13 of 13 Vulnerability Management Jobs in Gloucestershire

Senior Infrastructure Engineer Gloucester £55-70k DOE Monday-Thursday 08:00-16:30 and Friday 08:00-15:00 Line Management (2 Engineers) The Senior IT Infrastructure Engineer is responsible for managing and optimising the global IT infrastructure, with primary focus on the UK region, and for acting … senior technical lead and principal escalation point within the UK IT team, providing hands-on expertise across infrastructure and security. Team Leadership and Line Management: Provide line management for two UK-based engineers (IT Infrastructure and Support Engineer and IT Support Technician), including objective setting, performance management ...

local EASA Part-IS Lead . Working as part of our global cybersecurity organisation, you'll be responsible for maintaining our Information Security Management System (ISMS), managing cyber risk, supporting compliance activities, and driving security best practices across the site. This is a corporate-directed role within a global … Tewkesbury. What You'll Do Lead EASA Part-IS compliance activities for the Tewkesbury site. Operate and maintain the site's Information Security Management System (ISMS). Monitor security events, investigate incidents, and coordinate response activities. Conduct risk assessments, vulnerability reviews, and security audits. Act as the primary ...

local EASA Part-IS Lead. Working as part of our global cybersecurity organisation, you'll be responsible for maintaining our Information Security Management System (ISMS), managing cyber risk, supporting compliance activities, and driving security best practices across the site. This is a corporate-directed role within a global organisation … Tewkesbury. What You’ll Do Lead EASA Part-IS compliance activities for the Tewkesbury site. Operate and maintain the site’s Information Security Management System (ISMS). Monitor security events, investigate incidents, and coordinate response activities. Conduct risk assessments, vulnerability reviews, and security audits. Act as the primary ...

ideally have: Significant experience designing, building or deploying Security Operations Centre solutions . Experience with at least two of the following: SIEM SOAR EDR Vulnerability Management Threat Intelligence Strong understanding of SOC operating models, including people, process, policy, services and technology . Good understanding of common cyber threats … appropriate mitigation techniques. Experience with risk assessment and vulnerability management . Strong knowledge of on-premise architecture and infrastructure . Experience designing cloud security architectures . Understanding of security principles including least privilege, encryption and secure-by-design architecture . Experience designing scalable and resilient solutions . Familiarity ...

applicable security standards, policies and industry best practice. Essential Skills/Experience Information Security Strategy Security Assessment Technical Security Architecture Enterprise Security Architecture Stakeholder Management Desirable Skills/Experience Extensive Cybersecurity Technical Knowledge, with a strong understanding of modern cyber security principles, technologies, threats, vulnerabilities, and best practices across … automation, digital transformation and other evolving technologies. Experience of Digital Security Operations, including tracking adversary tradecraft, building an effective threat intelligence pipeline, monitoring, detection, vulnerability management and incident handling. Membership of a professional body desirable e.g. CISSP, CISM, CCISO, GIAC certifications, CRISC. Experience driving change across a complex ...

continuously improve DevSecOps practices across the delivery teams, including:Secure, automated CI/CD pipelinesSecurity scanning integrated into build, test and deployment workflowsVulnerability lifecycle management, including allowlist processes and risk acceptance where required and secrets management and identity/access management;Policy enforcement for workloads, container images … leading others):CI/CD and GitOps (e.g. GitHub Actions, Argo CD, Argo Rollouts)Security and compliance tooling (e.g. Trivy scanning and vulnerability management, HashiCorp Vault, cert-manager)Containers and orchestration (e.g. Docker, AWS EKS) ; Infrastructure as Code (e.g. Terraform)Observability (e.g. Grafana, Loki) ;Scripting and automation (e.g. ...

objectives. Desirable Experience supporting UK Defence, MOD, national security, government or critical national infrastructure organisations. Knowledge of Defence security policies, assurance approaches and risk management methodologies. Experience contributing to security assurance and accreditation activities for secure systems. Familiarity with classified or sensitive environments and associated security controls. Understanding … procurement and capability delivery programmes. Beneficial Knowledge Government and industry security frameworks such as HMG Security Policy Framework (SPF), ISO 27001 and NIST. Risk management methodologies and security assurance frameworks. Enterprise and security architecture approaches including TOGAF and SABSA. Cloud security and secure digital transformation programmes. Security operations, vulnerability ...

shape and grow the wider cyber security capability. Key Responsibilities Deliver Cyber Security work packages for clients and internal delivery programmes Develop Security Management Plans Understand and define capability context; perform Risk Assessments Define and architect Security Controls Plan Vulnerability Management activity Develop Key/Certificate Management ...

Conduct compliance assessments across systems and processes to evaluate cyber and information assurance posture. Assess technical security controls across networks, systems, and infrastructure - including vulnerability management, security architecture reviews, and technical risk assessments - to inform wider assurance judgements. Develop, refine, or review security policies and procedures to align … make a real impact. You should have: Proven experience in Cyber Security & Information Assurance within Defence or UK Government environments. Strong understanding of risk management frameworks Working technical knowledge across areas such as network security, secure system architecture, vulnerability assessment/penetration testing concepts, and cloud or infrastructure ...

Design, build and maintain secure cloud-native platforms that enable rapid and reliable software delivery. Develop and improve automation frameworks for infrastructure provisioning, configuration management and operational workflows. Build and maintain CI/CD pipelines with security integrated throughout the software development lifecycle. Implement DevSecOps practices, embedding security controls … deliver pragmatic solutions. Champion platform engineering principles, self-service capabilities and developer experience improvements. Design and implement secure software supply chain practices including vulnerability management, dependency scanning and automated compliance checks. Troubleshoot complex infrastructure, deployment and operational issues. Contribute to technical direction, architecture discussions and engineering standards. Requirements ...

designed in from the start. Assign pragmatic risk levels and support sensible prioritisation of remediation alongside feature delivery and other technical work. Support vulnerability remediation, including root cause analysis and long-term fixes. Track the security of third-party components and dependencies within our products, and lead our response … engineering in a software-led environment. Practical experience applying security across the software development lifecycle, including areas such as threat modelling, secure coding, testing, vulnerability management and secure delivery. Good understanding of how product and development teams operate, including how security considerations are balanced alongside product delivery. ...

Lead to design, implement and govern secure DevSecOps practices across delivery teams. You will automate CI/CD pipelines, drive security scanning, and oversee vulnerability management and IaC governance. Experience with AWS/EKS, Terraform and Vault is essential, plus SC clearance readiness for UK government engagements. ...

checks and work with developers to apply IaC and compliance standards. This role requires experience with AWS/EKS, GitHub Actions, Argo CD, and vulnerability management, plus SC clearance or eligibility. You will contribute to a modern, compliant platform engineering function within Digital #J-18808-Ljbffr ...