2 x hands-on Infrastructure Vulnerability Engineers (1 x Linux & 1 x Windows)

Applicants must be eligible to work in the specified location

We are looking for 2 x hands-on Infrastructure Vulnerability Engineers to join an initial engagement running through to the end of the year. One position will focus specifically on Linux vulnerability remediation, with the second focused on Windows vulnerability remediation. These are not vulnerability management, reporting or coordination roles - we need experienced infrastructure engineers who are comfortable getting directly onto Servers, working through already identified vulnerabilities and remediation work packages, and actually implementing the fixes. Think hands-on infrastructure engineer/sys admin rather than someone reviewing scanner output and passing actions across to another team.

Day to day, you will be logged into remote desktops, shells and server environments, investigating issues, applying patches, upgrading vulnerable components, remediating configuration weaknesses and validating that fixes have been successfully implemented without impacting service. For the Linux role, we are particularly interested in strong Linux administration skills and experience tackling vulnerabilities across areas such as OpenSSL, PHP, packages, libraries and underlying OS components. For Windows, we need someone equally comfortable across Windows Server environments, patching, configuration remediation, networking and infrastructure vulnerabilities. Above all, we need engineers with recent, demonstrable experience of being the person with the keys to the environment - fixing the problem, not just reporting it.