Threat & Vulnerability Senior Specialist

About Planet 

Planet is a global provider of integrated technology and payments solutions for retail and hospitality customers.  

We create great experiences for the millions of people who use our payments, software, and tax-free solutions every minute of every day. 

Planet empowers its customers to deliver great customer experiences by combining payments and software in ways that drive greater loyalty, increase revenue and save time. 

Founded over 35 years ago and with our headquarters in London, today we have more than 2,500 employees located across six continents serving our customers in more than 120 markets. 

Role Overview:

As the Threat and Vulnerability Management (TVM) Lead, you will collaborate with the SOC, the broader security teams and other stakeholders to support, enhance, and mature the threat and vulnerability management capability.

What you will do:

• Act as the SME for threat and vulnerability management tools and processes (Rapid7, Defender, and attack surface management), ensuring effective deployment, maintenance, and optimisation.
• Use threat intelligence to correlate exploitable vulnerabilities with active threats, TTPs, and adversary behaviour.
• Help teams prioritise vulnerabilities based on risk, asset criticality, and exploitability.
• Own the framework for vulnerability reporting ensuring resolver teams understand and can address vulnerabilities.
• Improve detection, triage, and remediation workflows through process refinement and testing.

Who you are:

• Relevant industry certifications in vulnerability management, threat intelligence, or security operations (e.g., GCTI, BTL1, BTL2, PSAA, PORP, Security+, CySA+).
• Hands-on experience with vulnerability management tools (e.g., Rapid7 InsightVM, Microsoft Defender Vulnerability Management)
• Knowledge in attack surface management and exposure reduction strategies.
• Knowledge of threat intelligence and its application in vulnerability prioritisation (e.g., MITRE ATT&CK, CVSS, EPSS, TI feeds).
• Experience integrating and automating TVM processes using automation tools
• Knowledge of cloud security best practices and vulnerability management in Azure, AWS, and GCP.
• Understanding of threat modelling and attack path analysis to assess real-world risk.
• Experience working with security teams and stakeholders to improve remediation workflows and risk-based decision-making.