Paranoids Senior Vulnerability Management Engineer

Description

The Vulnerability and Controls Operations team finds, triages and tracks security weaknesses across cloud infrastructure, container orchestration (such as EKS), application frameworks and core enterprise environments, using automated scanning and agentic workflows to flag high-risk issues such as zero-day vulnerabilities, supply chain threats and cloud exposures.

The team is known as The Paranoids and is the information security team at the company. The company connects brands and partners with an audience of hundreds of millions of people, so its systems are a frequent target across every layer of the stack.

This is a contract role on a hybrid basis, leading vulnerability management as a Senior Security Engineer. You will combine hands-on security engineering with operational leadership and work with automated remediation pipelines. You will also take part in urgent response when a major threat appears, working alongside analysts, engineers and senior leadership.

Responsibilities

• Lead the coordination, assessment, communication and remediation of high-severity vulnerabilities.
• Rank vulnerabilities using their specific context, mitigating factors, threat intelligence feeds, CISA KEV and EPSS scores.
• Query, parse and analyse large datasets in Databricks to address vulnerabilities, spot trends and produce insights for leadership reports.
• Set technical requirements for vulnerability scanning platforms, tune scanners as the environment changes and manage vendor relationships to get the features you need.
• Run scans, analysis, validation and remediation across cloud, host and application layers.
• Check findings from enterprise scanners, container registry tools, IaC templates and code analysis.
• Design, build and improve AI-driven and agentic workflows, including Agentic Defense and automated repository PR integrations, that identify, rank, enrich and track fixes for security findings.
• Use AI tools to parse, summarise and triage large datasets, research emerging threats and zero-day vulnerabilities, and analyse CVEs.
• Use AI-assisted analysis to find systemic vulnerability trends and remove entire vulnerability classes together with developer platform teams.
• Write and maintain operational process documentation and vulnerability handling runbooks for the programme.
• Work with product teams, developers and system administrators to explain risks, build safe defaults and advise on fixes.
• Monitor public and internal sources for vulnerability information, assess zero-day threats, recommend immediate action and run emergency response procedures.
• Track software supply chain exposure, set up processes to collect and assess SBOM data across host, container and cloud environments, and detect dependency confusion and malicious package attacks.
• Lead automated remediation of host OS and foundation-level vulnerabilities, linking vulnerability intelligence to repository PRs and automated ticketing.
• Build metrics, KPIs and real-time dashboards for vulnerability management.
• Carry out technical and non-technical compliance work as needed.
• Join the on-call rotation and provide after-hours support to resolve critical vulnerabilities.

Requirements

• A bachelor's degree in a technical field such as computer science, engineering or information security, or equivalent practical experience.
• At least 7 years in information security, in vulnerability management or security engineering.
• A solid grasp of common application, network and OS vulnerabilities on Linux, Windows and OSX, along with patching and attack patterns.
• A record of leading critical vulnerability remediation and coordinating stakeholders under heavy pressure.
• Hands-on use of risk-based prioritisation frameworks: CVSS, EPSS and CISA KEV.
• Extensive experience with core scanners such as Tenable, Nexpose, Qualys, AWS Inspector, GCP SCC and GitHub Advanced Security.
• A strong understanding of AWS and GCP, and of container technology including Kubernetes, AWS EKS and Docker, covering container scanning and IaC security.
• A deep understanding of supply chain risk, dependency confusion, host and container SBOM ingestion, and automated scanning and remediation across AWS, GCP and on-prem environments.
• Proficiency with AI tools and agentic frameworks, such as automated PR generation, Agentic Defense and ticket enrichment, for core vulnerability work.
• Skill with Databricks or similar platforms to query and visualise large datasets, focusing on high-impact vulnerabilities and reducing noise.
• Proficiency in Python or Go for automation, API work and clean, testable code.
• Experience with the SDLC, host-based security, networking, systems administration and security best practices.
• Familiarity with web application protocols, operating systems and networking technologies.
• The ability to work independently with limited data, act with urgency and switch priorities quickly in a demanding environment.
• Preferred: CISSP, CISM or a relevant cloud security certification.
• Preferred: experience independently leading projects to completion.
• Preferred: intermediate to advanced Databricks skills for log analysis and dashboard building.
• Preferred: background in SDLC integration, automated PR gate security reviews, patch management and vulnerability class elimination.
• Preferred: experience working with cross-functional teams, software engineers, platform developers and senior leadership.

Conditions

Hybrid working with flexible location. Most roles do not need a set pattern of in-office attendance, but you may be asked to attend or travel to on-site sessions, team-building or in-person events, with notice given.

Ask the recruiter about how this applies to this role.

Pay ranges from €72,600.00 to €121,000.00 per year, depending on location, skills and experience, and may include a discretionary annual bonus or commission.

Contract basis.

Benefits

• Healthcare, pension and a flexible benefits package you can tailor to your needs.
• Possible discretionary annual bonus or commission.