Senior Engineer - Threat Exposure Management & CD Business Operations

Overview

Senior hands-on engineering role within Threat Exposure Management, maintaining a continuous, prioritised view of GSK's exposure and running the business operations of the Cyber Defense function.

What you'll do

• Deliver assigned work to agreed quality and timelines.
• Support colleagues with peer review and knowledge sharing.
• Maintain a continuous view of GSK's threat exposure across vulnerabilities, external attack surface, configuration drift and control coverage.
• Prioritise exposure using exploitability, asset criticality and business impact rather than raw severity scores.
• Operate exposure and vulnerability tooling, including coverage assurance and data quality.
• Track remediation against agreed service levels and escalate where it slips.
• Manage the exception and risk acceptance process with documented residual risk.
• Build and maintain the Cyber Defense reporting pack and its underlying data.

What you'll need

• Degree in a relevant discipline, or related experience.
• Demonstrated experience in vulnerability or exposure management.
• Working knowledge of risk-based prioritisation of technical findings.
• Practical hands-on experience in the relevant cyber security domain.
• Demonstrated ability to deliver work independently to a high standard.
• Strong attention to detail in analysis and documentation.

Nice to have

• Experience with continuous threat exposure management practice.
• Experience with enterprise vulnerability and attack surface tooling.
• Familiarity with EPSS and the CISA Known Exploited Vulnerabilities catalogue.
• Data visualization skill in Power BI.
• Relevant certification such as CISSP, CompTIA Security+, GIAC, CRISC.
• Experience in pharmaceutical, life sciences or another highly regulated industry.

Details

• Typical tools and technologies: Qualys, Tenable, Rapid7, external attack surface management tooling, CSPM, ServiceNow, Power BI.