Application Vulnerability Management Specialist

The Application Vulnerability Management Specialist is a security-focused individual contributor responsible for identifying, prioritising and coordinating the remediation of vulnerabilities across COTS and Microsoft 365 application portfolios. The estate includes:

• Collaboration - tools that connect people and teams (e.g. Zoom, Teams).
• Productivity - applications that support day-to-day business output (e.g. Microsoft 365 Apps, Adobe Acrobat, Google Workspace, Smartsheet).
• Utilities - general end-user desktop utilities that support the estate (e.g. WinZip / 7-Zip, TeamViewer, Notepad++, Snagit).

Using Microsoft Defender Vulnerability Management, Intune and ServiceNow, you will turn vulnerability data into clear priorities, coordinate remediation with technical teams and suppliers, and report progress to stakeholders. You will apply risk factors such as CVSS, EPSS, CISA KEV, asset criticality and business impact to reduce exposure while maintaining operational stability across a global environment.

Responsibilities:

• Maintain an accurate view of application vulnerabilities, affected devices and remediation status using Defender Vulnerability Management, Intune and ServiceNow.
• Assess and prioritise findings using CVSS, EPSS, CISA KEV, exploit intelligence, asset criticality and business context.
• Monitor vulnerabilities, misconfigurations and security-baseline gaps across COTS and Microsoft 365 applications.
• Coordinate patching, configuration changes and other mitigations with End User Device, deployment, engineering and supplier teams.
• Manage findings from validation through remediation, verification and closure, with clear ownership and agreed service levels.
• Manage time-bound exceptions and risk acceptances, documenting compensating controls and reviewing them at expiry.
• Support application hardening, security-baseline compliance and attack-surface reduction using recognised Microsoft, CIS and industry guidance.
• Promote least privilege and controlled elevation through endpoint privilege management practices and tooling.
• Contribute security and vulnerability requirements to the onboarding and review of business applications.
• Provide clear dashboards and reports on exposure, remediation progress, SLA performance, ageing, recurrence and security-baseline compliance.
• Translate trends and technical findings into practical recommendations for management, audit and operational teams.
• Maintain proportionate procedures and evidence aligned with ITSM, ISO/IEC 27001 and relevant vulnerability-management guidance.