8 of 8 Vulnerability Management Jobs in Cambridgeshire

role in protecting Cambridge University Press & Assessment's information assets and strengthening our security posture. You will lead assurance activity across security testing, risk management, governance and compliance, working closely with technology, security and business teams to identify risks, improve controls and support secure ways of working. This … shape practical security guidance, and ensure assurance activities are embedded across our technology environment. Lead security assurance activity across areas such as attack surface management, vulnerability management, penetration testing and security posture improvement. Work with technology and security teams to identify, assess and remediate vulnerabilities across systems ...

security is embedded throughout the entire product lifecycle. The Staff Product Security Engineer serves as a recognized security subject matter expert, partnering with product management, engineering leadership, certification teams, and executive stakeholders to establish security roadmaps, enhance security capabilities, and address emerging threats. This role combines deep technical expertise … into product design, development, deployment, and maintenance processes. Lead threat modeling activities for critical systems, products, and architectures. Conduct and oversee advanced security assessments, vulnerability investigations, attack surface analyses, and risk evaluations. Design, implement, and review security controls, cryptographic protections, and system hardening mechanisms. Lead investigations of critical security ...

ensuring security is embedded throughout the entire product lifecycle.The Staff Product Security Engineer serves as a recognized security subject matter expert, partnering with product management, engineering leadership, certification teams, and executive stakeholders to establish security roadmaps, enhance security capabilities, and address emerging threats. This role combines deep technical expertise … security requirements into product design, development, deployment, and maintenance processes.Lead threat modeling activities for critical systems, products, and architectures.Conduct and oversee advanced security assessments, vulnerability investigations, attack surface analyses, and risk evaluations.Design, implement, and review security controls, cryptographic protections, and system hardening mechanisms.Lead investigations of critical security issues ...

helping to maintain strong cyber security and compliance standards. This is a fantastic opportunity to play a pivotal role in the day-to-day management of IT systems, ensuring users receive a high level of support while maintaining secure, reliable, and compliant technology environments. The role is fully site … supporting Microsoft 365, Azure, hardware, and software solutions. * Solid networking knowledge, including TCP/IP, DNS, DHCP, VPNs, and firewalls. * Excellent communication and stakeholder management skills. * A proactive, solutions-focused approach with strong attention to detail. * The ability to work effectively in a fully on-site environment and provide ...

platforms and automation capabilities. Drive the adoption of DevSecOps practices across the software delivery lifecycle. Implement and support security controls, governance processes, and access management solutions. Integrate security scanning, compliance validation, and vulnerability management into engineering workflows. Develop automation solutions that improve efficiency and reduce manual intervention. … understanding of DevSecOps principles and security-focused engineering practices. Experience working with modern cloud and infrastructure technologies. Knowledge of Infrastructure-as-Code and configuration management approaches. Experience operating within large, complex, and highly governed environments. Strong stakeholder management and cross-functional collaboration skills. Reasonable Adjustments: Respect and equality ...

call,assessing new CVEs,vulnerabilitiesand supply-chain risk against our real infrastructure, not just a checklist. Running hands-on audits covering pen testing, vulnerability management, supply-chain security, bringing technical judgement, not just policy references. Owning our governance, risk and compliance frameworks, and keeping them honest, turning policy … into controls that actually work at the infrastructure and code level. Automating the parts of GRC that don't need a human (vulnerability tooling, endpoint protection rollout, policy-to-enforcement mapping), so the function scales without the busywork. Building real product and infrastructure knowledge, so you become the person ...

platforms.Proven track record in secure architecture design, threat modelling, and risk assessment across multi-domain products.Hands-on experience with secure boot, TPM, cryptographic key management, and secure OTA updates, security on the cloudFamiliarity with DevSecOps pipelines, CI/CD security tooling, and vulnerability management.Hands-on experience with compliance ...

programming and product development. Strong focus on Linux-based systems, including Yocto build systems, and Linux kernel Proven experience with code signing, private key management (HSM), and vulnerability management. Experience with ARM microcontrollers Bonus Skills Familiar with network protocols Experience with Jenkins CI/CD pipelines and automated ...