Network Vulnerability Management Lead

Job Title: Network Vulnerability Management Lead

CACI Network Services:

From our headquarters in London, we're busy empowering organisations to make bold, strategic moves with the power of data and technology. Founded in 1975, our operations take place from multiple offices across the UK, Europe and India with over 1600 Full-time employees and an annual turnover of £179m.

Our expertise spans industries, from retail and education to public sector and transport - delivering intelligent solutions that drive progress and create measurable impact. Whether it's business intelligence, customer marketing, cloud infrastructure, cybersecurity, critical national infrastructure or data management, our approach is never one-size-fits-all.

We don't just deliver solutions; we build for the tomorrow's world, all while fostering a culture that allows employees to be their authentic selves and succeed in their careers.

CACI Network Services is a rapidly expanding specialist IT and Networks consultancy offering a wide variety of opportunities to work within challenging and exciting environments with our major clients in Global Media, Banking, Government, Telecoms & Utilities.

Job Title: Network Vulnerability Management Lead

Location: Hybrid / Flexible

We are seeking an experienced Network Vulnerability Management Lead to own and drive our end-to-end vulnerability management programme across the enterprise network estate. In this pivotal role, you will be responsible for identifying, assessing, prioritising, and certifying the remediation of security vulnerabilities. You will work closely with cross-functional technical teams to ensure risk-based remediation is executed swiftly against strict SLAs, maintaining an audit-ready security posture.

• Own the end-to-end vulnerability management process across the network estate—from initial identification and assessment through remediation, validation, and formal closure.
• Drive vulnerability remediation against tight SLA and compliance targets, ensuring risks are resolved within agreed timescales.
• Track, report, and present remediation progress to leadership, escalating overdue actions and emerging risks when necessary.
• Serve as the primary subject matter expert and point of contact for all network infrastructure vulnerability management activities.

• Partner closely with Cyber Hygiene, Security Operations, Engineering, and Infrastructure teams to review findings and agree on optimal remediation paths.
• Analyse and challenge vulnerability findings, effectively identifying false positives and validating technical accuracy before engineering work begins.
• Translate technical risks into business impacts, clearly communicating priorities and status updates to technical and non-technical stakeholders alike.

• Review scan data from enterprise security tools (e.g., Tenable, Nessus, Tanium), vendor advisories, and industry security bulletins.
• Assess vulnerabilities for exploitability, business exposure, operational risk, and regulatory compliance requirements.
• Prioritise remediation efforts based on CVSS scoring, risk-based methodology, and organisational security policies.
• Formulate robust temporary mitigation strategies and workaround plans when immediate patching or resolution is not feasible.
• Oversee the complete remediation lifecycle from initial discovery to engineering implementation.
• Perform hands-on remediation across network infrastructure technologies when required.
• Draft clear, detailed remediation requirements and technical work packages for delivery teams.
• Coordinate with Network Engineering to execute fixes in full compliance with change management and operational governance standards.
• Review and validate implementation plans to ensure technical soundness prior to deployment in production environments.

• Perform rigorous post-remediation validation via rescanning, manual testing, and tool verification.
• Formally certify that remediation efforts have successfully eliminated identified vulnerabilities…