Life Cycle & Vulnerability Management Professional

Job description

What I’ll be doing – your responsibilities • Manage vendor-released threat, vulnerability and lifecycle programmes across supported network technologies and customer environments. • Review Cisco and relevant network platform advisories, end-of-life/end-of-support notices, security bulletins and recommended software releases. • Perform seed file / estate analysis against vendor advisories to identify impacted devices, software versions, exposure and remediation scope. • Assess technical risk, business impact, urgency, complexity and operational value before recommending remediation or lifecycle actions. • Prepare vulnerability and lifecycle reports for internal operational governance, customer review and stakeholder communication. • Raise, review and progress changes in line with ITIL change management, customer policy and BT operational control requirements. • Create implementation inputs, rollback considerations, test evidence and deployment readiness checks before handover to Operations. • Work closely with vendors, design teams, service operations and customer stakeholders to validate fixes, upgrades and remediation approaches. • Support incident, problem and service improvement activities where recurring faults or vulnerabilities require planned remediation. • Maintain accurate documentation, remediation trackers, risk registers and audit evidence for lifecycle and vulnerability management activities. • Share knowledge with peers, support cross-skilling, and contribute to continuous improvement of lifecycle and vulnerability processes. • Respond to priority operational requirements and support 24x7 technical escalation when lifecycle or vulnerability activity impacts service. The technical skills needed • Strong hands-on experience in configuration, troubleshooting and lifecycle support of Cisco routers and switches across enterprise and service provider environments. • Good working knowledge of Cisco routing/switching platforms including ISR/ASR, Catalyst, Nexus and ME series devices. • Sound knowledge of LAN/WAN operations, MPLS, L3VPN, IPv6, BGP, OSPF, EIGRP, IS-IS, route filtering, redistribution, summarisation, QoS and Policy Based Routing. • Good understanding Network Security Products like Firewalls, NAC from multiple Vendors. • Good understanding of IP services such as DHCP, DNS, ARP, RADIUS, TACACS, SMTP and WCCP. • Experience reviewing IOS, IOS-XE, NX-OS and other network software releases for bug fixes, vulnerability remediation and lifecycle suitability. • Ability to interpret vendor advisories, CVEs, severity ratings, exposure data, fixed-release guidance and end-of-support information. • Experience with vulnerability/lifecycle tracking, risk assessment, change planning, implementation validation and operational handover. • Working knowledge of ServiceNow/Remedy or similar ITSM tools, ITIL aligned incident, problem and change practices. • Strong analytical capability to correlate inventory, configuration, software versions, capacity/availability data and vulnerability exposure. • Effective communication, stakeholder management and ability to present technical recommendations to peers, managers, vendors and customer teams.