1 to 25 of 92 Vulnerability Assessment Jobs

global medical device company is seeking a Vulnerability Analyst with experience in non-connected devices and known component threats to support on a 6-month contract basis . You'll support product security activity across medical device products already in the field. The role will focus on vulnerability assessment, CVE review, exploitability analysis, affected component assessment, mitigation tracking, and technical security documentation within a regulated product environment. This is not a SOC, SIEM, or infrastructure security role . It is focused on application and product vulnerability assessment. Essential Skills Vulnerability assessment experience ...

/suggest remediation plans; and recommending application security training paths. This also includes responsibility for protecting applications in production by enrolling them for continuous assessment of existing and emerging threats, evaluating web application firewalls; tuning WAF rules; reviewing alerts; and identifying issues as appropriate. Essential Responsibilities: Completes work assignments … upstream and downstream solution components. Supports information sharing and integration procedures across cyber security through the exchange of threat intelligence and cyber security vulnerability assessment data. Contributes to cyber security intellectual capital by making process or procedure improvements, conducting brown bag training sessions, and creating new training documents. ...

international defence programme. The new SOC will protect complex Microsoft Cloud and on-premises environments operating across multiple regions and classification levels. The Security Vulnerability Management Engineer will take a key role in designing, deploying and configuring the vulnerability management capability for the new SOC. This position will … focus on enterprise vulnerability management tooling, risk-based vulnerability assessment, integrations with wider SOC platforms and the development of effective workflows, reporting and operational processes. Whats on offer Salary: £72,000 £82,000 10% annual bonus Opportunity to help build a major new SOC and vulnerability ...

supporting systems. Provide security input into formal engineering design reviews, including SRR, PDR, CDR and equivalent programme governance gates. Conduct threat modelling and risk assessment activity across ship systems, platform services, navigation, propulsion, communications, IT, OT and associated support environments. Define and assure network zoning, segregation, trust boundaries, secure … acceptance criteria. Review and assess supplier security deliverables, including security claims, compliance evidence, technical designs, assurance artefacts and software bills of materials. Support the assessment of third‐party and supply chain security risks across products, systems, components and supporting services. Scope and support vulnerability assessment, penetration testing ...

supporting systems. Provide security input into formal engineering design reviews, including SRR, PDR, CDR and equivalent programme governance gates. Conduct threat modelling and risk assessment activity across ship systems, platform services, navigation, propulsion, communications, IT, OT and associated support environments. Define and assure network zoning, segregation, trust boundaries, secure … acceptance criteria. Review and assess supplier security deliverables, including security claims, compliance evidence, technical designs, assurance artefacts and software bills of materials. Support the assessment of third-party and supply chain security risks across products, systems, components and supporting services. Scope and support vulnerability assessment, penetration testing ...

/suggest remediation plans; and recommending application security training paths. This also includes responsibility for protecting applications in production by enrolling them for continuous assessment of existing and emerging threats, evaluating web application firewalls; tuning WAF rules; reviewing alerts; and identifying issues as appropriate. Essential Responsibilities: Completes work assignments … maintenance of standardized security tools, templates, and processes across assigned business domain(s). Performs security test data analysis in support of security vulnerability assessment processes, including root cause analysis. Executes the vulnerability assessment and penetration testing plan, methodologies, and standard processes for moderately complex technology ...

working with a well-established and highly regarded cyber security consultancy, known for delivering high-end penetration testing, vulnerability assessment and red teaming services to clients across critical sectors including telecoms, finance, defence, rail and aerospace. Their team has a strong track record of working on complex, high … sites. What you'll be doing: Planning and delivering penetration tests across networks, systems and applications, identifying vulnerabilities and security weaknesses Carrying out detailed vulnerability assessments, security audits and risk analysis, producing clear reports with practical remediation guidance Working alongside the red team to run realistic attack simulations ...

considering Location: Secure Room, Inverness (On-site) Working Hours: Mon -Fri 9.00am - 5.30pm The Security TDA, Governance Risk, Compliance and Vulnerability Assessment Lead is responsible for leading governance, risk, compliance, vulnerability management assessment, and security design assurance across a complex, multi-technology environment. The role combines … maintain security policies aligned to ISO 27001 and Cyber Essentials Plus Manage Security Risk Register, controls, RACI and RBAC model Lead risk identification, assessment, treatment and reporting Support audits and assurance activities Contribute to Disaster Recovery, Business Continuity and security incident management, covering tracking, remediation, RCA, and reporting Conduct ...

with security, infrastructure, risk, and compliance teams, you'll deliver practical solutions that enhance both security posture and operational efficiency. Day to day : Analyse vulnerability assessment and penetration testing findings to identify security and infrastructure risks. Apply patches, upgrades, configuration changes, and other remediation activities to address vulnerabilities … progress, challenges, and outcomes. Monitor, track, and manage remediation activities to ensure timely completion and resolution. Maintain accurate documentation of remediation actions and update vulnerability management platforms and tracking tools. Produce reports and dashboards that demonstrate remediation effectiveness, risk reduction, and outstanding actions. Support cyber incident response activities ...

Technical proficiency in a wide range of cyber risk management services, including cyber threat, risk and control assessments, secure software development practices, penetration testing, vulnerability assessments, among others Sound knowledge of applicable laws, compliance regulations, and industry standards as it relates to privacy, security, and compliance Sound knowledge ...

Responsibilities Monitor security alerts and investigate potential threats using SIEM tooling Support incident response activities, from initial triage through to resolution and reporting Conduct vulnerability assessments and coordinate remediation with technical teams Assist with security control reviews and audits against frameworks such as ISO 27001, NIST CSF, and Cyber ...

Senior Manager, Cyber Security Control Center you will be responsible for managing the tools and services along with overseeing security events, incidents and vulnerability for our client's security environment. Job Description We are looking for a Senior Manager, Cyber Security Control Center to manage the deployment, ongoing tuning … response (MDR) tools and services, endpoint detection solutions, software logging and scanning tools, and other cybersecurity solutions while overseeing security event, incident, and vulnerability assessment and remediation efforts. This position will be a full-time contract and hybrid in the Chicago loop . There is no relocation ...

skills. Desirable Skills AWS and Azure cloud security. Containerised environments and SaaS security solutions. Python, PowerShell, SPL, KQL, and SQL. EDR, UBA, CASB, CSPM, vulnerability assessment, and threat intelligence platforms. CI/CD tools such as GitLab and Jenkins. Infrastructure as Code using Chef or Ansible. Knowledge ...

Certifications: Professional certifications such as CISSP, GCIH, GCFA, Splunk Certified Architect, or Microsoft Sentinel Ninja. Extended Security Stack: Experience with EDR, UBA, CASB, CSPM, vulnerability assessment tools, and threat intelligence platforms. Infrastructure as Code: Experience with Chef, Ansible, Jenkins, GitLab CI/CD for automated security tool deployment ...

cyber security domains end-to-end and driving practical improvements to reduce cyber risk. The role combines analyst and engineering responsibilities across security tools, vulnerability and exposure management, web and email security, incident response, and threat-informed remediation. The role works closely with infrastructure, cloud, application, identity and business … deliver measurable improvements to the organisation cyber defence posture. Owned or materially contributed to one or more cyber security domains, such as endpoint security, vulnerability management, identity security, network security, incident response or Microsoft 365/Azure security. Used CrowdStrike or equivalent EDR tooling to investigate detections, support incident ...

platforms, and IT-GRC platforms Assist with project management for cyber security technology and process implementations such as security architecture, cloud security, DevSecOps, risk assessment, incident response, Risk Management Framework (RMF), penetration testing, vulnerability assessment, vendor and third-party risk management data privacy and program delivery Qualifications ...

Certifications: Professional certifications such as CISSP, GCIH, GCFA, Splunk Certified Architect, or Microsoft Sentinel Ninja. Extended Security Stack: Experience with EDR, UBA, CASB, CSPM, vulnerability assessment tools, and threat intelligence platforms. Infrastructure as Code: Experience with Chef, Ansible, Jenkins, GitLab CI/CD for automated security tool deployment ...

cyber security domains end-to-end and driving practical improvements to reduce cyber risk. The role combines analyst and engineering responsibilities across security tools, vulnerability and exposure management, web and email security, incident response, and threat-informed remediation. The role works closely with infrastructure, cloud, application, identity and business … deliver measurable improvements to the organisation cyber defence posture. Owned or materially contributed to one or more cyber security domains, such as endpoint security, vulnerability management, identity security, network security, incident response or Microsoft 365/Azure security. Used CrowdStrike or equivalent EDR tooling to investigate detections, support incident ...

evaluating new tools/technologies to support a comprehensive defense-in-depth strategy Integrate security controls into the software development lifecycle (DevSecOps), perform application vulnerability assessments, and establish secure application onboarding processes for enterprise environments Support secure cloud migration initiatives, ensuring on-premise infrastructures and applications are safely transitioned ...

Conduct compliance assessments across systems and processes to evaluate cyber and information assurance posture. Assess technical security controls across networks, systems, and infrastructure - including vulnerability management, security architecture reviews, and technical risk assessments - to inform wider assurance judgements. Develop, refine, or review security policies and procedures to align with … within Defence or UK Government environments. Strong understanding of risk management frameworks Working technical knowledge across areas such as network security, secure system architecture, vulnerability assessment/penetration testing concepts, and cloud or infrastructure security controls. Familiarity with government and defence security standards such as: HMG/NCSC ...

Design approach Selecting, understanding and adapting/adopting appropriate security control frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security … authentication, least privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails ...

Design approach Selecting, understanding and adapting/adopting appropriate security control frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security … authentication, least privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails ...

solutions aligned with MOD security requirements and defence standards Design boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant boundary configurations and security baselines Incident Management & Threat Response Lead boundary security incident detection, investigation and response Manage security alerts … architecture and boundary security design Proficiency in security incident investigation and threat analysis Knowledge of security event management, SIEM and log analysis Understanding of vulnerability assessment and remediation processes Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge of managed service delivery models and SLA management ...

solutions aligned with MOD security requirements and defence standards Design boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant boundary configurations and security baselines Incident Management & Threat Response Lead boundary security incident detection, investigation and response Manage security alerts … architecture and boundary security design Proficiency in security incident investigation and threat analysis Knowledge of security event management, SIEM and log analysis Understanding of vulnerability assessment and remediation processes Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge of managed service delivery models and SLA management ...

solutions aligned with MOD security requirements and defence standards Design boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant boundary configurations and security baselines Incident Management & Threat Response Lead boundary security incident detection, investigation and response Manage security alerts … architecture and boundary security design Proficiency in security incident investigation and threat analysis Knowledge of security event management, SIEM and log analysis Understanding of vulnerability assessment and remediation processes Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge of managed service delivery models and SLA management ...