Threat and Vulnerability Management Jobs in the UK

1 to 25 of 57 Threat and Vulnerability Management Jobs in the UK

Cyber Incident Management and Threat and Vulnerability Management Governance Analyst

City, Edinburgh, United Kingdom
STATE STREET CORPORATION
Who we are looking for State Street seeks to recruit a Cyber Incident Management (CIM) and Threat and Vulnerability Management (TVM) Governance Analyst responsible for a variety of functions within the Fusion & Security Operations (F&SO) Governance Program at State Street. This includes gathering, analyzing, and enriching … data for utilization on scorecards and related governance reporting related to CIM and TVM within the State Street environment. This role requires an individual with deep knowledge of CIM and TVM, including cyber incident detection, assessment, response, and recovery, Patch Management, and infrastructure penetration testing within a corporate environment. … What you will be responsible for As a CIM and TVM Governance Analyst you will: Produce regular reporting related to the governance of the CIM Program and TVM Program to assess compliance with the Information Protection Standard Distribute reporting to various committees, councils, and regulatory reporting forums as required Engage More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Threat Intelligence Analyst

Leeds, Yorkshire, United Kingdom
BAE Systems (New)
Location(s): UK, Europe & Africa : UK : Leeds BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the … most demanding environments. Cyber Threat Intelligence and Vulnerability Lead Job Title: Cyber Threat Intelligence and Vulnerability Lead Requisition ID: 121483 Location: Leeds (this is a 100% office based role due to the nature of the project) Grade: GG10 - GG11 Referral Bonus: £5,000 Role Description BAE Systems have … been contracted to undertake the day to day operation of (and incremental improvement of) a dedicated Security Operations Centre (SOC) to support the defence of a major UK Critical National Infrastructure (CNI) organisation. The networks protected are predominantly hosted in cloud platforms, with many hundred systems within these environments that More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

IT Security Manager

Maidenhead, Berkshire, United Kingdom
iCIMS, Inc
Overview The IT Security Manager (ITSM) acts as an interface between the Executive Director of IT and IT Security strategic and process-based activities and the work of the technology-focused analysts, engineers, and administrators in the Information Technology (IT) organization. The ITSM is a leadership role that requires an … individual with a strong technical background, as well as an ability to work with the IT organization and business management to align priorities and plans with key business objectives. This role and its function are part of the Information Technology shared services model. A Team Member in a shared … service structure works within a dedicated business unit (including people, processes, and technologies) that is structured as a centralized point of service and is focused on defined business functions. These units typically serve multiple business groups enterprise-wide and typically have established Service Level Agreements. Responsibilities Translates the IT-risk More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

GRC Lead

London Area, United Kingdom
BGC Group
Cantor Fitzgerald’s Global Information Security team is seeking a Governance, Risk, and Compliance (GRC) Lead with expertise on managing cyber risk, ensuring compliance with regulatory requirements, and maintaining corporate controls. This role will be primarily responsible for leading efforts related to third-party risk management, client due diligence … awareness training, and regulatory compliance. The ideal candidate will have a strong grasp of cybersecurity threats and hands-on experience. Key Responsibilities Governance Risk and Compliance Advise project teams, application owners, infrastructure services, and other IT teams on information security controls, such as access management, incident handling, business continuity … system development lifecycle, threat and vulnerability management, and data protection. Identify and manage risks and vulnerabilities, providing strategic mitigation recommendations. Continuously improve policies and procedures related to controls and operational processes. Develop and deliver precise and timely metrics and reports. Third-Party Risk Management: Conduct risk assessments More ❯
Posted:

GRC Lead

london, south east england, united kingdom
BGC Group
Cantor Fitzgerald’s Global Information Security team is seeking a Governance, Risk, and Compliance (GRC) Lead with expertise on managing cyber risk, ensuring compliance with regulatory requirements, and maintaining corporate controls. This role will be primarily responsible for leading efforts related to third-party risk management, client due diligence … awareness training, and regulatory compliance. The ideal candidate will have a strong grasp of cybersecurity threats and hands-on experience. Key Responsibilities Governance Risk and Compliance Advise project teams, application owners, infrastructure services, and other IT teams on information security controls, such as access management, incident handling, business continuity … system development lifecycle, threat and vulnerability management, and data protection. Identify and manage risks and vulnerabilities, providing strategic mitigation recommendations. Continuously improve policies and procedures related to controls and operational processes. Develop and deliver precise and timely metrics and reports. Third-Party Risk Management: Conduct risk assessments More ❯
Posted:

DevSecOps Engineer

London Area, United Kingdom
Hazeltree
Inc. Hazeltree is a global leader in cloud-based treasury solutions, empowering investment firms with cutting-edge technology to optimize financial performance, enhance liquidity, and mitigate risk. As part of our commitment to security and innovation, we are expanding our Information Security Team and seeking a DevSecOps Engineer to drive … security automation and best practices across our cloud infrastructure and IT operations. Job Overview As a DevSecOps Engineer , you will play a pivotal role in integrating security practices into our DevOps pipeline and IT operations . Working at the intersection of operations, security, and development , you will collaborate closely with … internal teams to safeguard critical business operations by design and default. You will be responsible for security automation, CI/CD pipeline enhancements , and cloud security management , ensuring compliance with industry standards. Key Responsibilities Security & DevOps Integration: Support and extend the secured CI/CD pipeline to enhance development More ❯
Posted:

DevSecOps Engineer

london, south east england, united kingdom
Hazeltree
Inc. Hazeltree is a global leader in cloud-based treasury solutions, empowering investment firms with cutting-edge technology to optimize financial performance, enhance liquidity, and mitigate risk. As part of our commitment to security and innovation, we are expanding our Information Security Team and seeking a DevSecOps Engineer to drive … security automation and best practices across our cloud infrastructure and IT operations. Job Overview As a DevSecOps Engineer , you will play a pivotal role in integrating security practices into our DevOps pipeline and IT operations . Working at the intersection of operations, security, and development , you will collaborate closely with … internal teams to safeguard critical business operations by design and default. You will be responsible for security automation, CI/CD pipeline enhancements , and cloud security management , ensuring compliance with industry standards. Key Responsibilities Security & DevOps Integration: Support and extend the secured CI/CD pipeline to enhance development More ❯
Posted:

SOC Lead

Basingstoke, Hampshire, South East, United Kingdom
Hybrid / WFH Options
Queen Square Recruitment Limited
a leading global consultancy that is searching for a contractor with the following skillset to work on a 6 months contract.If you are interested and have the relevant experience, please apply promptly and we will contact you to discuss it further. Job Title: SOC Lead Location: Hybrid (3 days in … office ) About the Role We are seeking a highly skilled SOC Lead to oversee cyber incident response, threat intelligence, and vulnerability management for a leading organization. This role will act as a trusted advisor to senior leadership, ensuring a structured and effective response to cyber incidents while driving … improvements in incident management processes. Key Responsibilities Lead and coordinate responses to significant cyber incidents, ensuring effective and timely resolution. Act as a subject matter expert, advising senior leadership on business impacts and risk mitigation strategies. Develop and implement cyber incident containment plans and remediation strategies. Oversee incident investigations More ❯
Employment Type: Contract
Posted:

Global Cyber Security Manager

London, United Kingdom
Hybrid / WFH Options
Oritain
to be the source of truth in global supply chains. Our mission is to build a world-class business that will evolve for decades and help create a tangible difference in our world. Oritain is the global leader in scientifically verifying origin, notably in the cotton/textiles, food, and … pharmaceutical sectors. We exist to protect the reputations of our customers and US borders by identifying and mitigating well-known risks in global supply chains. Sustainability isn't just about tackling climate change; it represents a growing conscience around our actions and their impact on people, animals, and the planet. … The personal, professional, and governmental move to sustainable practice is driven by a desire to change our impact on the world. We can only do this by knowing the certainty of our actions. Take the Lead as Our Global Cybersecurity Expert! As a result of our continued growth, we're More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Security Operations Centre Team Lead

Plymouth, Devon, South West, United Kingdom
Hybrid / WFH Options
Inspire People
HM Land Registry ('HMLR') and Inspire People are bringing you an exciting opportunity for a Security Operations Centre Technical Team Lead. You will provide technical leadership for the Security Operations Centre team providing technical oversight and direction. You will engage with various teams across DDaT to maintain security monitoring, threat … intelligence and vulnerability management controls to detect and alert across all HM Land Registry technical assets. Salary of £46,058 - £57,400 dependent upon interview assessment plus excellent Civil Service benefits and 28% pension contribution. Flexible, hybrid working from Plymouth. Job description You will take forward technical consolidation … and/or improvement activities providing guidance and leadership to technicians within the IT Operations Practice and wider, whilst also working across DDaT to support and deliver solutions in line with the Technology and Business Strategies. Working closely with the Lead Infrastructure Engineers and subject matter experts, you will develop More ❯
Employment Type: Permanent, Work From Home
Salary: £55,000
Posted:

Cybersecurity Engineer

United Kingdom
Alight Solutions
Cyber Security Engineer Reports to: Director/VP of Security Architecture & Engineering About Strada Global Strada Global is a leading provider of HR and payroll services, empowering businesses worldwide with innovative technology and secure, scalable solutions. As we continue to evolve, cybersecurity is at the core of our strategy, ensuring … the protection of critical data, customer trust, and regulatory compliance. Strada is in the midst of a major transformation, separating from our previous parent company and building a security-first culture to enable business growth. This is an exciting time to join as we migrate IT systems, strengthen cyber resilience … and develop a world-class security function. Role Overview The Cyber Security Engineer will play a critical role in designing, implementing, and maintaining security solutions that protect Strada's cloud and on-prem infrastructure. This role will be deeply technical and hands-on, working across security operations, engineering, and risk More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

DevSecOps Engineer

London Area, United Kingdom
McCabe & Barton
o£75k + bonus + benefits. 3 days in office The ideal candidate will have deep expertise in integrating security practices into the Infrastructure and DevOps pipelines, with a strong focus on endpoint protection, secure networking practices, and infrastructure security. You will be working as part of the infrastructure team … to provide hands-on support to various teams across the company, including infrastructure platform, development, front office, and innovation teams, ensuring the secure operation of their services. Key Responsibilities: Implement and manage security tools and technologies: Deploy and manage security solutions such as Microsoft Sentinel for SIEM and Tanium for … Threat and Vulnerability Management (TVM). Conduct security assessments and vulnerability scans: Regularly assess the security posture of applications and infrastructure, identifying and mitigating vulnerabilities. Monitor and respond to security incidents and alerts: Continuously monitor security systems for signs of breaches or anomalies and respond promptly to More ❯
Posted:

Information Security Engineer - Development and Automation

London, United Kingdom
UnitedHealth Group
Information Security Engineer - Development and Automation - UK, Remote Optum is a global organisation that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources … they need to feel their best. Here, you will find a culture guided by diversity and inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health equity on a global scale. Join us to start Caring. … no limits here on the resources you'll have or the challenges you'll encounter. We have been supporting global healthcare systems from Ireland and the UK for more than 20 years, building a dynamic and diverse team of more than 2,100 talented individuals. With a continued record of More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Chief Information Security Officer

Milton Keynes, Buckinghamshire, South East, United Kingdom
Hybrid / WFH Options
FCDO Services
Chief Information Security Officer £58,123 plus £1,750 location allowance and excellent benefits, including Civil Service pension Full time Based at Hanslope Park near Milton Keynes, with the flexibility of hybrid working depending on business need Free shuttle bus available between central Milton Keynes and Hanslope Park An expert … in information security and information risk management, this may be the most unique and important opportunity in your career to date. Not only will you assure data that matters hugely to the interests of the UK and our partners around the world. Youll also have scope to reshape the … way we do digital assurance. If youve got the skills and vision, this is your chance to step into a leadership role of great importance, with a small team of specialists who are passionate about our essential work. At FCDO Services, we protect the UKs interests at home and overseas. More ❯
Employment Type: Permanent, Work From Home
Salary: £55,000
Posted:

Senior Manager Cyber Transformation Management

Belfast, United Kingdom
Hybrid / WFH Options
Deloitte LLP
Manchester Business Line Date published: 02-Mar-2025 Connect to your Industry Cyber security is critical to every organisation. We are shaping cyber strategies and transforming the management of cyber risk and we need you to join us. You'll build strong relationships as one of the areas of … our cyber practice with over 450 extremely talented individuals in the UK alone, as part of a UK Technology and Transformation practice of 7500 people. Cyber security is a business problem, not just a technical problem, and we need people with a diverse array of backgrounds and skills sets to … help our clients solve the problems they face. Join us and you will help our clients solve the latest cyber security challenges, in a business with very significant growth ambitions, enjoying the kind of professional development that will set your potential free. Responsibilities Providing guidance and support to executives to More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Senior Manager Cyber Transformation Management

London, United Kingdom
Hybrid / WFH Options
Deloitte LLP
Manchester Business Line Date published: 02-Mar-2025 Connect to your Industry Cyber security is critical to every organisation. We are shaping cyber strategies and transforming the management of cyber risk and we need you to join us. You'll build strong relationships as one of the areas of … our cyber practice with over 450 extremely talented individuals in the UK alone, as part of a UK Technology and Transformation practice of 7500 people. Cyber security is a business problem, not just a technical problem, and we need people with a diverse array of backgrounds and skills sets to … help our clients solve the problems they face. Join us and you will help our clients solve the latest cyber security challenges, in a business with very significant growth ambitions, enjoying the kind of professional development that will set your potential free. Responsibilities Providing guidance and support to executives to More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Senior Manager Cyber Transformation Management

Manchester, Lancashire, United Kingdom
Hybrid / WFH Options
Deloitte LLP
Manchester Business Line Date published: 02-Mar-2025 Connect to your Industry Cyber security is critical to every organisation. We are shaping cyber strategies and transforming the management of cyber risk and we need you to join us. You'll build strong relationships as one of the areas of … our cyber practice with over 450 extremely talented individuals in the UK alone, as part of a UK Technology and Transformation practice of 7500 people. Cyber security is a business problem, not just a technical problem, and we need people with a diverse array of backgrounds and skills sets to … help our clients solve the problems they face. Join us and you will help our clients solve the latest cyber security challenges, in a business with very significant growth ambitions, enjoying the kind of professional development that will set your potential free. Responsibilities Providing guidance and support to executives to More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Senior Manager Cyber Transformation Management

Bristol, Gloucestershire, United Kingdom
Hybrid / WFH Options
Deloitte LLP
Manchester Business Line Date published: 02-Mar-2025 Connect to your Industry Cyber security is critical to every organisation. We are shaping cyber strategies and transforming the management of cyber risk and we need you to join us. You'll build strong relationships as one of the areas of … our cyber practice with over 450 extremely talented individuals in the UK alone, as part of a UK Technology and Transformation practice of 7500 people. Cyber security is a business problem, not just a technical problem, and we need people with a diverse array of backgrounds and skills sets to … help our clients solve the problems they face. Join us and you will help our clients solve the latest cyber security challenges, in a business with very significant growth ambitions, enjoying the kind of professional development that will set your potential free. Responsibilities Providing guidance and support to executives to More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Senior Manager Cyber Transformation Management

Cardiff, South Glamorgan, United Kingdom
Hybrid / WFH Options
Deloitte LLP
Manchester Business Line Date published: 02-Mar-2025 Connect to your Industry Cyber security is critical to every organisation. We are shaping cyber strategies and transforming the management of cyber risk and we need you to join us. You'll build strong relationships as one of the areas of … our cyber practice with over 450 extremely talented individuals in the UK alone, as part of a UK Technology and Transformation practice of 7500 people. Cyber security is a business problem, not just a technical problem, and we need people with a diverse array of backgrounds and skills sets to … help our clients solve the problems they face. Join us and you will help our clients solve the latest cyber security challenges, in a business with very significant growth ambitions, enjoying the kind of professional development that will set your potential free. Responsibilities Providing guidance and support to executives to More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Information Security Engineer

United Kingdom
Hybrid / WFH Options
watchTowr
We are watchTowr, a VC-backed cyber security startup helping organisations continuously discover vulnerabilities in their Internet-facing attack surface. Cyber security veterans and technical experts, we are obsessed with building cybersecurity technology to help prevent breaches. With experience informed by years of simulating sophisticated cyber attacks against some of … our mission is to enable organisations to continuously understand how an attacker would successfully compromise their business-with cutting-edge Attack Surface Management and Continuous Automated Red Teaming technology. watchTowr was named within Gartner's Emerging Tech Impact Radar report in 2023, in Gartner's Innovation Impact report for … ASM in 2024, and is utilised by Fortune 500 and other large enterprises globally. Our research is well-known and respected across the cybersecurity industry and can be found in various news outlets-while fuelling the watchTowr Platform. We are a young, high-energy, and high-performing team delivering world More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Security Analyst

London Area, United Kingdom
NDK Cyber
Overview: We’re seeking a proactive and detail-oriented Information Security Analyst to join a London based Banks growing security function. Reporting to the Cyber Security Manager , you will support the daily operational security activities across the business. This role is ideal for a professional with 2–3 years' experience … structured environment in a security analyst or security operations role. You'll focus on daily log analysis, vulnerability management support, antivirus monitoring, and helping to close security-related incidents. Key Responsibilities: 🔍 Security Monitoring & Analysis Review, monitor, and analyze daily security logs using SIEM tools (e.g., Splunk, Sentinel, Defender … . Identify false positives, escalate true positives, and assist in incident investigations. Support service desk and IT teams with closing out security-related calls and incidents. 🛠️ Threat & Vulnerability Management Assist with running and analyzing vulnerability scans; help track remediation. Monitor and manage endpoint protection and antivirus alerts. More ❯
Posted:

Security Analyst

london, south east england, united kingdom
NDK Cyber
Overview: We’re seeking a proactive and detail-oriented Information Security Analyst to join a London based Banks growing security function. Reporting to the Cyber Security Manager , you will support the daily operational security activities across the business. This role is ideal for a professional with 2–3 years' experience … structured environment in a security analyst or security operations role. You'll focus on daily log analysis, vulnerability management support, antivirus monitoring, and helping to close security-related incidents. Key Responsibilities: 🔍 Security Monitoring & Analysis Review, monitor, and analyze daily security logs using SIEM tools (e.g., Splunk, Sentinel, Defender … . Identify false positives, escalate true positives, and assist in incident investigations. Support service desk and IT teams with closing out security-related calls and incidents. 🛠️ Threat & Vulnerability Management Assist with running and analyzing vulnerability scans; help track remediation. Monitor and manage endpoint protection and antivirus alerts. More ❯
Posted:

Senior Cloud & Apps Security Engineer

London, Tottenham Court Road, United Kingdom
Amtis Professional Ltd
+ Bonus + Benefits Remote/London 1-2 days p/m AWS, Azure, Kubernetes, Service Mesh, API gateways, and API security, Python, JavaScript, GoLang, Terraform, CloudFormation (AWS), and Azure Resource Manager (ARM) templates. Are you passionate about cloud security and eager to engineer robust security solutions within AWS … and Azure environments? We are seeking Senior Cloud & Application Security Engineers to help our client define and implement its cloud security strategy. If you're an experienced Security Engineering professional excited to work with cutting-edge technology and collaborate with diverse teams, we want to hear from you! Key Skills … Strong understanding of cloud and application security concepts, including secure coding practices, threat modeling, vulnerability management, and access control mechanisms. Experience with AWS, Azure, Kubernetes, Service Mesh, API gateways, and API security (authentication and authorization). Proficiency in programming languages such as Python, JavaScript, GoLang, Terraform, CloudFormation (AWS More ❯
Employment Type: Permanent
Salary: £80000 - £110000/annum
Posted:

Security Operations Center Analyst

Peterborough, England, United Kingdom
Hybrid / WFH Options
Hamilton Barnes 🌳
Level 3 Security Analyst Role: As a Level 3 Security Analyst, you will be at the forefront of our Security Operations Center (SOC), monitoring and responding to security incidents, performing threat analysis, and contributing to the continuous improvement of our cybersecurity services. You will work within a dynamic team, ensuring … digital assets while maintaining service excellence. Level 3 Analysts will take on additional responsibilities, such as mentoring junior team members, leading complex incident investigations, and driving strategic security improvements. What’s in it for you? Work with cutting-edge security technologies and develop expertise in industry-leading tools. Be part … of an award-winning cybersecurity team with a clear path for career progression. Hybrid working environment with opportunities for professional growth and certification support. Responsibilities: Monitor, analyse, and respond to security events and incidents within the SOC, ensuring timely detection and resolution in line with SLAs. Conduct thorough threat analysis More ❯
Posted:

Infrastructure Engineer - Meraki

City, London, United Kingdom
Michael Page (UK)
as well as providing BAU Support to 200 users across the business. Key Responsibilities Include: Network Architecture & Management (Cisco Meraki) Lead network design and management across schools using Cisco Meraki. Optimize Meraki wireless, switching, and security appliances. Manage VLANs, segmentation, and network performance. Collaborate with vendors and internal … teams on connectivity and ISP engagement. Infrastructure, Cloud & Security Administer Microsoft 365 and Google Workspace tenants (user provisioning, MFA, licensing, Conditional Access). Manage Azure cloud services, focusing on performance, identity, and cost control. Oversee IAM, including Azure AD, SSO, and policy enforcement. Maintain SSL certificates across infrastructure. Manage MDM … platforms (Intune, Jamf) across the organisation. Implement and maintain IT security policies aligned with global standards. Coordinate external security assessments, audits, and penetration testing. Develop and maintain business continuity and disaster recovery strategies. Security Strategy & Compliance Regularly audit system configurations and permissions. Lead endpoint protection, external threat prevention, and vulnerability More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:
Threat and Vulnerability Management
10th Percentile
£57,500
25th Percentile
£62,500
Median
£85,000
75th Percentile
£93,250
90th Percentile
£121,500