Vulnerability Manager (Tenable Platform)

Company Description

Telefónica Tech is a leading provider of innovative tech services for the B2B market with a worldwide presence and strategic hubs in Spain, Brazil, UK and Germany. The company helps leading brands and organisations across the UK and Ireland unlock the power of integrated technology for all businesses, bringing together in one place a unique combination of, the best people, with the best tech and the best platforms in a simplified manner, to make a real difference to every business, every day.

We have an end-to-end portfolio of market leading services and develops integrated technology solutions to accelerate tech adoption through its two core divisions of Tech Cyber security & Cloud and Tech Intelligence of Things. The company has a diverse, highly trained and globally located talent pool of over 2000 employees and serves more than 5.5m Customers every day with a service reach in 175 countries. Its dynamic partner ecosystem includes over 300 cutting edge businesses, as well as strategic agreements with all market leaders.

Job Description

Vulnerability Manager (Tenable Platform) - MSSP

Reports To: SOC Manager

As a Vulnerability Manager at Telefónica Tech, you will be instrumental in identifying, assessing, prioritizing, and facilitating the remediation of security vulnerabilities for our diverse client base. You will be the primary expert responsible for the end-to-end management of our Tenable vulnerability management platform (e.g., Tenable.io, Tenable.sc, Nessus), ensuring optimal performance, accurate reporting, and actionable insights for our clients. Your work will directly contribute to enhancing our clients' security posture and maintaining their compliance with industry standards.

Key Responsibilities:

• Tenable Platform Management:
  • Administer, configure, and optimize the Tenable vulnerability management platform across multiple client environments.
  • Develop, schedule, and execute regular vulnerability scans (internal, external, web application, cloud, container) using Tenable products.
  • Manage Tenable agents, scanners, and integrations to ensure comprehensive asset coverage and accurate data collection.
  • Troubleshoot and resolve any issues related to scan execution, data ingestion, or platform performance.
  • Stay abreast of new Tenable features and updates, and implement them to enhance service delivery.
• Vulnerability Identification & Analysis:
  • Analyze scan results from Tenable to identify and assess security vulnerabilities across diverse client infrastructures (on-premise, cloud, endpoints, applications, networks).
  • Prioritize vulnerabilities based on risk, leveraging industry-standard frameworks (CVSS), threat intelligence, asset criticality, and client-specific context.
  • Conduct in-depth research on identified Common Vulnerabilities and Exposures (CVEs) and their potential impact.
• Reporting & Communication:
  • Generate clear, concise, and actionable vulnerability reports and dashboards for various client stakeholders (technical, management, executive).
  • Present vulnerability findings, risk assessments, and remediation recommendations to clients, clearly articulating the business impact of security weaknesses.
  • Track and report on remediation progress, compliance metrics, and overall vulnerability management program effectiveness for each client.
• Remediation & Advisory:
  • Work closely with client IT, operations, and development teams to provide guidance and support for vulnerability remediation efforts.
  • Recommend appropriate mitigation strategies, including patching, configuration changes, architectural improvements, and compensating controls.
  • Facilitate the communication and coordination between clients and internal security teams (e.g., Incident Response, Security Architecture).
• Process Improvement & Compliance:
  • Develop, maintain, and continuously improve vulnerability management policies, procedures, and runbooks within the MSSP framework.
  • Ensure vulnerability management processes align with industry best practices (e.g., NIST, ISO 27001, CIS Controls) and regulatory requirements (e.g., GDPR, PCI DSS).
  • Contribute to internal and external audits by providing documentation and evidence related to vulnerability management.
• Threat Intelligence & Research:
  • Stay current with the latest cybersecurity threats, attack techniques, and vulnerability disclosures.
  • Integrate threat intelligence into vulnerability assessments to enhance prioritization and proactive defense.

Required Skills & Experience:

• Proven Experience: Minimum of 5 years of experience in cybersecurity, with at least 3 years specifically in vulnerability management within an MSSP or large enterprise environment.
• Tenable Expertise: Deep hands-on experience with Tenable products, including Tenable.io, Tenable.sc, Nessus Professional, and Nessus Agents. Experience with Tenable One is highly desirable.
• Technical Acumen: Strong understanding of network protocols, operating systems (Windows, Linux), cloud platforms (AWS, Azure, GCP), databases, and web applications.
• Vulnerability Assessment: Proficient in interpreting vulnerability scan results, performing risk assessments, and applying vulnerability scoring systems (e.g., CVSS).
• Cybersecurity Frameworks: Familiarity with common security frameworks and standards (e.g., NIST CSF, ISO 27001, CIS Controls, OWASP Top 10).
• Analytical & Problem-Solving: Excellent analytical skills with the ability to identify trends, root causes, and develop effective solutions.
• Communication: Exceptional written and verbal communication skills, with the ability to translate complex technical information into clear, actionable insights for both technical and non-technical audiences.
• Collaboration: Proven ability to work effectively in a fast-paced, client-facing environment, collaborating with internal teams and external stakeholders.
• Certifications (Highly Desirable):
  • Tenable Certifications (e.g., Tenable Certified Nessus User, Tenable Certified SC User, Tenable.io Certified Professional)
  • Industry certifications such as CISSP, CISM, CompTIA Security+, CEH.

Education:

• Bachelor's degree in Computer Science, Information Security, or a related technical field, or equivalent practical experience.

What We Offer:

• Opportunity to work with a leading global MSSP and manage cutting-edge security technologies.
• Exposure to a diverse range of client environments and industries.
• Continuous professional development and training opportunities.
• A collaborative and innovative work environment.
• Competitive salary and benefits package.

Additional Information

Location:       Field Based

Attending Telefónica Tech offices and Customer sites when required.

Must have the right to live and work in the UK.

Must meet Security Clearance vetting requirements.

Any offer would be conditional upon the successful candidate passing a full DBS national security vetting process.

We don’t believe hiring is a tick box exercise, so if you feel that you don’t match the job description 100%, but would still be a great fit for role, please get in touch.