This job is no longer live. The employer has closed or delisted this posting, so new applications are unlikely to be considered. See live jobs at Next or browse all sponsored jobs.
Senior Vulnerability Management Engineer
NextPontefract, England, United Kingdom
Not disclosed
Salary
Not disclosed by employer
£55,000
Going rate
Skilled Worker going rate
This role may qualify for a Skilled Worker visa
SOC 1121 is an eligible occupation, but we classified this role with low confidence (47% match). If the code is right — and Next is a licensed sponsor — it should qualify, but double-check the occupation eligibility rules against the actual role.
About the role
Job Description
The role:
Working in the Information Security team you will focus on Vulnerability and Threat Management across the Next technology estate, with a particular focus on our Warehouse environment and the technology utilised within it to help maintain an awareness of new and emerging security threats and trends.
You will be responsible for identifying, assessing, validating and communicating new vulnerabilities across the other technical teams, ensuring the vulnerability management process is followed. Where required you will work with other IT teams to provide guidance and recommend mitigation strategies for vulnerabilities.
As a Senior Vulnerability Management Engineer a knowledge of the MITRE Attack Framework would be advantageous. You will help manage and configure our vulnerability scanning and reporting tools as well as helping administer Next’s Bug Bounty programme.
Where required you will create reporting to summarise findings and recommendations for a variety of audiences. The role also requires you to take a lead in reviewing incoming threat intelligence in order to assess its relevance and severity in context to our business, where appropriate you will provide reports on threats of interest to senior stakeholders and work with the relevant teams to proactively assess, test and mitigate any risk.
You will also be expected to maintain an awareness of the changing threat landscape and industry standards. Proactively work with Incident Response and Engineering to identify tactics and techniques used by threats actors and opportunities to improve the security of our environment. Propose and support implementing suitable countermeasures for threats identified through intelligence, testing and objective validation.
As a Senior Vulnerability Management Engineer you will also help mentor more inexperienced members of the team. You will also take a lead role in coordinating and overseeing efforts to mitigate significant threats or vulnerabilities identified by the team.
The role involves participating in a shift rota.
A monthly visit to the Enderby Head Office in Leicester is required, with additional visits scheduled as needed by the business or management.
What you'll take on:
The role:
Working in the Information Security team you will focus on Vulnerability and Threat Management across the Next technology estate, with a particular focus on our Warehouse environment and the technology utilised within it to help maintain an awareness of new and emerging security threats and trends.
You will be responsible for identifying, assessing, validating and communicating new vulnerabilities across the other technical teams, ensuring the vulnerability management process is followed. Where required you will work with other IT teams to provide guidance and recommend mitigation strategies for vulnerabilities.
As a Senior Vulnerability Management Engineer a knowledge of the MITRE Attack Framework would be advantageous. You will help manage and configure our vulnerability scanning and reporting tools as well as helping administer Next’s Bug Bounty programme.
Where required you will create reporting to summarise findings and recommendations for a variety of audiences. The role also requires you to take a lead in reviewing incoming threat intelligence in order to assess its relevance and severity in context to our business, where appropriate you will provide reports on threats of interest to senior stakeholders and work with the relevant teams to proactively assess, test and mitigate any risk.
You will also be expected to maintain an awareness of the changing threat landscape and industry standards. Proactively work with Incident Response and Engineering to identify tactics and techniques used by threats actors and opportunities to improve the security of our environment. Propose and support implementing suitable countermeasures for threats identified through intelligence, testing and objective validation.
As a Senior Vulnerability Management Engineer you will also help mentor more inexperienced members of the team. You will also take a lead role in coordinating and overseeing efforts to mitigate significant threats or vulnerabilities identified by the team.
The role involves participating in a shift rota.
A monthly visit to the Enderby Head Office in Leicester is required, with additional visits scheduled as needed by the business or management.
What you'll take on:
- Manage and maintain Vulnerability scanning and risk reporting tools.
- Take a lead role in planning in the estimation, scoping and delivery of key projects, ensuring progress is clearly communicated.
- Complete relevant security assessments, including debriefing key stakeholders on any
- Identify, execute and support requirements as part of RvB exercises.
- Ensure all relevant vulnerabilities are correctly triaged, risk assessed, logged and assigned to remediation teams.
- Support remediation teams with remediation strategies.
- Assist Incident Response team with the investigation and resolution of Security Incidents
- Create and maintain operation procedures, configuration and technical documentation to a
- Manage and maintain metrics and reporting to demonstrate the effectiveness of our
- Subject matter expert for the Vulnerability Management team and helps coordinate efforts
- Maintain an awareness of new and emerging security threats and trends.
- Test or validate threat intelligence findings against our people, processes and technologies.
- Review threat intelligence and advise on recommended mitigation strategies where
- Act as a mentor for more inexperienced members of the Vulnerability Management team.
- Experience managing and maintaining a Vulnerability Management tool.
- In depth understanding of Information Security including malware, emerging threats, attacks and vulnerability management.
- Proven Information Technology experience with an excellent understanding of
- Windows Server and/or Linux experience.
- Ability to remain calm under pressure and clearly communicate to all levels of management.
- Excellent attention to detail.
- Adheres to and promotes high standards.
- Understanding of vulnerability and threat assessment frameworks, such as: CVSS, CVE, CWE,OWASP, MITRE.
- Operational Technology (OT) management experience in vulnerability scanning.
- Competent at keeping up to date on CTI (Cyber Threat Intelligence)
- Experience with security or compliance standards such as PCI-DSS or ISO27001.
- Understanding and experience of working for a Retail company.
- Foundational understanding of Cloud based infrastructure
- Relevant industry recognised security qualification
- Understanding of DevOps architecture and code scanning.
- Offensive Security experience
- Experience of SCADA (Supervisory Control and Data Acquisition) systems monitor, Programmable logic controller PLC and control warehouse equipment
- Experience of managing a TIP (Threat Intelligence Platforms)
- Experience of Custom AI usage
You know Next, but did you know we’re a FTSE-100 retail company employing over 44,000 people across the Next group. We’re the UK’s 2nd largest fashion retailer and for Kidswear we’re the market leader. At the last count we have over 450 stores, plus the Next Online and it’s now possible to buy on-line from over 80 countries around the world! So we’ve gone global!
About The Team
- 25% off most NEXT, MADE*, Lipsy*, Gap* and Victoria's Secret* products (*when purchased through NEXT)
- Company performance based bonus
- Sharesave scheme
- On-site Nursery available; OFSTED outstanding in all areas
- 10% off most partner brands & up to 15% off Branded Beauty
- Early VIP access to sale stock
- Access to fantastic discounts at our Staff Shops
- Restaurants with great food at amazing prices
- Access a digital GP and other free health and wellbeing services
- Free on-site parking
- Financial Wellbeing - Save, track and enhance your financial wellbeing
- Apprenticeship - Grow and develop on the job whilst gaining a qualification
- Direct to Work - Discount online and instore, collect your items the next day for free from your place of work or local store
- Support Networks - Access to Network Groups to empower and celebrate each other
- Wellhub - Discounted flexible monthly gym memberships, with apps, PT sessions and more
We aim to support all candidates during the application process and are happy to provide workplace adjustments when necessary. Should you need support with your application due to a disability or long-term condition, feel free to get in touch with us by email headoffice_careers@next.co.uk (please include 'Workplace Adjustments' in the subject line), or call us on 0116 284 2486 and leave a voicemail.
This description is the source posting as it read when we added it. We are not affiliated with Next, so check their own site for the current details.
Where this offer sits in the market
SOC 1121 · UK · ONS ASHE 2025 · ~406k in sampleP25 £43kP75 £85k
£31kmedian £59kgoing rate £55k£122k
Similar sponsored roles
See all jobs
About sponsorship for this role
Does this job guarantee visa sponsorship?
Not necessarily. Next holds a sponsor licence, but sponsorship for a specific hire is always the employer's decision. Be upfront in your application that you'll require it.
What salary is needed for this role to be eligible?
The offer must clear both the general threshold and the SOC 1121 going rate of £55,000. New-entrant and shortage discounts can lower it.