Senior Threat and Vulnerability Specialist at Vodafone – United Kingdom, GB

Job Title: Senior Threats and Vulnerabilities Specialist
Location: UK

Role Purpose

Vodafone’s Group Cyber ​​Defence team mitigates the risk and impact of global cyber threats to Vodafone and our customers.
The Threat and Vulnerabilities Senior Specialist is responsible for supporting the Cyber ​​Defense Vertical teams on the most critical topics related to threats and vulnerabilities. Specifically, the Senior Specialist will provide senior guidance on vulnerability-based cyber incident management, provide direction on zero days, support strategic decisions on risk-driven vulnerability prioritization, and utilize all available Cyber ​​Defense/OSINT Tools to provide independent assurance on the effectiveness of controls in place to prevent incidents (e.g. Vulnerability coverage, Responsible Disclosure). The Senior Specialist will be actively involved in the broader Cyber ​​Security community and actively support information sharing initiatives with other entities under the leadership of the Cyber ​​Threat Unit.

What you are going to do

Key Responsibilities and Decision Making Authority:
• Support for vulnerability related incidents
• Senior advisor to central teams and local markets for vulnerability related topics
• Support for risk-driven prioritization of vulnerabilities
• Second-line assurance on the effectiveness of Cyber ​​Defense tools to detect threats and vulnerabilities
• Contribute to the broader Cyber ​​Security Community on vulnerability topics on behalf of Vodafone

Who are you

Technical core competencies; demonstrable experience with:
• Significant experience in the field of vulnerability management and penetration testing. It is mandatory to be able to demonstrate experience and knowledge in one or more of the following:
• The ability to quickly understand complex technical concepts and translate them to a less technical audience.
• Vulnerability scanning and management tools – both to understand their use and to explain the need for them; combined with a sense of leadership in guidance at Vodafone scale and complexity.
• Advising SMEs and providing concise technical briefings at leadership and senior stakeholder level that drive decision making and response.
• Support Red Teaming activities with external vendors as needed and identify internal pentesting activities in critical areas to improve security posture
• Preparing technical reports to describe specific types of vulnerabilities, impacts and mitigations
• Red Team and Penetration Testing methodologies and tools – both to understand their use and to explain the need for them; combined with a sense of leadership in guidance at Vodafone scale and complexity
• Expert-level knowledge of operating system and software vulnerabilities and exploitation techniques.
• Must have knowledge of web application vulnerabilities and exploitation techniques, with a minimum knowledge of the OWASP Top 10.

Core leadership competencies; demonstrable experience with:
• Applied thinking and analysis to new situations.
• Identifying, building and maintaining effective relationships through influencing, collaborating and connecting with relevant stakeholders globally.
• Analytical, communication and senior/executive stakeholder management skills.
• Prepare, deliver and maintain high quality technical reports and repair guidelines for identified technical issues.
Experience and knowledge of one or more of the following areas is desirable:
• Knowledge and experience in testing telecom technologies and infrastructure devices such as SIP, SS7, IN, Packet core infrastructure (GGSN/SGSN)
• Experience developing internal tools or scripts to improve delivery and facilitate testing activities.
C2 General
• Ability to perform targeted penetration testing with vulnerability identification, exploitation and post-exploitation activities with no or minimal use of automated tools.

What’s in it for you?

Discretionary annual bonus: 10%
Annual leave: 28 days + holidays + the possibility to buy/sell/transfer 5 days/year
Charity days: 5 days/year
Maternity leave: 52 weeks of which 39 weeks fully paid + 13 weeks half paid and 6 months – work 4 days, get 5 days paid
Private pension: You can contribute up to 5% of your basic salary, with a 2:1 matching from Vodafone of up to 10%.
Access to: private medical care, private dental care, free health assessments, savings program
Additional discounts: Vodafone retail, gym, cinema, cycling to work, season ticket loan

Who we are

You may have heard of Vodafone – We are a leading telecommunications company in Europe and Africa. But what you may not know is that we are constantly investing in new technologies to improve the lives of millions of customers, businesses and people around the world, creating a better future for everyone.

As part of our global family, whether that’s Vodafone, Vodacom or _VOIS, you’ll feel a sense of pride and purpose as you contribute to our culture of innovation. We are committed to equal opportunity and inclusion for all candidates through our employment policies and practices. We recognise and celebrate the importance of diversity and inclusion in our workplace and we do not tolerate discrimination of any kind, particularly related to but not limited to race, colour, age, veteran status, gender identification, sexual orientation, pregnancy, ethnicity, disability, religion, political affiliation, trade union membership, nationality, indigenous status, medical condition, HIV Status, social origin, cultural background, social or marital status.

Together we can do it.

#TogetherWeCan #GroupRecruitment #GroupTalentRecruitment #WeAreSearching #JoinOurTeam #LI-hybrid