Vulnerability & Patch Management Engineer

Key Responsibilities

• Own the vulnerability management lifecycle across the estate from scanning and detection through to remediation and closure.
• Coordinate and oversee patch management schedules across servers both on prem and cloud, endpoints, network devices, and 3rd party applications, working closely with infrastructure, application, and security teams.
• Identify, Triage and prioritise vulnerabilities based on severity, exploitability, and business risk (e.g. CVSS scoring, threat intelligence).
• Track remediation SLAs and escalate overdue or high risk vulnerabilities to relevant stakeholders and senior management.
• Maintain and report on vulnerability and patching KPIs/metrics, providing regular reporting to Service Delivery and Corporate Technology Leadership.
• Liaise with third party vendors and internal teams to ensure timely patch availability and application.
• Support audit and compliance requirements (e.g. ISO 27001, Cyber Essentials, PCI-DSS) by maintaining accurate vulnerability and patching records.
• Continuously improve vulnerability management processes, tooling, and automation to increase remediation speed and coverage.
• Act as the escalation point for critical/zero-day vulnerabilities requiring emergency patching.

Key Skills & Experience

• Proven experience in vulnerability management, patch management, or IT security operations.
• Strong understanding of vulnerability scanning tools (Qualys, Rapid7) and patch management platforms (Ninja One, Ivanti, Intune).
• Familiarity with risk frameworks and scoring methodologies (CVSS, NIST, etc.).
• Experience working within ITIL aligned service delivery environments, particularly change and incident management.
• Strong stakeholder management skills  able to work across infrastructure, cloud, infosec, and application teams.
• Ability to produce clear reporting and communicate risk to both technical and non-technical audiences.

Relevant certifications advantageous (e.g. CompTIA Security+, CISSP, ITIL Foundation).

Key Relationships

• Service Delivery Management
• Information Security / CISO function
• Infrastructure & Application teams
• Change & Release Management
• Third-party vendors/suppliers

Your Wellbeing - We take your health and well-being very seriously by providing a range of benefits to give you and your family peace of mind. These include:

• Market leading family friendly policies such as access to our Maternity, Adoption and Paternity policies from Day 1 of your employment
• Free access to Headspace, a mindfulness & meditation digital health app
• Free access to Peppy digital health app that offers personalised support through fertility treatment becoming a parent or menopause
• EAP (Employee Assistance Programme) - Offering you support on a wide range of subjects including financial concerns, mental wellbeing and more general queries around family, work, housing, and health
• Cycle to work scheme
• Discounts on gym membership
• Contributory pension scheme & death in service

Your Lifestyle - It’s important you strike the right balance between your work and personal life. We provide benefits to support you when at work and when you’re enjoying your leisure time.

• Minimum of 27 days holiday per year
• Option to buy or sell holiday days through our flexi-holiday scheme
• Discounts on gym membership nationwide
• Access to discounts on a range of high street and online brands
• Community support and charitable giving

Your Contribution - We’re focused on rewarding those that go the extra mile in helping us achieve our goals.

• Participation in our annual discretionary bonus scheme designed to reward your contribution to our success
• Proudly Shawbrook recognition scheme focused on recognising our role models and thanking our colleagues for a job well done