Threat and Vulnerability Management Engineer- 6 months | London

Threat and Vulnerability Management Engineer- 6 months | London

We're recruiting for a Threat and Vulnerability Management Engineer to lead the TVM function within an Infrastructure and Service Management group spanning EMEA Bank, International Securities, and 15+ countries for a leading global financial services organisation. This role owns TVM strategy and roadmap, leads a team of engineers, and serves as the central coordination point for vulnerability-related activity, governance, and audit readiness across the estate.

Key Responsibilities

• Design, develop, and manage the department's Threat and Vulnerability Management (TVM) strategy and roadmap, aligned with business requirements and IT risk appetite
• Define measurable, repeatable processes, reporting metrics, and Key Risk Indicators (KRIs); produce KPI/MI/risk data for senior management
• Lead a team of Threat and Vulnerability Engineers, overseeing deployment and automation of routine and out-of-band security patches
• Triage vulnerabilities into "Fix, Acknowledge, Investigate" categories using industry-aligned risk rating methodologies
• Manage and report on vulnerabilities via ServiceNow AVR/VR modules, integrating with dashboards and workflows
• Collaborate with application teams to ensure secure coding and timely, criticality-based remediation
• Prioritise weaknesses using manual and automated methods, including SAST/SCA tooling outputs

What You Will Ideally Bring

• Proven experience directly managing a team of Threat and Vulnerability Engineers
• Strong strategic thinking, able to co-develop and drive technical vision, strategy, and roadmap
• Experience within infrastructure environments and cloud platforms (AWS, Azure, Oracle)
• Proven capability building TVM programmes: vulnerability scanning, penetration testing, security awareness training
• Proficiency with vulnerability scanning tools (Tenable, Qualys, Rapid7, Veracode, JFrog Xray) and threat intelligence platforms
• Strong knowledge of Ivanti LANDesk, Qualys, Splunk, Windows Server/Desktop, RHEL/OEL Linux, PowerShell, and Python Scripting

Contract Details:

• Duration: 6months
• Rate: £450/day - Inside IR35
• Location: Central London - Onsite
• Start Date: ASAP