Vulnerability Management Engineer

Location: UK
Reporting to: VM Team Lead

Join Air IT and help businesses stay one step ahead

Are you passionate about cyber security and enjoy getting under the skin of technical problems?

We’re looking for a Vulnerability Management Engineer to join our Vulnerability Management Team and help deliver a range of managed cyber security services to our customers.

You’ll work with a variety of technologies, systems and vendors to identify, assess and prioritise vulnerabilities, helping our customers understand their risks and coordinating the actions needed to remediate them.

You don’t necessarily need to know everything on day one. If you have a strong technical foundation, a genuine interest in cyber security and the drive to keep developing your knowledge, we’d love to hear from you.

What you’ll be doing

As part of our supportive cyber security team, you’ll:

• Identify, analyse and prioritise vulnerabilities based on the likelihood of exploitation and potential business impact.
• Work with internal teams, customers and external stakeholders to coordinate vulnerability remediation across managed services and one-off projects.
• Carry out regular audits and assessments against security and compliance standards, including Cyber Essentials.
• Support the onboarding of new customers, completing the installations and configurations needed for services such as vulnerability and patch management.
• Communicate clearly with customers and stakeholders about vulnerabilities, remediation activity and service requests.
• Help improve the way we work by documenting processes and identifying opportunities to make our services more efficient.
• Keep your knowledge up to date with evolving cyber threats, security trends and best practice.
• Share your cyber security expertise with colleagues and customers, providing practical guidance and solutions when needed.
• Contribute to the ongoing development of our existing services and help shape new cyber security offerings.

What we’re looking for

We’re looking for someone who combines technical knowledge with curiosity, organisation and great communication skills.

You’ll ideally bring:

• A genuine interest in cyber security, with examples of how you’ve developed your knowledge.
• Experience managing network infrastructure.
• Experience with Microsoft and Linux operating systems.
• Familiarity with virtualisation technologies such as Hyper-V and VMware.
• A good working knowledge of network devices, including firewalls and switches.
• An understanding of cyber security standards such as Cyber Essentials.
• The ability to manage and prioritise your own workload as requirements change.
• A logical and methodical approach to problem solving, including when working under pressure.
• Strong written and verbal communication skills, with the confidence to explain technical concepts to both technical and non-technical audiences.
• Literacy and numeracy skills equivalent to GCSE Maths and English.
• The ability to commute to an Air IT office when required in line with our hybrid working policy.

Even better if you have

It would be great if you also have experience in some of the following, but don’t let it stop you applying if you don’t tick every box:

• Previous experience within the cyber security industry.
• Vulnerability scanning, vulnerability management or patch management.
• Vulnerability scanning tools such as Qualys or Nessus.
• An understanding of Common Vulnerability Scoring Systems (CVSS).
• Monitoring and assessing security risks and vulnerabilities and recommending appropriate remediation.
• Scripting using PowerShell or similar.
• A relevant degree or professional cyber security certifications.

Why Air IT?

This is an opportunity to build your cyber security career as part of a team that’s passionate about learning, collaboration and delivering a great service to our customers.

You’ll have the chance to expand your technical knowledge, work across a variety of customer environments and technologies, and contribute ideas that help us continuously improve and develop our cyber security services.