NMC Cyber Vulnerability Specialist
Join Police Digital Service as an NMC Cyber Vulnerability Specialist. Permanent Full-time. Salary starting at £55,000 per annum. Do you have the right skills and experience for this role Read on to find out, and make your application.
About Police Digital Service
We are looking for an experienced and resourceful Cyber Vulnerability Specialist to develop and strengthen the NMC Cyber Threat Team. You will help to design and build our vulnerability management offering to policing, then transition into running the operational aspect. You will help policing make sense of their vulnerability landscape and take informed actions on remediation.
Key Responsibilities
Operations
Support management of the end-to-end vulnerability lifecycle across policing environments
Produce regular vulnerability reports that are clear, contextualised, and tailored to the audience - from technical teams to senior leadership
Work directly with forces to help present vulnerabilities in their networks, translating vulnerability findings into operational risk
Support force patching schedules, helping prioritise remediation based on risk and operational constraints
Maintain awareness of the current threat landscape and newly disclosed vulnerabilities to provide timely reports
Identify trends, recurring vulnerabilities, and systemic issues across force estates and provide strategic recommendations
Supporting incident response, threat hunting and threat intelligence functions
Offering Development
Developing and documenting vulnerability management offering, including policy, process, governance
Help forces define and implement their vulnerability lifecycle from discovery to closure
Promote asset inventory and classification processes to ensure accurate scan coverage
Contribute to dashboards and reporting templates that give stakeholders visibility of risk posture
Promote best practise and culture for vulnerability management across policing
What you need to succeed in the role
Essential
Experience coordinating vulnerability and patch management across complex enterprise environments.
Understanding of attack surface and vulnerability prioritisation frameworks
Understanding of underlying technologies including operating systems, applications, cloud, and enterprise infrastructure.
Experienced translating technical findings into actionable insights.
Stakeholder engagement across technical teams to senior leadership
Able to explain complex information to non-technical audiences
Desirable
Understanding of law enforcement ecosystem, or previous policing background
Relevant certifications (Sec+ / CySA+ / GEVA / OSWA / Vendor Specific)
Technically understand and interpret proof of concepts and exploits
Experience building a vulnerability management programme
Experience driving vulnerability best practise across enterprise
Understanding of how AI technologies will impact vulnerability programs
Personal Attributes
Detail orientated with strong analytical and problem-solving skills
Resourceful with a proactive mindset
Able to adapt quickly to new technologies
Challenging assumptions and validating findings before escalation
Clear communication and influence to manage attack surface
Why Join us?
Balance is important and we want you to take time off to recharge - we offer 28 days' annual leave plus bank holidays, rising to 30 days after 5 years of service. Holiday Purchase also available
We care about your well-being - we have an EAP that offers not just welfare benefits but also retail discounts
Plan for the future - we offer an excellent pension scheme and life assurance cover
Put your mind at rest regarding your health - offering remote GP, mental health and physiotherapy appointments via video consultation
Family - Enhanced maternity and paternity pay along with a flexible return to work
Community - one paid day off per year for volunteering
You can find out more here:
Benefits - Police Digital Service ( )
Diversity, equity and inclusion
We are committed to equal opportunity for all and will not discriminate on any grounds. We encourage applications from people from the widest possible span of experience. We particularly welcome applications from Black, Asian and Minority Ethnic (BAME) candidates and people with disabilities.
Working Arrangements
At the NMC, you will benefit from hybrid working, getting the advantages of both face-to-face team engagement and home working. NMC employees have the opportunity to work in our modern office environment for in-person collaboration, however you will also get the opportunity to work from home 2 days a week. xkybehq
All applicants must be eligible for NPPV3 and SC clearances. Successful applicants will require NPPV3 clearance to have been approved before starting with PDS.
About Police Digital Service
We are looking for an experienced and resourceful Cyber Vulnerability Specialist to develop and strengthen the NMC Cyber Threat Team. You will help to design and build our vulnerability management offering to policing, then transition into running the operational aspect. You will help policing make sense of their vulnerability landscape and take informed actions on remediation.
Key Responsibilities
Operations
Support management of the end-to-end vulnerability lifecycle across policing environments
Produce regular vulnerability reports that are clear, contextualised, and tailored to the audience - from technical teams to senior leadership
Work directly with forces to help present vulnerabilities in their networks, translating vulnerability findings into operational risk
Support force patching schedules, helping prioritise remediation based on risk and operational constraints
Maintain awareness of the current threat landscape and newly disclosed vulnerabilities to provide timely reports
Identify trends, recurring vulnerabilities, and systemic issues across force estates and provide strategic recommendations
Supporting incident response, threat hunting and threat intelligence functions
Offering Development
Developing and documenting vulnerability management offering, including policy, process, governance
Help forces define and implement their vulnerability lifecycle from discovery to closure
Promote asset inventory and classification processes to ensure accurate scan coverage
Contribute to dashboards and reporting templates that give stakeholders visibility of risk posture
Promote best practise and culture for vulnerability management across policing
What you need to succeed in the role
Essential
Experience coordinating vulnerability and patch management across complex enterprise environments.
Understanding of attack surface and vulnerability prioritisation frameworks
Understanding of underlying technologies including operating systems, applications, cloud, and enterprise infrastructure.
Experienced translating technical findings into actionable insights.
Stakeholder engagement across technical teams to senior leadership
Able to explain complex information to non-technical audiences
Desirable
Understanding of law enforcement ecosystem, or previous policing background
Relevant certifications (Sec+ / CySA+ / GEVA / OSWA / Vendor Specific)
Technically understand and interpret proof of concepts and exploits
Experience building a vulnerability management programme
Experience driving vulnerability best practise across enterprise
Understanding of how AI technologies will impact vulnerability programs
Personal Attributes
Detail orientated with strong analytical and problem-solving skills
Resourceful with a proactive mindset
Able to adapt quickly to new technologies
Challenging assumptions and validating findings before escalation
Clear communication and influence to manage attack surface
Why Join us?
Balance is important and we want you to take time off to recharge - we offer 28 days' annual leave plus bank holidays, rising to 30 days after 5 years of service. Holiday Purchase also available
We care about your well-being - we have an EAP that offers not just welfare benefits but also retail discounts
Plan for the future - we offer an excellent pension scheme and life assurance cover
Put your mind at rest regarding your health - offering remote GP, mental health and physiotherapy appointments via video consultation
Family - Enhanced maternity and paternity pay along with a flexible return to work
Community - one paid day off per year for volunteering
You can find out more here:
Benefits - Police Digital Service ( )
Diversity, equity and inclusion
We are committed to equal opportunity for all and will not discriminate on any grounds. We encourage applications from people from the widest possible span of experience. We particularly welcome applications from Black, Asian and Minority Ethnic (BAME) candidates and people with disabilities.
Working Arrangements
At the NMC, you will benefit from hybrid working, getting the advantages of both face-to-face team engagement and home working. NMC employees have the opportunity to work in our modern office environment for in-person collaboration, however you will also get the opportunity to work from home 2 days a week. xkybehq
All applicants must be eligible for NPPV3 and SC clearances. Successful applicants will require NPPV3 clearance to have been approved before starting with PDS.