Job Search

We are seeking an End User Platform Vulnerability Engineer to strengthen the security of workplace technology and protect users, devices, applications and data across an enterprise environment. In this role, you will identify, assess and help remediate vulnerabilities affecting endpoint platforms, operating systems, productivity tools, browsers, mobile devices and associated infrastructure. You will work closely with security operations, infrastructure, service management and engineering teams to reduce risk and maintain secure, reliable end-user services.

Your responsibilities will include managing vulnerability scanning and assessment activities, validating findings, prioritising remediation according to risk, and coordinating corrective actions with technical owners. You will investigate vulnerabilities, assess their potential business impact, recommend mitigation or compensating controls, and track remediation through to completion. You will also support patch management, security configuration reviews, exception management and vulnerability reporting, ensuring accurate records and clear communication of risks, trends and outstanding actions. The role may involve developing dashboards, metrics, procedures and automation to improve visibility and accelerate remediation. You will contribute to security projects, provide technical guidance during platform changes, and stay informed about emerging threats, vendor advisories and relevant industry standards.

The successful candidate will have practical experience in vulnerability management, endpoint security, systems engineering or a closely related discipline. You should understand common operating systems, enterprise device management, software deployment, patching processes, identity controls and security hardening principles. Experience with vulnerability scanners, endpoint detection and response tools, configuration management platforms, scripting or automation is highly desirable. You will be analytical, organised and able to translate technical findings into clear, actionable recommendations for both technical and non-technical stakeholders. Strong communication skills, sound judgement and the ability to manage competing priorities are essential. Relevant professional certifications or demonstrable equivalent experience in cybersecurity, infrastructure or platform engineering would be advantageous.