Find & Fix Vulnerability Engineer

Find & Fix / Vulnerability Engineer:Active UK SC Clearance is essentialHybrid - 1 day onsite per week from Stevenage or FiltonWe are seeking a Vulnerability Management Engineer to take ownership of the full lifecycle of vulnerability management across both internal systems and client environments. This is a key role focused on improving security posture through effective identification, prioritisation, and remediation of vulnerabilities across cloud and on-prem environments.The RoleYou will be responsible for driving vulnerabilities through to full resolution-ensuring issues are not just identified but properly remediated, verified, and evidenced. Working closely with cross-functional teams, you will help balance risk reduction with operational stability while embedding secure practices at scale.Key Responsibilities

• Own the end-to-end vulnerability remediation lifecycle - from identification and validation through to remediation, verification, and closure
• Remediate cloud security issues using tools such as:
• Microsoft Defender for Cloud
• Azure Advisor
• AWS Inspector & Security Hub
• Conduct on-prem vulnerability scanning and coordinate remediation activities
• Translate security advisories into clear, actionable remediation tasks for engineering teams
• Resolve OS and application vulnerabilities via patching, hardening, and control implementation
• Collaborate with infrastructure, platform, and application teams to deploy fixes safely (including change control, testing, and rollback planning)
• Maintain comprehensive documentation and audit evidence, including root cause analysis and validation
• Produce regular reporting on vulnerability trends, SLA performance, and residual risk
• Deliver remediation at scale using DevOps practices and Infrastructure as Code (Terraform)
• Continuously improve vulnerability management processes and security baselines

Environment

• Hybrid cloud: Azure & AWS
• On-prem infrastructure environments
• Security tooling and enterprise vulnerability management frameworks
• Cross-functional collaboration across engineering, security, and operations teams

Key Requirements

• Proven experience in vulnerability management and remediation
• Strong exposure to Azure, AWS, and on-prem environments
• Experience with vulnerability scanning and security tools
• Understanding of security frameworks and best practices
• DevOps mindset with experience in automation, IaC (Terraform), and scalable solutions
• Strong stakeholder management and communication skills
• Active UK SC Clearance is essential