Job Title: IT Security Consultant - Vulnerability Management
£500 Per Day Outside IR35
2 Days Per Week on site Central London
Overview:
We are seeking an experienced IT Security Consultant with a strong focus on vulnerability management to join our team. This role requires a strategic and hands-on leader to drive the next phase of our vulnerability management practice. As a key member of the IT Security team, you will oversee and mature the vulnerability management lifecycle, ensuring the identification, prioritization, remediation, and reporting of security risks.
This role demands significant experience with vulnerability management tools, particularly Qualys, Sentinel, and Defender. You will be responsible for managing security assessments, scoring systems, and ensuring vulnerabilities are addressed with a robust and cohesive management framework. Your leadership will be crucial in guiding resolver teams through complex remediation processes while ensuring that security tools and systems align to create an integrated, holistic view of the organization's vulnerability landscape.
Required Experience & Expertise:
- Proven experience managing and running vulnerability management processes, particularly with experience leading vulnerability management in large-scale, multinational environments.
- Extensive hands-on experience with Qualys, Sentinel, Defender, and other vulnerability management tools, with a deep understanding of their configuration, capabilities, and integrations.
- In-depth knowledge of CVSS, CVE, vulnerability scoring systems, and managing the lifecycle of security assessments, threat identification, and mitigation.
- Strong experience in security assessments, particularly within complex enterprise environments, and the ability to apply risk-based prioritization frameworks to guide remediation efforts.
- Demonstrable experience with Penetration Testing results management, ensuring appropriate integration and reporting into the vulnerability management process.
- Expertise in Cloud security, including security practices for IaaS, PaaS, DaaS, SaaS, and cloud-based vulnerability scanning.
- Strong background in security risk oversight and applying technical security vulnerability remediation practices.
- Bachelor's degree in IT Security, Computer Science, or a related field, or equivalent experience.
- Recognized IT Security certifications (e.g., CISSP, CISM, or similar) are highly desirable.
- In-depth understanding of security standards such as ISO 27001/2 and their application to vulnerability management.
Eames Consulting is acting as an Employment Business in relation to this vacancy.