Description
IRIS Software Group is hiring a full-time, permanent Senior Information Security Engineer – Vulnerability Management for a remote UK Business Hours role. The position owns the end-to-end vulnerability management lifecycle, triages and validates SAST, DAST, SCA, secrets scanning, penetration testing, and web application findings; prioritises and tracks remediation; improves security tooling in CI/CD; supports software supply chain and cloud security; and reduces recurring vulnerability patterns. Candidates should have application security, vulnerability management, or software engineering experience, practical security tooling experience, cloud security knowledge across AWS and/or Azure, and the ability to assess vulnerabilities in context.
