Description
The Application Vulnerability Management Specialist is a security-focused individual contributor responsible for identifying, prioritising and coordinating the remediation of vulnerabilities across WSP's COTS and Microsoft 365 application portfolio.
The estate includes:
- Collaboration , tools that connect people and teams (e.g. Zoom, Teams).
- Productivity , applications that support day-to-day business output (e.g. Microsoft 365 Apps, Adobe Acrobat, Google Workspace, Smartsheet).
- Utilities , general end-user desktop utilities that support the estate (e.g. WinZip / 7-Zip, TeamViewer, Notepad++, Snagit).
Using Microsoft Defender Vulnerability Management, Intune and ServiceNow, you will turn vulnerability data into clear priorities, coordinate remediation with technical teams and suppliers, and report progress to stakeholders. You will apply risk factors such as CVSS, EPSS, CISA KEV, asset criticality and business impact to reduce exposure while maintaining operational stability across a global environment.
Responsibilities
Identify and Prioritise Risk
- Maintain an accurate view of application vulnerabilities, affected devices and remediation status using Defender Vulnerability Management, Intune and ServiceNow.
- Assess and prioritise findings using CVSS, EPSS, CISA KEV, exploit intelligence, asset criticality and business context.
- Monitor vulnerabilities, misconfigurations and security-baseline gaps across COTS and Microsoft 365 applications.
Coordinate Remediation
- Coordinate patching, configuration changes and other mitigations with End User Device, deployment, engineering and supplier teams.
- Manage findings from validation through remediation, verification and closure, with clear ownership and agreed service levels.
- Manage time-bound exceptions and risk acceptances, documenting compensating controls and reviewing them at expiry.
Improve Security Practices
- Support application hardening, security-baseline compliance and attack-surface reduction using recognised Microsoft, CIS and industry guidance.
- Promote least privilege and controlled elevation through endpoint privilege management practices and tooling.
- Contribute security and vulnerability requirements to the onboarding and review of business applications.
Report and Govern
- Provide clear dashboards and reports on exposure, remediation progress, SLA performance, ageing, recurrence and security-baseline compliance.
- Translate trends and technical findings into practical recommendations for management, audit and operational teams.
- Maintain proportionate procedures and evidence aligned with ITSM, ISO/IEC 27001 and relevant vulnerability-management guidance.
Qualifications
Essential
- 5+ years in an ITIL-aligned security or IT operations role, ideally in vulnerability management, endpoint security or business applications.
- Hands-on experience with Microsoft Defender Vulnerability Management and the Microsoft Defender portal.
- Working knowledge of Microsoft 365 applications, endpoint patching and deployment through Intune and/or Configuration Manager.
- Understanding of endpoint security, least privilege, privilege management and recognised security baselines.
- Experience using ServiceNow or a comparable ITSM platform to manage findings, remediation and service levels.
- Strong analytical, organisational and communication skills, with the ability to influence stakeholders and work effectively across global teams.
Desirable
- Experience delivering vulnerability or remediation programmes across a large, global application estate.
- Degree in Information Technology, Cyber Security or a related field.