Senior Vulnerability Management Consultant

Senior Vulnerability Management Consultant - Contract

London (Hybrid) 6-Month Contract Inside IR35

We’re supporting a global enterprise organisation in the search for an experienced Senior Vulnerability Management Consultant to help strengthen and mature its infrastructure security and vulnerability management capabilities.

This is a high-profile role where you’ll take ownership of vulnerability management activities across a large-scale technology estate, working closely with infrastructure, engineering, and security teams to drive risk reduction, improve patch compliance, and enhance overall security posture.

If you have a strong background in vulnerability management, infrastructure security, and enterprise-scale remediation programmes, we’d like to hear from you.

You will be responsible for managing the end-to-end vulnerability lifecycle across a diverse infrastructure environment, ensuring vulnerabilities are identified, prioritised, remediated, and reported effectively. Working across Windows, Linux/UNIX, storage, and virtual desktop environments, you’ll play a key role in driving remediation efforts, improving operational processes, and helping the organisation maintain a robust security posture.

• Manage the end-to-end vulnerability lifecycle, including identification, triage, prioritisation, remediation, validation, and reporting.
• Conduct risk-based assessments using CVSS scoring, exploitability data, and business impact considerations.
• Translate vulnerability scan outputs into clear and actionable remediation plans.
• Drive remediation activities and ensure adherence to agreed SLAs for critical and high-risk vulnerabilities.

• Oversee vulnerability remediation and patch management across:
  • Windows Server environments
  • UNIX/Linux platforms (including RHEL and Oracle Enterprise Linux)
  • Enterprise storage technologies
  • PVDI and virtual desktop environments
• Support the implementation and maintenance of secure baselines and hardened system configurations.
• Ensure infrastructure platforms remain aligned with security standards and best practices.

• Act as a trusted advisor on vulnerability-related risks and remediation strategies.
• Partner with engineering and infrastructure teams to drive timely resolution of security issues.
• Review and challenge risk exceptions and acceptance requests where appropriate.
• Communicate security risks and remediation progress to key stakeholders.

• Identify opportunities to automate vulnerability management, patching, and reporting processes.
• Utilise tools such as Ansible, SCCM, Power Shell, and Shell scripting to improve efficiency and consistency.
• Drive process improvements that enhance security outcomes and operational effectiveness.

• Produce and maintain KPI/KRI reporting covering vulnerability trends, remediation performance, and SLA compliance.
• Support audit activities, security reviews, and compliance initiatives.
• Provide visibility of infrastructure security posture and ongoing risk reduction efforts.

• Support the response to security incidents and emerging threats.
• Coordinate rapid remediation and mitigation activities for critical vulnerabilities and zero-day threats.

• Strong experience managing enterprise vulnerability management programmes.
• Solid understanding of Windows, UNIX/Linux, and enterprise infrastructure environments.
• Hands‑on experience with vulnerability scanning platforms such as Qualys, Nessus, or Rapid
  7.
• Strong knowledge of patch management and remediation processes.
• Experience with automation tools including Ansible, SCCM, Power Shell, and Shell scripting.
• Proven ability to influence technical teams and drive remediation activity across complex environments.
• Experience working within regulated or audit-driven organisations.
• Strong communication and stakeholder management skills.

• Measurable reduction in critical and high‑risk vulnerabilities.
• Improved patch compliance and remediation SLA performance.
• Increased automation and operational efficiency.
• Successful audit and compliance outcomes.
• Enhanced visibility and control of infrastructure security risk.