Security Engineer
Role Overview
Hands-on Security Engineer role focused on vulnerability management, security automation and continuous improvement of security controls.
Manage vulnerabilities from identification and validation through risk-based prioritisation, remediation and verification.
Work across Security, Infrastructure, IT Operations and application teams, supporting SOC tooling and processes.
Key Skills for This Role
Full Job Posting
Location and contract
- Hybrid arrangement, primarily remote, with travel to First Intuition centres as required.
- Permanent, full-time contract.
Role overview
Hands-on Security Engineer role focused on vulnerability management, security automation and continuous improvement of security controls.
Manage vulnerabilities from identification and validation through risk-based prioritisation, remediation and verification.
Work across Security, Infrastructure, IT Operations and application teams, supporting SOC tooling and processes.
What you’ll do
- Operate and improve the vulnerability management lifecycle across endpoints, servers, networks, cloud services and applications.
- Run authenticated Qualys assessments, validate findings and reduce false positives.
- Prioritise using exploitability, threat intelligence, internet exposure, asset criticality, business impact and technical severity.
- Create remediation plans with owners, target dates and verification criteria; work with system and application owners on fixes.
- Develop automation for triage, remediation workflows, data enrichment and fix validation.
- Test and validate patches and configuration changes while balancing risk and operational impact.
- Improve SOC tooling, integrations, alert enrichment and automated response processes; assist with related investigations.
- Use threat intelligence, apply Zero Trust principles, and review network configurations and firewall rules.
- Track remediation to verified closure; produce security metrics and dashboards; maintain documentation, playbooks and automation code.
What you’ll bring
- Two to three years’ experience in cybersecurity, security engineering, infrastructure engineering, IT operations or a related technical role.
- Hands-on vulnerability scanning, assessment and remediation experience with Qualys or a comparable enterprise platform.
- Ability to validate and prioritise vulnerabilities using technical and business risk factors.
- Practical remediation experience across Windows, Linux, endpoints, networks, cloud services or applications.
- Security automation scripting capability; Python or PowerShell is strongly preferred.
- Understanding of CVEs, CVSS, known exploited vulnerabilities, threat intelligence, attack paths, hardening and compensating controls.
- Understanding of security operations, including monitoring, alert investigation and incident response.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at First Intuition
Skills Facilitator
London, GBR
Accountancy Tutor
Manchester, GBR
Client Support Co-ordinator - Internal Vacancy Only
London, GBR
Data and Compliance Administrator - Internal Vacancy Only
, GBR
Client Customer Service Advisor - (Client Partner)
Reading, GBR
Security Engineer
London, GBR
Accountancy Tutor
Newcastle, GBR
Tutor
London, GBR