Cloud Vulnerability Lead

Company: Sanderson Recruitment
Apply for the Cloud Vulnerability Lead
Location: Westminster
Job Description:

If you are considering sending an application, make sure to hit the apply button below after reading through the entire description.

Cloud Vulnerability Lead

Rate – £600 – £650 Inside IR35 Duration – 6 months initial Location – London (3 days a week on site)

We’re looking for a Cloud Vulnerability Lead to own and mature our cloud vulnerability management and CSPM capability across AWS and GCP.

This role combines hands-on technical expertise with leadership responsibility. You’ll be the go-to SME for Qualys, ensuring the platform is being used effectively, while providing oversight of vulnerability management, cloud security posture and remediation activity across the organisation.

You’ll also manage a small team and work closely with Cloud Engineering, Infrastructure and Security stakeholders to drive continuous improvement and reduce cloud security risk.

Key Responsibilities

  • Lead the cloud vulnerability management and CSPM function across AWS and GCP.
  • Own and optimise the use of Qualys VMDR, CSAM, TotalCloud and CSPM capabilities.
  • Assess current processes, tooling and coverage, identifying opportunities to improve effectiveness and maturity.
  • Provide technical oversight of vulnerability prioritisation, remediation tracking and risk reporting.
  • Identify cloud misconfigurations, exposure risks and compliance gaps, driving remediation with key stakeholders.
  • Manage and develop a small team, providing technical guidance and support.
  • Produce metrics and reporting to demonstrate security posture and risk reduction.
  • Act as the senior point of contact for cloud vulnerability and posture management activities.

Required Experience

  • Strong hands-on experience with Qualys VMDR, CSAM and CSPM.
  • Deep understanding of AWS and GCP security and cloud risk management.
  • Experience leading or improving vulnerability management and CSPM programmes.
  • Ability to balance technical delivery with oversight and governance responsibilities.
  • Previous experience managing or mentoring a small team.
  • Strong stakeholder engagement skills with the ability to influence technical and non-technical audiences. xwwtmva

Reasonable Adjustments:

Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives.

Please click on the apply button to read the full job description

…

Posted: September 22nd, 2026