Job Description

Posted 1 week ago

Vulnerability Management Specialist – Cloud (Contract)

We are recruiting for an experienced Vulnerability Management Specialist to support a large enterprise cloud environment on a contract basis. This role is hands-on and delivery-focused, working across AWS and GCP to identify, prioritise and reduce security risk at scale.

You will be responsible for end-to-end vulnerability management, from scanning and analysis through to remediation support, reporting and continuous improvement. This is not a pure SOC, GRC or penetration testing role – it requires practical ownership of cloud vulnerability operations.

Key Responsibilities

* Perform cloud vulnerability scanning and analysis across AWS and Google Cloud (GCP)

* Triage and prioritise vulnerabilities based on risk and business impact

* Work with engineering, infrastructure and security teams to support remediation

* Use tools such as Rapid7 (InsightVM / CloudSec) or equivalent (Nessus, Qualys)

* Contribute to vulnerability metrics, dashboards and reporting

* Support incident response activities related to vulnerabilities

* Automate repetitive tasks using Python or PowerShell

* Contribute to process, tooling and standards improvement (ISO 27001, NIST, CIS)

Required Experience

* Proven experience in vulnerability management or cloud security

* Strong hands-on exposure to AWS and/or GCP

* Experience with vulnerability scanning tools (Rapid7 preferred)

* Understanding of cloud security risks, misconfigurations and remediation

* Ability to work with multiple stakeholders in a large environment

Nice to Have

* Scripting and automation experience

* Exposure to enterprise-scale cloud platforms

* Security frameworks and standards knowledge

Hybrid working. Immediate or short notice starters preferred.

Apply now to discuss further