301 to 325 of 645 Vulnerability Management Jobs in England

services including EC2, ECS, Fargate, S3, and RDS. Progressing and establishing our foundational AWS Control Tower and Landing Zones architecture. Executing Cloud Security Posture Management (CSPM) and vulnerability management using tools like Snyk and various AWS security services. Owning infrastructure projects end-to-end, from the initial ...

services including EC2, ECS, Fargate, S3, and RDS. Progressing and establishing our foundational AWS Control Tower and Landing Zones architecture. Executing Cloud Security Posture Management (CSPM) and vulnerability management using tools like Snyk and various AWS security services. Owning infrastructure projects end-to-end, from the initial ...

grade or similarly secure environments such as defence. Hybrid London based Service Owner - Service Experience Proven experience as a Service Owner, Head of Service Management, Service Delivery Manager or equivalent senior role.Lead end-to-end service management, service desk, portals, self-service, NOC/APM monitoring and continual … improvement. implementing service automation, self-service platforms, service catalogues or knowledge management services SIAM and multi-supplier environments. NOC, APM, automation, self-service, service catalogue or knowledge-management implementation. GDS Service Standard and government service management experience. ITIL 4 Managing Professional, Strategic Leader or equivalent. Service Owner ...

problem-solving and analytical thinking Enjoy collaborating with multiple stakeholders in a fast-paced environment Strong background in cyber security consulting, security architecture, risk management or security operations. Good understanding of common security domains, including identity and access management, cloud security, application security, data protection, vulnerability management ...

Intact Insurance is seeking a Cyber Defence Transformation Analyst to drive continuous improvement, automation, and data-driven security capabilities. You will focus on vulnerability management, exposure management, and SOC operations to align with evolving threats and business priorities. Responsibilities include delivering a roadmap for tooling improvements, embedding ...

Engineer and Analyst while remaining technically active, coordinating complex security projects across a range of departments. You are the bridge between high-level risk management and technical execution, ensuring that security enables - rather than hinders - our global growth. Job Responsibilities Direct Management: Lead, mentor, and set the roadmap … Information Security Engineer and Analyst. Focus on career development and technical cross-skilling. Workflow Management: Act as the "Traffic Controller" for the team, using Kanban to prioritise high-value tasks and ensuring the team stays focused on meaningful risk reduction rather than just "noise." Cross-Functional Liaison: Partner with ...

Assurance Officer is responsible for ensuring that GSA implements and maintains all mandatory information and cyber‐security controls required under the client Information Security Management Plan (ISMP), associated security documentation and governance agreements with parent companies. The role provides assurance across corporate and project systems, oversees integration with client … security operations, ensures subcontractor compliance, and leads the development and operation of a robust Information Security Management System (ISMS) aligned to ISO/IEC 27001. You will act as the central authority for information security governance, incident management and continuous improvement across the organisation. What ...

Developing the information security plans and policies for NSSLGlobal and Customers working with Security Management and Compliance functions to embed security management plans into operational practice Implementing protections and solutions to ensure and enforce the information security plans and policies Monitoring and collating information from monitoring tools … testing for vulnerabilities and recommending improvements. To participate and support all internal IT & Engineering teams including providing advice and expertise on the design and management of internal, customer and global networks from a cybersecurity perspective. Creating documentation around policies, procedures and events. Who we are: NSSLGlobal Group ...

risks, supporting requirements and effectiveness evidence. Maintain alignment between controls, regulatory obligations, contractual requirements and recognised cyber security frameworks. Establish robust governance and change management processes to support the continual improvement of the control’s framework. Work closely with the Cyber Risk Manager to ensure controls are identified, assessed … emerging threats, incidents, audits and lessons learned. Provide leadership and direction to the Cyber Controls Specialist, ensuring the effective delivery of cyber controls management activities. Controls Monitoring & Assurance Support compliance and regulatory activities by providing control evidence and demonstrating control effectiveness. Collaborate with assurance teams to align control monitoring ...

objectives. Desirable Experience supporting UK Defence, MOD, national security, government or critical national infrastructure organisations. Knowledge of Defence security policies, assurance approaches and risk management methodologies. Experience contributing to security assurance and accreditation activities for secure systems. Familiarity with classified or sensitive environments and associated security controls. Understanding … procurement and capability delivery programmes. Beneficial Knowledge Government and industry security frameworks such as HMG Security Policy Framework (SPF), ISO 27001 and NIST. Risk management methodologies and security assurance frameworks. Enterprise and security architecture approaches including TOGAF and SABSA. Cloud security and secure digital transformation programmes. Security operations, vulnerability ...

objectives. Desirable Experience supporting UK Defence, MOD, national security, government or critical national infrastructure organisations. Knowledge of Defence security policies, assurance approaches and risk management methodologies. Experience contributing to security assurance and accreditation activities for secure systems. Familiarity with classified or sensitive environments and associated security controls. Understanding … procurement and capability delivery programmes. Beneficial Knowledge Government and industry security frameworks such as HMG Security Policy Framework (SPF), ISO 27001 and NIST. Risk management methodologies and security assurance frameworks. Enterprise and security architecture approaches including TOGAF and SABSA. Cloud security and secure digital transformation programmes. Security operations, vulnerability ...

project requirements, responsibilities may also include: Proactive threat hunting Detection engineering and use-case development Incident response playbook creation Threat intelligence collection and analysis Vulnerability assessment and reporting Security change approval activities Security capability enhancement initiatives Essential Skills & Experience Demonstrable experience working within a Security Operations Centre (SOC) environment. … following areas would be advantageous: Detection Engineering and Alert Development Threat Hunting Threat Intelligence Analysis Security Automation and Orchestration Incident Response Playbook Development Vulnerability Management Cloud Security (AWS, Azure, GCP) Digital Forensics On-Call Requirement This role includes participation in an on-call rota, averaging approximately one week ...

Govern security controls across the full stack: Kafka, .NET/C#, Vue.js, Kong API Gateway, Auth0, and Salesforce. Lead threat modelling, penetration testing, and vulnerability management programmes. Own identity and access management strategy, including Entra ID, Auth0, and partner federation. Drive security engineering best practices within product … Partner with the DPO on data governance and breach notification obligations. Manage third-party and supply chain security risk, including critical outsourcing oversight. Incident management & operations: Own the security incident response plan; lead major incident management for cyber events. Operate and improve security monitoring, SIEM, and alerting across ...

schema creation, and operational workflows across cloud and on-premises platforms; Support production systems with a focus on high availability, disaster recovery, incident response, vulnerability management, patching, and change management; Containerize applications and support deployments using container orchestration platforms; Partner with development teams to understand application codebases … architecture, improving deployment, monitoring, and operational readiness; Use infrastructure as code and configuration management tools such as Terraform, Chef, or Ansible to drive consistency and repeatability; Troubleshoot complex deployment, performance, networking, and infrastructure issues, preventing recurring manual fixes through automation; Use AI-assisted engineering tools to accelerate development, automation ...

through to resolution within the team’s operating model.Maintain internal IT services including LAN, wireless, VOIP and mobile telephony, and support IT procurement, supplier management and hardware refresh.Automation, Monitoring & Continuous ImprovementDevelop and maintain automation and scripts for repeatable operational tasks.Maintain effective monitoring, alerting and dashboards across metrics … effective use of modern tooling including AI-assisted development and automation.Security, Documentation & CollaborationOperate infrastructure with a security-first approach, applying access controls, hardening and vulnerability remediation in line with company policies.Support logging, monitoring and security tooling, and assist with investigation and remediation of security alerts.Plan and deliver changes ...

consistency of security delivery. Key Responsibilities: Cloud Security Engineering Build and maintain reusable cloud security guardrails for identity, logging, encryption, network segmentation, secrets management, storage, workloads, containers, serverless services, and data protection. Translate security architecture standards into deployable cloud patterns, reference implementations, templates, and engineering‐ready requirements. Partner with … related cloud security tooling. Develop policy‐as‐code and control‐as‐code mechanisms to prevent, detect, and report common cloud misconfigurations. Support cloud‐native vulnerability and misconfiguration remediation by providing prioritization logic, remediation guidance, and reusable fix patterns. Establish cloud security metrics and dashboards covering control adoption, misconfiguration trends ...

consistency of security delivery. Key Responsibilities: Cloud Security Engineering Build and maintain reusable cloud security guardrails for identity, logging, encryption, network segmentation, secrets management, storage, workloads, containers, serverless services, and data protection. Translate security architecture standards into deployable cloud patterns, reference implementations, templates, and engineering-ready requirements. Partner with … related cloud security tooling. Develop policy-as-code and control-as-code mechanisms to prevent, detect, and report common cloud misconfigurations. Support cloud-native vulnerability and misconfiguration remediation by providing prioritization logic, remediation guidance, and reusable fix patterns. Establish cloud security metrics and dashboards covering control adoption, misconfiguration trends ...

Configuring, maintaining and supporting security technologies across on-premises, cloud and SaaS environments. Supporting firewalls, VPNs, endpoint protection, email security, identity and access controls, vulnerability management and security monitoring platforms. Coordinating vulnerability assessments and working with system owners to track remediation through to completion or formal acceptance. … services and applications. You'll also bring: Practical knowledge of TCP/IP, firewalls, VPNs, DNS, DHCP, certificates and SSL/TLS. Experience with vulnerability scanning, secure configuration assessments and remediation tracking. An understanding of common attack techniques, security monitoring and incident response. Knowledge of the OWASP ...

improve the organisation’s security posture across cloud and technology environments. This role has a strong focus on platform security assessments, cloud security posture management (CSPM), and the use of security tools to detect misconfigurations, vulnerabilities, and control gaps. The successful candidate will work closely with engineering, infrastructure … secure-by-design practices. Key Responsibilities: Conduct security assessments of platforms, applications, and cloud environments to identify risks, misconfigurations, and control weaknesses. Use CSPM, vulnerability management, and related security tools to continuously monitor cloud and platform security posture. Review configurations across cloud services, infrastructure, identity, networking, containers ...

align technical initiatives with business goals. Security Oversight: Ensure compliance with security standards and frameworks (e.g., Microsoft best practice, CIS, NIST). Oversee vulnerability management in terms of patching and incident response. Work closely with SOC teams to remediate and maintain a secure client environment. Automation & Tooling: Design … development of team members. Set clear objectives and performance expectations for the team members. Promote a culture of innovation, accountability and continuous improvement. Escalations Management: Offer escalation support and guidance to team members and other employees. Resolve escalated IT support issues promptly and effectively. o Make sure that Service ...

EMEA) to join our growing team. Reporting to the Global Security Manager, you will be responsible for supporting and enhancing information security, compliance, risk management, and business resilience activities across our UK and European operations. This is an excellent opportunity for a security professional who enjoys balancing technical security … Checks. Conduct internal audits, control reviews, and risk assessments. Maintain and monitor the organisational risk register. Support business continuity and resilience planning activities. Coordinate vulnerability scanning, penetration testing, and remediation programmes. Assist with the investigation and resolution of information security incidents. Deliver security awareness initiatives, user training, and phishing ...

adopting robust development practices, including software design, verification, validation, traceability, cybersecurity, and risk management. Partner with Software, Systems, Quality, Regulatory, Scientific, and Product Management teams throughout the product lifecycle. Contribute technical expertise to product planning, technology roadmaps, and architectural governance activities. Champion secure-by-design principles and help ensure … modern engineering practices. Experience working within regulated software development environments, including quality, safety, and cybersecurity considerations. Experience contributing to software verification, validation, requirements management, traceability, risk management, and software lifecycle activities. Ability to influence technical direction across multidisciplinary organisations through expertise, collaboration, and leadership. Strong communication skills with ...

Develop and maintain technical roadmaps aligned with business goals, collaborating with leadership to prioritize initiatives Design, implement, and continuously improve automated provisioning and systems management pipelines (CI/CD for IT tooling, endpoint management) Research and evaluate new technologies, tools, and vendors; lead proof-of-concept efforts … Assist with or own high-complexity onboarding and offboarding workflows, ensuring security and access policies are followed Perform and improve maintenance activities: backups, patch management, license audits, and monitoring Create and improve IT documentation and internal knowledge bases Respond to critical incidents and drive root cause analysis and permanent ...

implement coordinated security strategies, policies, and procedures, while educating employees on best practices Provide intelligence services to JPMorgan Chase acquisitions, including drafting and disseminating vulnerability and intelligence reports. Liaise regularly with acquisitions to maintain lines of communication, understand and document their cybersecurity posture and unique challenges, identifying uplift opportunities … analysts on the team Required qualifications, capabilities, and skills Minimum 3 years of experience in cybersecurity operations, including threat detection, incident response, or vulnerability management Proven experience in network trace analysis, log analysis, vulnerability assessment, exploitation techniques, and security investigations in response to security incidents Proficiency ...

Days Home) Type: Full-time, Permanent Overview A leading financial technology organisation is looking to appoint an Information Security Officer to support the management and continuous improvement of information and cyber security across the business. This is a broad security role covering governance, risk, compliance, third party assurance … security who wants broad responsibility rather than specialising solely in one area. Key Responsibilities Support the development and continual improvement of the Information Security Management System Identify, assess, treat and report information security, cyber, technology and third party risks Conduct security risk assessments, control reviews and assurance activities Support ...