Vulnerability Management Support Engineer | S2 | Chief Information & Resilience Office | Milton Keynes | Internal Mobility

Vulnerability Management Support Engineer | S2 | Chief Information & Resilience Office | Milton Keynes | Internal MobilityCountry: United Kingdom

IT STARTS HERE

Santander () is evolving from a global, high-impact brand into a technology-driven organisation, and our people are at the heart of this journey. Together, we are driving a customer-centric transformation that values bold thinking, innovation, and the courage to challenge what’s possible.

This is more than a strategic shift. It’s a chance for driven professionals to grow, learn, and make a real difference.

Our mission is to contribute to help more people and businesses prosper. We embrace a strong risk culture and all our professionals at all levels are expected to take a proactive and responsible approach toward risk management.

Santander Digital Services is the team of technology and operations at Santander. We are convinced of the importance of technology that is aligned with the requirements of the business and that out work not only brings value to users, people and communities but also fosters individual creativity. Our team of over 7,000 people in 8 countries (Spain, Portugal, Poland, UK, USA, Mexico, Chile and Brazil) develops and/or implements financial solutions across a broad spectrum of technologies (including Blockchain, Big Data and Angular among others) on all kinds of on-premise and cloud-based platforms.

Applicants must possess a degree in Digital Technology Solutions or be on track to complete their degree by Q2 2027.

The requirement to successfully pass/complete the degree will be added as a condition at offer stage.

THE DIFFERENCE YOU MAKE

Santander UK is looking for a Vulnerability Management Support Engineer based out of Milton Keynes.

We are seeking a Vulnerability Management and Security Hardening Support Engineer to support on assessment and remediation of security vulnerabilities within infrastructure.

The successful candidate will play a supporting role in analysing security vulnerabilities and security hardening, coordinating with cross-functional teams, and providing governance and oversight for implementing timely, effective remediation to reduce the organisation’s risk exposure.

We’re shaping the way we work through innovation, cutting-edge technology, collaboration and the freedom to explore new ideas. To succeed in this role, you will be responsible for:

• Support with system, application, and infrastructure teams to prioritise and remediate vulnerabilities across on-premise and cloud environments.
• Assign, track and update remediation status in dashboards, spreadsheet and ticketing systems e.g. JIRA, ServiceNow & Elastic
• Assisting in troubleshooting, performing root cause analysis, and implementing corrective actions under supervision.
• Maintain documentation of exceptions, waivers, or risk acceptances.
• Support CMDB and asset inventory updates related to scan coverage and tool integration.
• Act as the liaison between the security function (who identifies vulnerabilities) and the IT teams (who implement fixes).
• Link vulnerability IDs (CVEs) to corresponding tickets for traceability.
• Generate weekly/monthly reports.
• Maintain SOPs and runbooks for remediation tasks.
  
  

WHAT YOU’LL BRING

Our people are our greatest strength. Every individual contributes unique perspectives that make us stronger as a team and as an organisation. We’re enabling teams to go beyond by valuing who they are and empowering what they bring.

The following requirements represent the knowledge, skills, and abilities essential for success in this role. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Professional Experience:

• Understanding of Information / Cyber Security Principles & Technologies (Required)
• Excellent Verbal & Written Communication Skills (Required)
• Solid analytical, problem-solving, and troubleshooting skills (Required)
• Understanding of scripting and automation (e.g., Python, PowerShell) to enhance vulnerability management processes (Preferred)
• An understanding of cyber risk and how cyber-attacks are conducted across endpoints, cloud and on-premise networks (Preferred)
  

Education:

• Degree in Computer Science, Information Security, or related field (Preferred)
• Relevant industry certifications (Preferred): Such as CompTIA Security+, CISSP, CISM, or similar (Preferred)
  
  

Languages:

• Spanish (Preferred)
  

Hard Skills:

• Understanding of Information / Cyber Security Principles & Technologies. Knowledge of security concepts, vulnerability management, and risk assessment (Required)
• Scripting and Automation: Familiarity with scripting languages such as Python or PowerShell to automate vulnerability management tasks (Preferred)
• Knowledge of Cyber Risk and Attack Methods : Understanding how cyber-attacks are conducted across endpoints, cloud, and on-premise networks (Preferred)
• Experience with Ticketing Systems: Using tools like JIRA, ServiceNow, and Elastic for tracking and updating remediation status (Preferred)
• Reporting: Ability to generate weekly/monthly reports and maintain SOPs/runbooks (Preferred)
• Asset Management: Supporting CMDB and asset inventory updates related to scan coverage and tool integration (Preferred)

Soft Skills:

• Solid Verbal & Written Communication Skills: Ability to communicate clearly with cross-functional teams and document processes (Required)
• Analytical, Problem-Solving, and Troubleshooting Skills: Capable of investigating issues, performing root cause analysis, and implementing corrective actions (Required)
• Collaboration: Experience working with multiple teams (security, IT, infrastructure) to coordinate remediation efforts (Required)
• Attention to Detail: Maintaining accurate documentation, tracking remediation status, and ensuring traceability (Required)
• Adaptability: Willingness to learn new technologies and adapt to evolving security threats and processes (Required)
• Proactive Attitude: Taking initiative in risk management and vulnerability remediation (Required)
  
  

WE VALUE YOUR IMPACT

At Santander, your contribution matters. We recognise the difference you make every day, and we make sure you feel valued, supported and rewarded in return.
Here, recognition goes beyond pay. It’s about the pride you feel in your work, the impact you have on customers and communities, and the opportunities you have to grow and thrive — personally and professionally.

Salary Range:

£44,496.00 - £66,744.00 per annum (depending on experience)

This salary range represents the expected remuneration for the role. Annual salary is based on a standard 35-hour working week. Actual salary offered will depend on skills, experience, qualifications and location.

• Competitive rewards that reflect the real impact you make and the value you bring.
• Wellbeing that goes beyond work — we work with a range of wellbeing partners across our 4 pillars of wellbeing (physical, mental, social and financial) to give you access to a suite of apps, discounted gym and fitness access, weekly online classes, flexible healthcare and mental health support.
• Support for every life stage — from menopause and pregnancy to parenthood and beyond, with enhanced family leave, childcare options and tailored wellbeing support.
• Time to give back through volunteering opportunities that let you make a difference in the communities we serve.
• Global growth opportunities to shape your career, learn new skills and explore what’s possible across our international network.

Ready to be recognised? It starts with you.

LOCAL COMPLIANCE

At Santander, we’re proud to be an inclusive organisation that provides equal opportunities for everyone — regardless of age, gender, disability, civil status, race, religion or sexual orientation.

We’re committed to creating a recruitment experience that’s accessible, fair and welcoming for all candidates.

We want our people to thrive — at work and at home — while delivering the best outcomes for our customers and supporting each other to grow.

To make this possible, our roles are site-based with a hybrid working pattern, where colleagues are expected to attend the office at least 12 days per month (pro-rata for part-time roles).

When applying, please consider the travel distance, time and cost to your chosen office location.

We welcome applications on the understanding that, should you be offered this role, there may be no relocation package available. Santander will pay the employer mandatory government fees that are required to pay in connection with visa sponsorship. You may be liable for your own personal employee immigration and relocation costs.

IMPORTANT INFORMATION FOR INTERNAL APPLICANTS:

PERMANENT ROLES:

If you are currently employed by Santander UK plc on TSB Legacy terms or by TSB and choose to apply for this Santander vacancy, please be aware that, if successful, you will move onto full Santander terms and conditions of employment and will no longer be part of the TSB Legacy population with effect from the start date of your new role.

WHAT TO DO NEXT

If this sounds like a role you are interested in, then please apply.

For further Guidance please visit Internal Mobility - Candidate Guidance.

If you want to know more about the opportunity:

Please contact Craig Kimmens - Craig.Kimmens@santander.co.uk or William Mackay - William.mackay@santander.co.uk

#LI-DNI