functional collaboration across engineering, security, and operations teams

Key Requirements

Proven experience in vulnerability management and remediation

Strong exposure to Azure, AWS, and on-prem environments

Experience with vulnerability scanning and security tools

Understanding of security frameworks and best practices

DevOps mindset with experience in automation, IaC (Terraform), and scalable solutions

Strong stakeholder management and communication skills

Active UK SC Clearance is essential