Higher Vulnerability Manager - Police and Public Protection Technology Portfolio (PPPT)

The Police and Public Protection Technology (PPPT) Portfolio delivers high-profile national programmes, bringing together civil servants, consultants, and contractors to design and deliver digital services that support Home Office missions within Digital and Innovation.

As a Higher Vulnerability Manager, you will join a team of cyber security professionals dedicated to reducing exposure to cyber threats across new and existing digital systems, supported by a collaborative culture and commitment to professional development.

You will be responsible for identifying, assessing, and managing vulnerabilities across infrastructure, applications, cloud environments, and network services. This includes conducting vulnerability assessments using approved security tools, onboarding and maintaining assets within vulnerability management platforms, and monitoring the organisation’s vulnerability landscape.

Your main responsibilities will be:

• Vulnerability Identification – Utilise various vulnerability management tools and technologies effectively to identify, assess, and report on vulnerabilities.
• Vulnerability Assessment – Analyse the results of vulnerability scans to determine the severity and potential impact of identified vulnerabilities, categorising them based on risk to the organisation's assets and operations.
• Remediation Support – Collaborate with multiple departments, technical teams, and senior stakeholders to recommend remediation plans and complex configuration changes in support of vulnerability remediation.
• Reporting – Maintain thorough documentation of vulnerability assessments, findings, and remediation efforts to support compliance and reporting requirements.
• Incident Management – Work closely with other security teams and technical resolver groups to ensure a comprehensive approach to managing prioritised vulnerabilities.
• Tool management – Supporting different technical approaches and utilising various tooling and technologies to perform vulnerability assessments against large and complex infrastructure.

The role also provides advice on patching, system hardening, and secure configuration, ensuring alignment with Threat and Vulnerability Management policies and contributing to improved cyber resilience and security posture.

The ideal candidate will have experience working in an information security, cyber security, or information assurance discipline, or in the delivery of technology-based projects. Essential skills include:

• Working in an information security, cyber security, or information assurance discipline or in the delivery of technology-based projects.
• Involvement in applying techniques to improve operational processes.
• Communicating in a verbal and written manner, and a good understanding of the use of different channels and formats for different audiences.
• Building partnerships with peers across an organisation, 3rd party suppliers, and other teams.
• Risk and controls frameworks: NIST, ISO27001, COBIT, Cyber Essentials/ Defence Controls, NCSC guidelines and/or threat analysis models and frameworks: STiX, Cyber Kill Chain, Diamond Model etc.
• Vulnerability research, malware analysis, and exploit investigation, especially within Home Office, Cabinet Office, NCSC.

Desirable qualifications include certification in relevant cyber security qualifications such as CISMP, CTIA, CRISC etc.

In terms of benefits, alongside your salary of £45,750, Home Office contributes £13,253 towards you being a member of the Civil Service Defined Benefit Pension scheme. Other benefits include:

• A Civil Service Pension with employer contribution rates of at least 28.97%.
• In-year reward scheme for one-off or sustained exceptional personal or team achievements.
• 25 days annual leave on appointment, rising with service.
• 8 days of public holidays, plus 1 additional privilege day.
• Where business needs allow, some roles may be suitable for a combination of office and home-based working. This is a non-contractual arrangement where all employees will be expected to spend a minimum of 60% of their working time in an office.