Vulnerability Manager - DV cleared

Position Overview

As the Vulnerability Manager, you will lead the organisation’s vulnerability management and cyber risk reduction activities across NSOIT(D) products and services.

You’ll own the vulnerability management framework, coordinate discovery and remediation efforts, and provide vital incident support for significant cyber security events.

Your expertise will help strengthen cybersecurity postures within a demanding MOD environment, ensuring compliance and high standards of security.

Key Responsibilities

• Vulnerability Management & Cyber Risk Reduction: Take ownership of the vulnerability management framework, policies, and standards.
• Coordinate discovery, assessment, and prioritisation activities, optimising enterprise tools like Clearswift, Tanium, Trend DSM, and Elastic.
• Produce dashboards, risk reports, and briefings for senior cybersecurity governance forums.
• Incident Management & Major Incident Support: Support management and coordination during cybersecurity incidents.
• Lead technical assessments of exploitation, perform root cause analysis, and support post-incident reviews with a focus on remediation actions.
• Security Monitoring & Continuous Improvement: Review security events related to vulnerability exploits, correlate threat intelligence data, and support enhancements to SIEM, SOAR, and EDR systems.
• Contribute to cybersecurity metrics and improvement initiatives.

Ideal Candidate Profile

• Must hold a current DV security clearance.
• Extensive experience operating enterprise vulnerability management systems, including Clearswift, Tanium, Trend DSM, or similar tools.
• Solid understanding of CVSS, cyber risk management, and remediation governance within MOD or similar environments.
• Experience supporting cyber incident management, especially in MOD or defence contexts.
• Strong skills in vulnerability assessment and remediation tracking, with experience producing executive dashboards and reports.

Desirable Qualifications

• Certifications such as CompTIA Security+ or CySA+
• ISC2 CISSP or ISACA CISM
• CREST CPSA or CRT
• Specialist SANS courses (504, 503, 511) are advantageous

Additional Details

• Start Date: 1 December 2026
• End Date: 31 March 2028
• Day Rate: Negotiable (inside IR35)
• Location: Corsham (hybrid working, 3 days onsite)
• Working hours: 8 hours per day