Evodia Limited is partnering with a leading client to find a highly skilled Vulnerability Manager with current DV clearance for an exciting contract role based in Corsham, Wiltshire. This is a fantastic opportunity to contribute to national security through cyber resilience, with the flexibility of hybrid working, requiring three days a week onsite, with support for additional days as needed during major incidents.
Position Overview
As the Vulnerability Manager, you will lead the organisation’s vulnerability management and cyber risk reduction activities across NSOIT(D) products and services. You’ll own the vulnerability management framework, coordinate discovery and remediation efforts, and provide vital incident support for significant cyber security events. Your expertise will help strengthen cybersecurity postures within a demanding MOD environment, ensuring compliance and high standards of security.
Key Responsibilities
- Vulnerability Management & Cyber Risk Reduction (70%): Take ownership of the vulnerability management framework, policies, and standards. Coordinate discovery, assessment, and prioritisation activities, optimising enterprise tools like Clearswift, Tanium, Trend DSM, and Elastic. Produce dashboards, risk reports, and briefings for senior cybersecurity governance forums.
- Incident Management & Major Incident Support (20%): Support management and coordination during cybersecurity incidents. Lead technical assessments of exploitation, perform root cause analysis, and support post-incident reviews with a focus on remediation actions.
- Security Monitoring & Continuous Improvement (10%): Review security events related to vulnerability exploits, correlate threat intelligence data, and support enhancements to SIEM, SOAR, and EDR systems. Contribute to cybersecurity metrics and improvement initiatives.
Ideal Candidate Profile
- Must hold a current DV security clearance.
- Extensive experience operating enterprise vulnerability management systems, including Clearswift, Tanium, Trend DSM, or similar tools.
- Solid understanding of CVSS, cyber risk management, and remediation governance within MOD or similar environments.
- Experience supporting cyber incident management, especially in MOD or defence contexts.
- Strong skills in vulnerability assessment and remediation tracking, with experience producing executive dashboards and reports.
Desirable Qualifications
- Certifications such as CompTIA Security+ or CySA+
- ISC2 CISSP or ISACA CISM
- CREST CPSA or CRT
- Specialist SANS courses (504, 503, 511) are advantageous
Additional Details
- Start Date: 1 December 2026
- End Date: 31 March 2028
- Day Rate: Negotiable (inside IR35)
- Location: Corsham (hybrid working, 3 days onsite)
- Working hours: 8 hours per day
If you bring the right experience and clearance, we’d love to hear from you. This is an excellent chance to be part of a critical national security project, working within a supportive and professional environment. Evadia Limited acts as an employment business in relation to this vacancy.