226 to 250 of 676 Vulnerability Management Jobs in England

automation, and growing the engineers around you. Key responsibilities Own the operation of our corporate security controls: endpoint hardening, identity and access, privileged access, vulnerability and patch management, and access reviews. Partner with our central Security team on policy, vulnerability management and incident response. They … runs the joiner, mover and leaver process itself; you own the platform it runs on and the evidence that access was revoked. Own endpoint management across a genuinely mixed Mac, Windows and Linux fleet, covering enrolment, baselines, patching and compliance reporting. Own device and asset lifecycle and SaaS ...

continuously improve DevSecOps practices across the delivery teams, including: Secure, automated CI/CD pipelines Security scanning integrated into build, test and deployment workflows Vulnerability lifecycle management, including allowlist processes and risk acceptance where required Secrets management and identity/access management Policy enforcement for workloads … leading others): CI/CD and GitOps (e.g. GitHub Actions, Argo CD, Argo Rollouts) Security and compliance tooling (e.g. Trivy scanning and vulnerability management, HashiCorp Vault, cert-manager) Containers and orchestration (e.g. Docker, AWS EKS) Infrastructure as Code (e.g. Terraform) Observability (e.g. Grafana, Loki) Scripting and automation (e.g. ...

games, systems and data. Day to day,the Senior Security Analystwill beresponsible for identifying, prioritising, and reducing organisational cyber risk through proactive exposure management,investigating alerts andresponding to incidents.The rolewill be maintaining and optimising Cyber Security tooling as well as contributing towards the increased use of automation and AI.The … applied across the whole Cyber Security teamto ensure vulnerabilities and exposures are identified, prioritized by risk, and remediated efficientlyandtoassist with security improvements and risk management activities. This role suits someone with broad cyber security experience who is looking to deepen their expertise and make a measurable impact ...

Principal Preferred Requirements Cybersecurity Expertise: Significant experience and proven technical depth within one of the following domains of cybersecurity; security operations & incident response, threat & vulnerability management, identity & access management, cryptography, infrastructure, network, application, data, cloud Broad background across information technology with the ability to communicate clearly with … security technical SMEs at a comfortable level Excellent command of cybersecurity organisation practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies Keen understanding of national and international laws, regulations, policies and ethics related to financial industry cybersecurity Experience and understanding of both ...

that welcomes you—because when you feel valued, you’re empowered to do your best work. Job Summary The Senior Controls Engineer, OT Fleet Management, is a regional technical leader responsible for advancing the security, reliability, supportability, and lifecycle health of operational technology systems across the data center fleet. … role combines deep industrial controls expertise with strong OT network, server, virtualization, database, and cybersecurity knowledge to lead Threat Vulnerability Management (TVM) execution for building management, supervisory control, power monitoring, and related OT platforms. This engineer will translate identified vulnerabilities and technology risks into executable remediation plans ...

continuously improve DevSecOps practices across the delivery teams, including: Secure, automated CI/CD pipelines Security scanning integrated into build, test and deployment workflows Vulnerability lifecycle management, including allowlist processes and risk acceptance where required and secrets management and identity/access management;Policy enforcement … leading others): CI/CD and GitOps (e.g. GitHub Actions, Argo CD, Argo Rollouts) Security and compliance tooling (e.g. Trivy scanning and vulnerability management, HashiCorp Vault, cert-manager) Containers and orchestration (e.g. Docker, AWS EKS) ; Infrastructure as Code (e.g. Terraform) Observability (e.g. Grafana, Loki) ;Scripting and automation (e.g. ...

strong technical capability with a security-first mindset and the ability to document, manage, and continuously improve systems. Professional Experience & Core Competencies Infrastructure & Systems Management Active Directory & Windows Server: Administer servers, user accounts, group permissions, firewalls, and performance monitoring. Hardware & Domain Services: Maintainon-premisehardware/servers; manage DNS updates … domain renewals, and SSL/TLS certificates. User Support: Supported internal IT operations, including Office applications, secure email, and VPN access. Security, Compliance & Risk Management Security Administration: ManageMimecast threat logs, KnowBe4 training programs, and Secret Server credential storage. Network Security: Implementfirewallcontrols and email security standards (SMTP, TLS) to safeguard ...

Manage and execute operating system, middleware, application server, and Java platform patching, upgrades, and lifecycle maintenance across UNIX/Linux environments. Perform security hardening, vulnerability remediation, configuration management, cluster patching, rolling upgrades, rollback planning, disaster recovery validation, and post-patch testing while ensuring compliance with enterprise security … change management standards. Skills requireed for the role UNIX/Linux (RHEL, Solaris, AIX) Red Hat Satellite Ansible Oracle WebLogic OPatch JBoss EAP Java (JDK/JRE) JVM Tuning Security & Vulnerability Management Change Management Disaster Recovery Smoke Testing Disclaimer: This vacancy is being advertised by either ...

platforms and service providers, including coexistence, endpoint migration, telemetry validation, cutover, rollback and decommissioning. Define log-source onboarding, data connector, normalisation, retention, ingestion, cost-management and data-residency requirements across cloud, on-premises and third-party services. Develop detection and response architectures covering analytics rules, MITRE ATT&CK-aligned … cases, threat hunting, workbooks, watchlists, automation and SOAR playbooks. Design secure integrations with ITSM, CMDB, threat intelligence, vulnerability management, identity, network and incident response processes. Produce and own architecture artefacts including requirements, High-Level Designs (HLDs), Low-Level Designs (LLDs), reference patterns, design decisions, migration roadmaps, test criteria ...

network, cloud, endpoint and application layers Lead security architecture reviews and technical security assessments Develop security standards, reference architectures and design patterns Identity & Access Management Architect and implement enterprise IAM, MFA and Single Sign-On solutions Design Conditional Access and Privileged Access Management (PAM) capabilities Lead identity governance … administration initiatives Develop secure authentication and authorisation frameworks Ensure access management aligns with Zero Trust and least privilege principles Cyber Threat & Risk Management Assess cyber threat landscapes and design threat-informed security architectures Lead security risk assessments and vulnerability management programmes Design incident response, threat intelligence ...

Doing Security Leadership & Programme Ownership Define and execute the enterprise-wide security strategy Own capabilities across PAM, SIEM, EDR/XDR, DLP, vulnerability management, identity governance Translate regulatory obligations (FCA, PRA, ISO 27001, Lloyd’s) into practical, measurable controls Hands-On Security Engineering Implement and optimise controls across … portfolio of insurance clients Deliver security reviews, maturity assessments, and improvement plans Act as a trusted advisor on risk, controls, and security architecture Vulnerability & Risk Management Own scanning, assessment, and remediation across platforms Partner with engineering teams to prioritise and reduce risk exposure Drive continuous improvement in security ...

partner with Engineering leads to define security gating criteria. Provide expert-level remediation guidance for complex architectural flaws and critical code vulnerabilities; Enterprise Vulnerability & Risk Management: Own the end-to-end vulnerability management strategy for infrastructure and applications. Prioritise remediation efforts based on business risk ...

inefficiencies and implement automation to reduce manual effort and improve consistency and speed of response Embedding best practice frameworks and modern approaches, including exposure management, attack surface reduction and shift left principles Establishing metrics to track operational performance, efficiency gains and risk reduction outcomes Your skills and experience: Strong … understanding of cyber defence domains including vulnerability management, exposure management, SOC operations and threat intelligence Experience with security tooling such as vulnerability scanners, SIEM, EDR, identity security and attack surface management platforms Proven capability in automation using workflows, scripting or orchestration tools Knowledge of system ...

Manage and execute operating system, middleware, application server, and Java platform patching, upgrades, and lifecycle maintenance across UNIX/Linux environments. Perform security hardening, vulnerability remediation, configuration management, cluster patching, rolling upgrades, rollback planning, disaster recovery validation, and post-patch testing while ensuring compliance with enterprise security … change management standards. Skills requireed for the role UNIX/Linux (RHEL, Solaris, AIX) Red Hat Satellite Ansible Oracle WebLogic OPatch JBoss EAP Java (JDK/JRE) JVM Tuning Security & Vulnerability Management Change Management Disaster Recovery Smoke Testing #J-18808-Ljbffr ...

customers, internal stakeholders, and programme teams to ensure contractual commitments are met whilst driving operational transformation and service maturity. Key Responsibilities Service Delivery & Performance Management Accountable for end-to-end delivery of assigned programmes, ensuring 100% SLA adherence across availability, response times, and service quality metrics. Manage operational … delivery. Act as a senior escalation point for Major Incidents and complex technical issues impacting the platform. Ensure robust Change, Incident, Problem, and Configuration Management processes are followed. Maintain platform documentation, architecture diagrams, and operational runbooks. Champion continuous improvement initiatives, identifying efficiency gains and implementing operational excellence standards. Customer ...

Security Controls . Experience developing and maintaining security policies, standards, procedures and control frameworks . Strong understanding of security governance and risk management principles . Experience conducting or supporting technology/security risk assessments and maintaining risk registers. Good knowledge of security control frameworks such … NIST CSF . Experience assessing control design and effectiveness , identifying gaps and supporting remediation. Understanding of key IT security disciplines including vulnerability management, patching, identity and access management, privileged access management and backup governance . Experience supporting internal or external audits, assurance reviews and compliance programmes ...

framework, you'll play a key role in designing, implementing, and embedding broader IT governance and operational controls, ensuring critical processes such as backup, vulnerability, resilience, and operational management are effectively governed, evidenced, and continuously improved.Working closely with IT Operations, Risk, Compliance, Audit, and business stakeholders … help drive best practice across regulatory frameworks including SOX, ISO 27001, NIST and PCI, while supporting a culture of strong risk management and operational excellence.What you can expect as an IT Governance, Risk & Control Specialist:FTC – 12 month FTCHybrid role (with flexibility) – From our Kings Hill office, ME19 4UA.Not ...

Kemp House, Chawley Park, Cumnor, Oxford Reporting to: Chief Information Officer Job Summary To support and evolve our web-based Supplier Information & Risk management systems and business offerings Cyber Security Engineer The Cyber Security Engineer is responsible for establishing and maintaining the enterprise vision, strategy, and programme to ensure … risk management. Lead audit engagements and regulatory inspections related to cybersecurity. 3. Security Operations & Incident Response Oversee security operations including SOC, threat detection, and vulnerability management. Develop and maintain incident response and crisis management plans. Lead response to major security incidents and coordinate with regulators and law enforcement ...

least privilege principles. Support endpoint/server security controls. Ensure appropriate logging and security monitoring is enabled and reviewed. Support encryption and certificate-management requirements. Review infrastructure against security standards and vendor recommendations. Identify unsupported and end-of-life systems and associated risks. Support security improvements across existing infrastructure. … Oversee and engage in system upgrades, patching, configuration changes and lifecycle-management activities. Monitor Security and compliance within the SSTL infrastructure capacity, performance, availability and health. Diagnose and resolve security incidents and problems. Support backup, recovery, business continuity and disaster-recovery arrangements. Participate in infrastructure projects, migrations and technology ...

role offers the opportunity to develop broad expertise across information security, cyber resilience, risk management, and governance within a dynamic banking environment. The successful candidate will gain exposure to strategic initiatives, senior stakeholder engagement, and regulatory requirements, providing a strong foundation for career progression into senior Information Security, Risk … Management, Governance, and Resilience leadership roles. Essential Requirements 4+ years' experience in information and cyber security, preferably within banking or regulated financial services. Strong experience managing ISO 27001 ISMS, security risk assessments, audit and regulatory engagements. Sound understanding of data protection governance, operational resilience and third-party risk management. ...

role offers the opportunity to develop broad expertise across information security, cyber resilience, risk management, and governance within a dynamic banking environment. The successful candidate will gain exposure to strategic initiatives, senior stakeholder engagement, and regulatory requirements, providing a strong foundation for career progression into senior Information Security, Risk … Management, Governance, and Resilience leadership roles. Essential Requirements 4+ years' experience in information and cyber security, preferably within banking or regulated financial services. Strong experience managing ISO 27001 ISMS, security risk assessments, audit and regulatory engagements. Sound understanding of data protection governance, operational resilience and third-party risk management. ...

participate in security investigations and incident response, responding to events involving malware, data loss, phishing, or network intrusion, and supporting our data protection and vulnerability management activity. You will work both independently and collaboratively, sharing knowledge openly and supporting your colleagues across all regions. You will follow security … automation and continual improvement across monitoring and response workflows. Contribute to the development and upkeep of SOC processes, runbooks, and documentation. Run and interpret vulnerability scans using Nessus, tracking remediation through to closure with the relevant teams. Support endpoint security and patch compliance across the Windows and macOS estates ...

areas requiring attention. Produce clear reporting and insight for senior technology and business stakeholders . Identify opportunities to improve security governance, reporting, risk management and control effectiveness across the IT function. Partner with technical teams to help embed a culture of security, accountability and continuous improvement. You will ideally … Power BI. Experience managing or supporting IT/security risk registers and risk assessments . An understanding of IT security controls and disciplines, including vulnerability management, patching, identity and access management, privileged access management and backup governance . The ability to analyse complex information and turn ...

exciting opportunity for an ambitious cyber security professional looking to progress into Security Architecture while gaining hands-on experience across secure software delivery, risk management, security assurance, governance, and Defence accreditation activities. Working within a Through Life Support (TLS) environment, you will be responsible for maintaining the security posture … teams. Ensure products maintain a live security case supported by appropriate assurance evidence. Promote security best practices throughout the software development lifecycle. Security Risk Management Conduct and maintain security risk assessments using recognised risk management methodologies. Manage product-level security risk registers and track remediation activities. Assess vulnerabilities ...

applicable security standards, policies and industry best practice. Essential Skills/Experience Information Security Strategy Security Assessment Technical Security Architecture Enterprise Security Architecture Stakeholder Management Desirable Skills/Experience Extensive Cybersecurity Technical Knowledge, with a strong understanding of modern cyber security principles, technologies, threats, vulnerabilities, and best practices across … automation, digital transformation and other evolving technologies. Experience of Digital Security Operations, including tracking adversary tradecraft, building an effective threat intelligence pipeline, monitoring, detection, vulnerability management and incident handling. Membership of a professional body desirable e.g. CISSP, CISM, CCISO, GIAC certifications, CRISC. Experience driving change across a complex ...