Vulnerability management
Finding, assessing, prioritising, and fixing technical vulnerabilities, including scanning, penetration testing, and patching.
Levels
- 1. Awareness
You can:
- explain why prompt patching and secure configuration matter
- 2. Working
You can:
- run vulnerability scans and report the results
- track fixes with system owners
- 3. Practitioner
You can:
- prioritise vulnerabilities by risk, including to patient services
- scope and manage penetration tests and remediation
- 4. Expert
You can:
- set the vulnerability management policy and its targets
- report technical security risk to senior leaders
Closest ESCO skills
Contains ESCO v1.2.1 data (https://esco.ec.europa.eu/). © European Union. Reuse authorised under Commission Decision 2011/833/EU.
Role levels that expect this skill
| Role level | Role | Band | Expected level |
|---|---|---|---|
| Cyber security manager | Cyber security manager | 8a | Practitioner |
| Junior DevOps engineer | DevOps engineer | 5 | Awareness |
| DevOps engineer | DevOps engineer | 6 | Working |
| Senior DevOps engineer | DevOps engineer | 7 | Practitioner |
| Lead DevOps engineer | DevOps engineer | 8b | Practitioner |
| Principal DevOps engineer | DevOps engineer | 8c | Expert |
| End user computing engineer | End user computing engineer | 5 | Awareness |
| Senior end user computing engineer | End user computing engineer | 6 | Working |
| Lead end user computing engineer | End user computing engineer | 7 | Practitioner |
| Principal end user computing engineer | End user computing engineer | 8b | Practitioner |
| Associate infrastructure engineer | Infrastructure engineer | 4 | Awareness |
| Infrastructure engineer | Infrastructure engineer | 6 | Working |
| Senior infrastructure engineer | Infrastructure engineer | 7 | Practitioner |
| Lead infrastructure engineer | Infrastructure engineer | 8a | Practitioner |
| Principal infrastructure engineer | Infrastructure engineer | 8b | Expert |
| Network architect | Network architect | 7 | Working |
| Lead network architect | Network architect | 8a | Practitioner |
| Security architect | Security architect | 8a | Practitioner |
| Lead security architect | Security architect | 8b | Practitioner |
| Principal security architect | Security architect | 8c | Practitioner |
| Security engineer | Security engineer | 6 | Working |
| Senior security engineer | Security engineer | 7 | Practitioner |
| Lead security engineer | Security engineer | 8a | Practitioner |
| Junior security operations analyst | Security operations analyst | 5 | Working |
| Security operations analyst | Security operations analyst | 6 | Working |
| Senior security operations analyst | Security operations analyst | 7 | Practitioner |