Vulnerability Management Engineer (12 Month FTC)

Most people never think about vulnerability management when it's working well. That's kind of the point.

As innocent grows, so does the technology that helps us make, move and sell our drinks. We're looking for a Vulnerability Management Engineer to help us build the foundations that keep that technology secure, visible and well looked after.

This is a hands-on contract role with a clear goal: implement Qualys across our technology estate and turn vulnerability management into a capability that's embedded in how we work, not just another security tool sitting on a shelf.

You'll work across Security, Infrastructure and Cloud teams, helping us understand where our risks are, what matters most, and how we reduce them. By the end of the contract, you'll have left behind something lasting: a platform, a process, and a much clearer view of our technology landscape.

You'll be

Leading the implementation of Qualys across the business, from setup through to production readiness.
Building visibility across our technology estate so we know what's out there and what's happening.
Rolling out agents across servers, endpoints and cloud environments to improve asset coverage and insight.
Designing vulnerability scanning, prioritisation and remediation processes that teams can actually use.
Creating dashboards and reporting that make security risks easier to understand and act on.
Working with infrastructure and cloud teams to improve patching and reduce exposure to security risks.
Connecting Qualys with other enterprise platforms, including service and asset management tools.
Helping teams adopt consistent, practical vulnerability management practices.

You'll have

Strong experience implementing and configuring Vulnerability Management Systems, including Vulnerability Management, Detection and Response (VMDR) and Patch Management capabilities.
A track record of delivering vulnerability management initiatives that have driven meaningful risk reduction.
Experience deploying security tooling across complex technology environments with lots of moving parts.
A solid understanding of vulnerability scoring, risk-based prioritisation and patch management.
Confidence working across Windows, Linux and Microsoft Azure environments.
A pragmatic approach, strong stakeholder skills and a knack for turning complexity into clear action.

You'll get

The chance to shape a vulnerability management capability from the ground up rather than inherit one.
Ownership of a high-profile piece of work with visible outcomes and measurable impact.
The opportunity to work closely with engineers, cloud specialists, infrastructure teams and security leaders.
Exposure to a broad and varied technology estate spanning cloud and on-premise environments.
The freedom to influence how vulnerability management is embedded across the business.
The satisfaction of leaving things in better shape than you found them, with processes and tools that people genuinely want to use.