1 to 25 of 59 Vulnerability Assessment Jobs

team. This is a hands-on role with a clear development path - ideal for someone with around one to two years of experience in vulnerability assessment or junior penetration testing who wants structured progression toward deeper VAPT capability in a real client environment. The consultancy works with clients … mentoring, funded certifications, and a performance-based progression model, not a time-served one. About the Role: The primary focus of the role is vulnerability assessment, external attack surface management, scan management, finding validation, and remediation follow-up. Alongside that, you'll be carrying out practical penetration testing ...

global medical device company is seeking a Vulnerability Analyst with experience in non-connected devices and known component threats to support on a 6-month contract basis . You'll support product security activity across medical device products already in the field. The role will focus on vulnerability assessment, CVE review, exploitability analysis, affected component assessment, mitigation tracking, and technical security documentation within a regulated product environment. This is not a SOC, SIEM, or infrastructure security role . It is focused on application and product vulnerability assessment. Essential Skills Vulnerability assessment experience ...

they meet security standards before deployment. Whilst there is some exposure to Cyber Incident Response activities, this is very much a hands-on security assessment role where you'll be expected to work independently and manage a consistent technical workload. What you'll be doing Assess approximately 300 applications … virtual machines within VMware to support application testing. Execute security scans against executables and installation packages. Identify vulnerabilities and provide clear remediation recommendations. Use vulnerability management tools such as Qualys (or similar) to assess security risks. Support ongoing cybersecurity project delivery within a high-profile programme. Assist with Cyber ...

supporting systems. Provide security input into formal engineering design reviews, including SRR, PDR, CDR and equivalent programme governance gates. Conduct threat modelling and risk assessment activity across ship systems, platform services, navigation, propulsion, communications, IT, OT and associated support environments. Define and assure network zoning, segregation, trust boundaries, secure … acceptance criteria. Review and assess supplier security deliverables, including security claims, compliance evidence, technical designs, assurance artefacts and software bills of materials. Support the assessment of third‐party and supply chain security risks across products, systems, components and supporting services. Scope and support vulnerability assessment, penetration testing ...

supporting systems. Provide security input into formal engineering design reviews, including SRR, PDR, CDR and equivalent programme governance gates. Conduct threat modelling and risk assessment activity across ship systems, platform services, navigation, propulsion, communications, IT, OT and associated support environments. Define and assure network zoning, segregation, trust boundaries, secure … acceptance criteria. Review and assess supplier security deliverables, including security claims, compliance evidence, technical designs, assurance artefacts and software bills of materials. Support the assessment of third-party and supply chain security risks across products, systems, components and supporting services. Scope and support vulnerability assessment, penetration testing ...

configuration management and maintenance of information systems and data. Assist program security in the development of policies and procedures for emerging security technologies. Support vulnerability assessment activities as required. Support the evaluation, qualification, testing and delivery of security architecture improvement, obsolescence replacement and vulnerability response projects. Experience … configuration and use of cyber defense and vulnerability assessment tools such as ACAS, Nessus and SCC. Ability to work individually or as part of a cybersecurity team. Must be able provide direction based on program and customer requirements and compliance. Possess excellent speaking abilities and skills to brief ...

join Jacobs' Cyber Security team as an Endpoint Security & Exposure Management Engineer. You'll play a key role in reducing cyber risk by driving vulnerability remediation, strengthening endpoint security controls, and improving visibility of security exposure across a global technology estate. Working across infrastructure, cloud, desktop engineering, and security … identified, prioritised, and remediated effectively while supporting key security capabilities including application control, privilege management, and endpoint hardening. If you're passionate about vulnerability management, exposure reduction, and delivering measurable security outcomes, this is an opportunity to make a real impact within a global organisation. Day to Day Lead ...

working with a well-established and highly regarded cyber security consultancy, known for delivering high-end penetration testing, vulnerability assessment and red teaming services to clients across critical sectors including telecoms, finance, defence, rail and aerospace. Their team has a strong track record of working on complex, high … sites. What you'll be doing: Planning and delivering penetration tests across networks, systems and applications, identifying vulnerabilities and security weaknesses Carrying out detailed vulnerability assessments, security audits and risk analysis, producing clear reports with practical remediation guidance Working alongside the red team to run realistic attack simulations ...

architecture baseline across the Anti‐Piracy estate, reviewing on‐premises and cloud platforms to identify security gaps, risks, and improvement opportunities. Own and drive vulnerability management across infrastructure and applications, including vulnerability analysis, penetration testing, exploit research, and remediation tracking. Conduct security assessments across IPTV ecosystems, applications … trust, least privilege, and risk‐based security approaches, with awareness of standards such as ISO 27001 and NIST CSF. Experience of, or exposure to, vulnerability management processes, including vulnerability assessment, remediation tracking, risk prioritisation, and security testing activities. Understanding of security operations concepts, including security monitoring, incident ...

NIST Cybersecurity Framework (CSF). Monitor policy compliance and support internal and external audit requirements. Maintain and update security policies, procedures, and documentation. Vulnerability Management & Reporting Coordinate regular vulnerability scanning activities across systems, networks, and applications. Analyse vulnerability assessment and penetration testing reports. Prioritise identified risks ...

Azure or Google Cloud Understanding of network security, encryption, authentication and access control Experience with security tooling such as SIEM, IDS, firewalls and vulnerability assessment tools Knowledge of threat modelling and risk assessment TO BE CONSIDERED: Please either apply through this advert or emailing me directly … application to our client in conjunction with this vacancy only. KEY SKILLS Security Architect, Cyber Security, ISO 27001, NIST, Cloud Security, AWS, Azure, Risk Assessment, Threat Modelling, SIEM, Defence ...

Azure or Google Cloud Understanding of network security, encryption, authentication and access control Experience with security tooling such as SIEM, IDS, firewalls and vulnerability assessment tools Knowledge of threat modelling and risk assessment TO BE CONSIDERED: Please either apply through this advert or emailing me directly … application to our client in conjunction with this vacancy only. KEY SKILLS Security Architect, Cyber Security, ISO 27001, NIST, Cloud Security, AWS, Azure, Risk Assessment, Threat Modelling, SIEM, Defence ...

Certifications: Professional certifications such as CISSP, GCIH, GCFA, Splunk Certified Architect, or Microsoft Sentinel Ninja. Extended Security Stack: Experience with EDR, UBA, CASB, CSPM, vulnerability assessment tools, and threat intelligence platforms. Infrastructure as Code: Experience with Chef, Ansible, Jenkins, GitLab CI/CD for automated security tool deployment ...

solutions aligned with MOD security requirements and defence standards Design boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant boundary configurations and security baselines Incident Management & Threat Response Lead boundary security incident detection, investigation and response Manage security alerts … architecture and boundary security design Proficiency in security incident investigation and threat analysis Knowledge of security event management, SIEM and log analysis Understanding of vulnerability assessment and remediation processes Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge of managed service delivery models and SLA management ...

across SIEM and EDR platforms Manage and tune security tools including firewalls, WAFs, and endpoint protection Investigate and support response to security incidents Perform vulnerability assessments and remediation tracking Support implementation of security controls across cloud and on-prem environments Contribute to security policies, standards, and procedures Assist with ...

network segmentation and access control frameworks aligned with MOD Classification Guides Ensure network designs comply with Defence Security Policy and ITAR regulations Lead network vulnerability assessment and remediation planning Collaborate with security architects on integrated defence‐in‐depth network strategies Network Modernisation & Implementation Lead design and implementation ...

across SIEM and EDR platforms Manage and tune security tools including firewalls, WAFs, and endpoint protection Investigate and support response to security incidents Perform vulnerability assessments and remediation tracking Support implementation of security controls across cloud and on-prem environments Contribute to security policies, standards, and procedures Assist with ...

Testing Guide, PTES, and OSSTMM. Experience working within Red Team, Blue Team, and Purple Team environments. Strong knowledge of common attack techniques, threat emulation, vulnerability assessment, and exploitation methodologies. Hands-on experience with industry-standard security testing tools such as Burp Suite, Nmap, Metasploit, Nessus, Qualys, and Kali ...

Security Testing Guide (MASTG). Familiarity with: Mobile application architecture Secure coding principles Authentication and authorisation mechanisms Cryptography fundamentals API security concepts Understanding of vulnerability assessment and penetration testing methodologies. Basic scripting or programming experience. Mobile Technologies: exposure to one or more of the following: Android Kotlin Java ...

provide clear evidence of effective controls and ensure audit actions are owned and closed across the technology estate. Security Operations & Assurance – Oversee penetration testing, vulnerability assessments and other validation activities to ensure security controls remain effective. This includes ensuring suppliers and partners meet agreed security standards through robust ...

development of security policies, standards and procedures. You will oversee cybersecurity strategy, support security incidents and lead incident response. Driving continuous improvement, conducting regular vulnerability assessments. There is also a stakeholder engagement aspect which will require you to collaborate with IT, operations and business teams to embed security practices ...

application security for regulated medical device software, with key ownership across threat modelling, SBOM, software composition analysis, CVE review, secure coding, security requirements, vulnerability remediation, and product security documentation. The work is best suited to someone with strong AppSec experience who can partner with engineering teams, review software risks … existing products. Essential Skills Application Security/AppSec experience Threat modelling experience SBOM, SCA, and CVE analysis experience Secure SDLC/SSDLC experience Vulnerability assessment, remediation, and technical documentation experience Desirable Skills Experience working with regulated software, medical device software, embedded software, or non-connected products Knowledge ...

environment reviews IEC 62443, NIST SP 800-82 and NCSC CAF aligned work IT/OT convergence, segmentation and remote access reviews OT-aware vulnerability assessments using non-disruptive approaches Reporting and briefings for both engineering teams and senior stakeholders Supporting the development of a growing OT security service ...

systems, alerts, and potential threats Assist in identifying and responding to security incidents Help maintain and improve security controls, policies, and procedures Contribute to vulnerability assessments and risk analysis activities Support user awareness initiatives and promote cyber security best practices Assist with audits, compliance activities, and documentation Work collaboratively ...

mechanisms at platform level Assist with diagnostics and debugging , including secure use of debug interfaces and logs Support security verification and testing activities , including vulnerability assessment and issue remediation Work closely with cyber security architects, platform engineers, and system teams to ensure security requirements are correctly implemented Contribute ...