# Vulnerability Management Lead

**Company**: IT Infrastructure
**Location**: London
**Experience**: senior
**Job type**: full-time
**Category**: IT
**Industry**: Finance

**Apply**: https://mlp.eightfold.ai/careers/job/755959215894?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_b4ffc4ce-5af

## Description

We are seeking a Vulnerability Management Lead to join our Information Technology organization at Millennium, a global alternative investment firm.

The successful candidate will operate vulnerability discovery and assessment tools across infrastructure, cloud, and application environments. You will prioritize vulnerabilities based on risk, exploitability, and business context, partnering with asset owners to track remediation through closure.

Key responsibilities include:

- Operating vulnerability discovery and assessment tools across infrastructure, cloud, and application environments

- Prioritizing vulnerabilities based on risk, exploitability, and business context

- Applying cyber threat intelligence to strengthen prioritization and risk scoring

- Developing mitigation strategies for vulnerabilities that cannot be patched immediately

- Using AI-driven prioritization and automation to scale assessment coverage and improve remediation processes

- Producing clear vulnerability metrics and reporting for technology and security leadership

- Supporting penetration testing and red team engagements, coordinating remediation follow-up

- Continuously improving discovery coverage and reducing time to remediate across the environment

To be successful in this role, you will need:

- Experience operating vulnerability discovery and assessment tools

- Five or more years of hands-on vulnerability management experience with meaningful exposure to cyber threat intelligence

- Understanding of vulnerability scoring and prioritization frameworks

- Ability to design and implement mitigation and remediation approaches

- Experience tracking remediation across distributed asset owners and building effective relationships

- Strong communication skills, with the ability to explain technical risk clearly to technical and non-technical stakeholders

- Hands-on experience across on-premises and cloud infrastructure, Windows, Linux, macOS, containers, and scripting with Python, PowerShell, Bash, or similar languages

- Experience with the secure use, deployment, and governance of AI models, tools, and frameworks

- A bachelor's degree or higher in Computer Science, Computer Engineering, Cybersecurity, Information Security, or a related field,or equivalent work experience

## Skills

### Required
- vulnerability management
- cyber threat intelligence
- risk management
- mitigation strategies
- AI-driven prioritization
- automation
- scripting
- cloud infrastructure
- on-premises infrastructure

### Nice to have
- GPEN
- OSCP
- GCTI
- CISSP
- financial services
- highly regulated industry

---

Source: [Apply at mlp.eightfold.ai](https://mlp.eightfold.ai/careers/job/755959215894?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)