1 to 25 of 55 Vulnerability Assessment Jobs

global medical device company is seeking a Vulnerability Analyst with experience in non-connected devices and known component threats to support on a 6-month contract basis . You'll support product security activity across medical device products already in the field. The role will focus on vulnerability assessment, CVE review, exploitability analysis, affected component assessment, mitigation tracking, and technical security documentation within a regulated product environment. This is not a SOC, SIEM, or infrastructure security role . It is focused on application and product vulnerability assessment. Essential Skills Vulnerability assessment experience ...

they meet security standards before deployment. Whilst there is some exposure to Cyber Incident Response activities, this is very much a hands-on security assessment role where you'll be expected to work independently and manage a consistent technical workload. What you'll be doing Assess approximately 300 applications … virtual machines within VMware to support application testing. Execute security scans against executables and installation packages. Identify vulnerabilities and provide clear remediation recommendations. Use vulnerability management tools such as Qualys (or similar) to assess security risks. Support ongoing cybersecurity project delivery within a high-profile programme. Assist with Cyber ...

supporting systems. Provide security input into formal engineering design reviews, including SRR, PDR, CDR and equivalent programme governance gates. Conduct threat modelling and risk assessment activity across ship systems, platform services, navigation, propulsion, communications, IT, OT and associated support environments. Define and assure network zoning, segregation, trust boundaries, secure … acceptance criteria. Review and assess supplier security deliverables, including security claims, compliance evidence, technical designs, assurance artefacts and software bills of materials. Support the assessment of third‐party and supply chain security risks across products, systems, components and supporting services. Scope and support vulnerability assessment, penetration testing ...

supporting systems. Provide security input into formal engineering design reviews, including SRR, PDR, CDR and equivalent programme governance gates. Conduct threat modelling and risk assessment activity across ship systems, platform services, navigation, propulsion, communications, IT, OT and associated support environments. Define and assure network zoning, segregation, trust boundaries, secure … acceptance criteria. Review and assess supplier security deliverables, including security claims, compliance evidence, technical designs, assurance artefacts and software bills of materials. Support the assessment of third-party and supply chain security risks across products, systems, components and supporting services. Scope and support vulnerability assessment, penetration testing ...

working with a well-established and highly regarded cyber security consultancy, known for delivering high-end penetration testing, vulnerability assessment and red teaming services to clients across critical sectors including telecoms, finance, defence, rail and aerospace. Their team has a strong track record of working on complex, high … sites. What you'll be doing: Planning and delivering penetration tests across networks, systems and applications, identifying vulnerabilities and security weaknesses Carrying out detailed vulnerability assessments, security audits and risk analysis, producing clear reports with practical remediation guidance Working alongside the red team to run realistic attack simulations ...

Certifications: Professional certifications such as CISSP, GCIH, GCFA, Splunk Certified Architect, or Microsoft Sentinel Ninja. Extended Security Stack: Experience with EDR, UBA, CASB, CSPM, vulnerability assessment tools, and threat intelligence platforms. Infrastructure as Code: Experience with Chef, Ansible, Jenkins, GitLab CI/CD for automated security tool deployment ...

Design approach Selecting, understanding and adapting/adopting appropriate security control frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security … authentication, least privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails ...

Design approach Selecting, understanding and adapting/adopting appropriate security control frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security … authentication, least privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails ...

solutions aligned with MOD security requirements and defence standards Design boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant boundary configurations and security baselines Incident Management & Threat Response Lead boundary security incident detection, investigation and response Manage security alerts … architecture and boundary security design Proficiency in security incident investigation and threat analysis Knowledge of security event management, SIEM and log analysis Understanding of vulnerability assessment and remediation processes Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge of managed service delivery models and SLA management ...

across SIEM and EDR platforms Manage and tune security tools including firewalls, WAFs, and endpoint protection Investigate and support response to security incidents Perform vulnerability assessments and remediation tracking Support implementation of security controls across cloud and on-prem environments Contribute to security policies, standards, and procedures Assist with ...

network segmentation and access control frameworks aligned with MOD Classification Guides Ensure network designs comply with Defence Security Policy and ITAR regulations Lead network vulnerability assessment and remediation planning Collaborate with security architects on integrated defence‐in‐depth network strategies Network Modernisation & Implementation Lead design and implementation ...

network segmentation and access control frameworks aligned with MOD Classification Guides Ensure network designs comply with Defence Security Policy and ITAR regulations Lead network vulnerability assessment and remediation planning Collaborate with security architects on integrated defence-in-depth network strategies Network Modernisation & Implementation Lead design and implementation ...

across SIEM and EDR platforms Manage and tune security tools including firewalls, WAFs, and endpoint protection Investigate and support response to security incidents Perform vulnerability assessments and remediation tracking Support implementation of security controls across cloud and on-prem environments Contribute to security policies, standards, and procedures Assist with ...

Testing Guide, PTES, and OSSTMM. Experience working within Red Team, Blue Team, and Purple Team environments. Strong knowledge of common attack techniques, threat emulation, vulnerability assessment, and exploitation methodologies. Hands-on experience with industry-standard security testing tools such as Burp Suite, Nmap, Metasploit, Nessus, Qualys, and Kali ...

Security Testing Guide (MASTG). Familiarity with: Mobile application architecture Secure coding principles Authentication and authorisation mechanisms Cryptography fundamentals API security concepts Understanding of vulnerability assessment and penetration testing methodologies. Basic scripting or programming experience. Mobile Technologies: exposure to one or more of the following: Android Kotlin Java ...

development of security policies, standards and procedures. You will oversee cybersecurity strategy, support security incidents and lead incident response. Driving continuous improvement, conducting regular vulnerability assessments. There is also a stakeholder engagement aspect which will require you to collaborate with IT, operations and business teams to embed security practices ...

application security for regulated medical device software, with key ownership across threat modelling, SBOM, software composition analysis, CVE review, secure coding, security requirements, vulnerability remediation, and product security documentation. The work is best suited to someone with strong AppSec experience who can partner with engineering teams, review software risks … existing products. Essential Skills Application Security/AppSec experience Threat modelling experience SBOM, SCA, and CVE analysis experience Secure SDLC/SSDLC experience Vulnerability assessment, remediation, and technical documentation experience Desirable Skills Experience working with regulated software, medical device software, embedded software, or non-connected products Knowledge ...

environment reviews IEC 62443, NIST SP 800-82 and NCSC CAF aligned work IT/OT convergence, segmentation and remote access reviews OT-aware vulnerability assessments using non-disruptive approaches Reporting and briefings for both engineering teams and senior stakeholders Supporting the development of a growing OT security service ...

systems, alerts, and potential threats Assist in identifying and responding to security incidents Help maintain and improve security controls, policies, and procedures Contribute to vulnerability assessments and risk analysis activities Support user awareness initiatives and promote cyber security best practices Assist with audits, compliance activities, and documentation Work collaboratively ...

also support the implementation of new security solutions, contribute to the development and maintenance of policies, standards, baselines, guidelines and procedures, and assist with vulnerability assessments and audits. The firm is constantly investing in new technologies which hopefully makes this an interesting enough opportunity to help take your security ...

also support the implementation of new security solutions, contribute to the development and maintenance of policies, standards, baselines, guidelines and procedures, and assist with vulnerability assessments and audits. The firm is constantly investing in new technologies which hopefully makes this an interesting enough opportunity to help take your security ...

also support the implementation of new security solutions, contribute to the development and maintenance of policies, standards, baselines, guidelines and procedures, and assist with vulnerability assessments and audits. The firm is constantly investing in new technologies which hopefully makes this an interesting enough opportunity to help take your security ...

also support the implementation of new security solutions, contribute to the development and maintenance of policies, standards, baselines, guidelines and procedures, and assist with vulnerability assessments and audits. The firm is constantly investing in new technologies which hopefully makes this an interesting enough opportunity to help take your security ...

also support the implementation of new security solutions, contribute to the development and maintenance of policies, standards, baselines, guidelines and procedures, and assist with vulnerability assessments and audits. The firm is constantly investing in new technologies which hopefully makes this an interesting enough opportunity to help take your security ...

also support the implementation of new security solutions, contribute to the development and maintenance of policies, standards, baselines, guidelines and procedures, and assist with vulnerability assessments and audits. The firm is constantly investing in new technologies which hopefully makes this an interesting enough opportunity to help take your security ...