126 to 150 of 209 Vulnerability Management Jobs in London

based on findings and stack specifics. Security Architecture and Design Advise on architecture choices for key product feature developments, including authorisation, secrets and key management, data protection, and zero-trust-aligned designs. Guide secure API and microservice patterns, including input validation, rate limiting, secure session handling, and token-based … healthcare. Assess risks from third‐party AI integrations, AI‐assisted development tooling, and agentic workflows, and implement appropriate mitigations. Security Operations and Threat Management Monitor, investigate, and respond to security alerts, incidents, and anomalous behaviour across Semble's environment. Develop and mature threat intelligence capabilities, including vulnerability management ...

system performance, availability, and security posture across environments. Automate operational and security controls using Infrastructure as Code and CI/CD pipelines. Support incident management, root cause analysis, and continuous improvement activities. Collaborate with stakeholders to implement security controls and compliance requirements. Drive improvements in observability, monitoring, logging … alerting. Conduct vulnerability remediation and support security reviews and audits. Essential Skills & Experience Active SC Clearance (mandatory). Proven experience in an SRE, DevSecOps, Platform Security, or Security Engineering role. Strong understanding of cloud platforms (AWS, Azure, or GCP). Experience with Infrastructure as Code tools such as Terraform. ...

system performance, availability, and security posture across environments. Automate operational and security controls using Infrastructure as Code and CI/CD pipelines. Support incident management, root cause analysis, and continuous improvement activities. Collaborate with stakeholders to implement security controls and compliance requirements. Drive improvements in observability, monitoring, logging … alerting. Conduct vulnerability remediation and support security reviews and audits. Essential Skills & Experience Active SC Clearance (mandatory). Proven experience in an SRE, DevSecOps, Platform Security, or Security Engineering role. Strong understanding of cloud platforms (AWS, Azure, or GCP). Experience with Infrastructure as Code tools such as Terraform. ...

Board (CAB) and leadership of an Information Security governance forum. Oversee security operations and technical controls across SIEM, firewalls, endpoint protection, identity and access management, and secure configuration. Manage cyber security across cloud and hybrid environments (Microsoft 365/Azure), including patching assurance, disaster recovery and business continuity testing. … Lead vulnerability management and security testing activity (internal scanning, external testing, remediation tracking, evidence gathering). Manage and coordinate incident response, investigation, reporting and post-incident improvement actions. Maintain compliance and evidence for key standards/frameworks, including (as applicable) PSN, PCI-DSS, Cyber Essentials Plus, GDPR ...

Board (CAB) and leadership of an Information Security governance forum. Oversee security operations and technical controls across SIEM, firewalls, endpoint protection, identity and access management, and secure configuration. Manage cyber security across cloud and hybrid environments (Microsoft 365/Azure), including patching assurance, disaster recovery and business continuity testing. … Lead vulnerability management and security testing activity (internal scanning, external testing, remediation tracking, evidence gathering). Manage and coordinate incident response, investigation, reporting and post-incident improvement actions. Maintain compliance and evidence for key standards/frameworks, including (as applicable) PSN, PCI-DSS, Cyber Essentials Plus, GDPR ...

Board (CAB) and leadership of an Information Security governance forum. Oversee security operations and technical controls across SIEM, firewalls, endpoint protection, identity and access management, and secure configuration. Manage cyber security across cloud and hybrid environments (Microsoft 365/Azure), including patching assurance, disaster recovery and business continuity testing. … Lead vulnerability management and security testing activity (internal scanning, external testing, remediation tracking, evidence gathering). Manage and coordinate incident response, investigation, reporting and post-incident improvement actions. Maintain compliance and evidence for key standards/frameworks, including (as applicable) PSN, PCI-DSS, Cyber Essentials Plus, GDPR ...

response expertise during security events. Ensure SOC detection tools and capabilities are up‐to‐date and aligned with evolving threat landscapes. Collaborate with vulnerability management, incident response, and GRC teams to integrate risk‐informed security operations practices. Drive continuous improvement of SOC processes, playbooks, and metrics to enhance ...

with, coaching and mentoring our application security engineer with running our threat modelling program, embedding security in CI/CD, and iteratively improving our vulnerability management processes. Partner with engineering leadership to ensure risk‐driven supply chain management across our product, ensuring what we bring in doesn … that considers security across the full data stack – from ingestion through to the warehouse – with a focus on access governance, data classification, and secrets management as non‐negotiables. Define how Cognism embeds AI securely as LLMs and agentic workflows move deeper into the product and our technology teams’ operations. ...

system security. Cloud or application security expertise is favoured. Experience designing, building and implementing security controls. Programming skills are required. Experience in threat and vulnerability management are desirable. Experience operating or supporting a SOC function (monitoring, triage, incident handling). Experience with SIEM concepts and detection engineering ...

responsible for delivering and operating shared platform capabilities that enable trusted data services and production-grade AI-driven workflows. Working closely with Platform Product Management, you will help ensure platforms are scalable, reliable, secure, and widely adopted across product domains while supporting innovation through high-quality engineering execution. Responsibilities … guardrail mechanisms required for safe AI workflows Implement security controls, access governance, encryption, and audit requirements in partnership with InfoSec while ensuring enterprise SDLC, vulnerability management, and change management compliance Requirements 12+ years leading platform engineering teams delivering shared services or large-scale SaaS systems with production ...

administration of Mimecast email filtering system including email review and release. * Day-to-day administration of CyberArk identity and privileged access management tooling. * Microsoft Purview administration including DLP policy monitoring, sensitivity labels, Discovery Searches and compliance alerts. * Maintain and respond to security-related DDQs, keeping the security evidence library … success in the role. * Hands-on experience with Netskope - web filtering, CASB and cloud security and/or CyberArk - identity and privileged access management would be highly desirable skills. * Experience with Rapid7, InsightVM or InsightIDR for vulnerability management and SIEM would also be highly desirable. * Experience ...

requires five days per week on‐site presence. Key Responsibilities Lead the firm's security operations function, owning threat detection, incident response, and vulnerability management end‐to‐end Monitor, triage, and respond to security events across the environment, including log analysis, anomaly detection, and threat hunting, with … practices and compliance with security policies Design and implement secure infrastructure solutions, embedding security requirements from the outset rather than retrofitting them Conduct regular vulnerability assessments and penetration testing exercises, prioritising and remediating findings in a timely manner Manage and continuously improve security tooling, including SIEM, EDR, firewalls ...

closely with development teams to identify and remediate security vulnerabilities Develop monitoring, logging and compliance controls across cloud platforms Support security incident response and vulnerability remediation activities Promote DevSecOps best practices and contribute to a strong security culture Skills & Experience Commercial experience in a DevSecOps or Cloud Security Engineering … pipelines using Azure DevOps, GitHub Actions, GitLab CI or Jenkins Infrastructure as Code experience using Terraform, CloudFormation or similar Knowledge of container security, vulnerability management and secure coding practices Familiarity with security tooling such as Checkov, Trivy, SonarQube, Prisma Cloud, Wiz or Snyk Scripting experience using Python, Bash ...

adds genuine value, including control validation, evidence collection, workflow orchestration, and compliance telemetry. Leading compliance outcomes through expertise and influence (not direct line management), working cross‐functionally with the product, engineering and platform teams in Featurespace, and the central Visa Cyber, Risk and Legal teams. Helping Featurespace integrate effectively … introduce new or materially changed obligations, and ensuring the appropriate Visa processes and assessments are engaged, including: policy and standards frameworks third‐party risk management processes security architecture assessments security awareness and training programmes legal and commercial contracting risk management and governance tooling 3. Advisory, Enablement & Secure ...

support Microsoft Intune, Microsoft Defender, Microsoft Purview and related Microsoft security technologies. Assist with SIEM configuration, alert tuning and security monitoring. Support Identity & Access Management improvements, including MFA, Conditional Access and Microsoft Entra ID. Work closely with Infrastructure, Platform and Service Desk teams to plan and implement security changes. … Assist with vulnerability management and endpoint security improvements. Support cloud security initiatives across Azure and AWS. Produce clear technical documentation and operational handover documentation. Work collaboratively with internal technical teams to ensure successful delivery of security initiatives. Essential Experience We're looking for someone with experience across several ...

/CD pipelines and DevSecOps processes. Review and analyse SAST, DAST and Software Composition Analysis (SCA) findings. Work closely with development teams to prioritise vulnerability remediation. Define security testing requirements and support penetration testing activities. Produce security standards, technical guidance and best practice documentation. Act as the Application Security … Architecture Risk Assessments DevSecOps CI/CD Security GitHub Actions GitLab Jenkins Azure DevOps Security Automation Shift Left Security Security Testing SAST DAST SCA Vulnerability Management Penetration Testing Cloud Security AWS, Azure or GCP Kubernetes Docker Container Security Cloud Security Best Practices Security Tooling Experience with ...

testing activities including SAST, DAST and software composition analysis (SCA), work with engineering teams to integrate security scanning into CI/CD pipelines, analyse vulnerability scan results and support remediation of application security issues. Threat Modelling & Security Risk Assessments – Conduct threat modelling exercises using frameworks such as STRIDE … Lifecycle (SSDLC) OWASP Top 10 and secure coding practices Application security testing (SAST/DAST/SCA) Threat modelling methodologies (STRIDE, MITRE ATT&CK) Vulnerability management and remediation Secure architecture and design reviews DevSecOps and CI/CD security integration API security and modern application architectures Experience with ...

governance Partnering with engineering, data and technology teams to embed effective security controls into products and platforms Driving improvements in security event monitoring, exposure management and alerting capabilities Conducting security reviews of new products, services and technology initiatives Building meaningful security metrics and reporting that support informed decision-making … security, governance, risk or compliance Experience building security controls and automated security solutions within modern cloud environments Knowledge of security technologies such as SIEM, vulnerability management, data protection, endpoint security or exposure management platforms Experience working with APIs, automation, scripting and infrastructure-as-code technologies Familiarity with ...

firm’s wider data, AI and innovation strategies. Overseeing security operations, monitoring, detection and response across areas such as SOC, SIEM, XDR, vulnerability management and incident response. Embedding security by design into projects, change and solution architecture, including identity, endpoint, cloud, network, email and secure remote access controls. … engagement. You will bring: Senior IT security leadership experience, ideally with exposure to CISO-level responsibilities. Strong knowledge of security operations, identity and access management, cloud and network security, endpoint protection, email security and modern models such as Zero Trust/ZTNA. Experience working with ISO27001, Cyber Essentials Plus ...

experience Excellent problem-solving and communication skills Ability to work independently and proactively improve security operations Desirable Skills Experience with SIEM technologies Familiarity with vulnerability management and patching processes Knowledge of Microsoft 365 security technologies Security certifications such as Security+, SC-200, SC-300, CEH, or CISSP Experience ...

clearance What you need Strong experience designing, building, deploying and operating SOC technologies Experience across at least two of the following: SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence Proven experience producing high-level, low-level and deployment-level technical designs Experience leading technical design activities and small ...

organisation's cyber security framework. Create and maintain security policies, standards and procedures. Monitor, investigate and respond to cyber security threats and incidents. Manage vulnerability management, patching and remediation activities. Ensure compliance with relevant security frameworks and data protection legislation. Manage identity and access management controls. Provide … security guidance for cloud services and technology projects. Lead cyber-related change management activities. Stay current with emerging threats, vulnerabilities and security technologies, making recommendations to strengthen the organisation's security posture. Minimum five years' experience in a Cyber Security or Information Security role. Experience working with Microsoft security ...

organisation's cyber security framework. Create and maintain security policies, standards and procedures. Monitor, investigate and respond to cyber security threats and incidents. Manage vulnerability management, patching and remediation activities. Ensure compliance with relevant security frameworks and data protection legislation. Manage identity and access management controls. Provide … security guidance for cloud services and technology projects. Lead cyber-related change management activities. Stay current with emerging threats, vulnerabilities and security technologies, making recommendations to strengthen the organisation's security posture. Minimum five years' experience in a Cyber Security or Information Security role. Experience working with Microsoft security ...

this role you'll investigate and respond to cyber security incidents, working closely with an external Security Operations Centre (SOC) to monitor threats, manage vulnerability remediation and strengthen the organisation's security posture. You'll work across Microsoft Security, cloud and network technologies within a complex enterprise environment, making … respond to cyber security incidents across a complex Microsoft environment * Monitor and manage security events using Microsoft Sentinel and Microsoft Defender XDR * Drive vulnerability management and remediation across cloud, network and infrastructure environments * Work closely with an external SOC and internal infrastructure teams to continuously improve the organisation ...

infrastructure, platform security, and operational readiness across the business Design and implement secure cloud environments and production‐grade infrastructure Lead security initiatives including vulnerability management, threat modelling, penetration testing, and incident response planning Build and evolve CI/CD pipelines, release management processes, and deployment automation Establish … Buildkite, CircleCI, or similar Cloud platforms, ideally GCP Observability tooling including Prometheus, Grafana, OpenTelemetry, or equivalent PostgreSQL operations, backup, recovery, and data durability Identity management, API gateways, networking, and access controls Bash and Python scripting for automation and tooling Desirable Experience Exposure to blockchain infrastructure, digital assets, or cryptocurrency ...