126 to 150 of 366 Vulnerability Management Jobs in London

iProov is seeking a Cyber Security Engineer to strengthen hands-on security capabilities across security operations, vulnerability management and IT security. The role is based at WeWork Waterloo, London, in a hybrid arrangement with engineers and technical teams. You will work with Security Ops, Vulnerability Management ...

Engineer (Endpoint Management and Intune) Business area Digital Services Location London Job ID 324994 Location – London, with hybrid working in line with departmental requirements Lane Clark & Peacock (LCP) is an award-winning partnership operating across pensions and benefits, investments, insurance, energy, health, sports and data analytics. We combine industry … continue to evolve, LCP is strengthening its End User Computing (EUC) engineering capability. This role will help drive improvements in endpoint governance, modern device management, application lifecycle management, automation and secure endpoint standards across the firm. The EUC Engineer (endpoint management and Intune) is responsible ...

platform. As part of our continued investment in security operations, you will serve as the internal owner of both our Security Information and Event Management (SIEM) platform and our managed Security Operations Centre (SOC). You will define our detection strategy, hold our service provider to the highest standards … Head of Information Security. Key responsibilities Cloud and corporate security Own the run-time security posture of our AWS environment, including identity and access management (IAM), organisational guardrails, logging coverage and the remediation of cloud security findings Secure our corporate environment, including Google Workspace, endpoints and SaaS applications, partnering ...

Senior Information Security Engineer London to £150k Are you an experienced Information Security professional with Investment Management experience? You could be progressing your career, working at the intersection of technology, security and governance within a fast paced Hedge Fund. As a Senior Information Security Engineer, you'll lead … experience in a Systems/Infrastructure Security Engineer or similar technical security role You have a strong knowledge of Network/endpoint security operations, vulnerability management and threat assessment You have experience with Linux/Unix systems administration and hardening, Windows systems security and Group Policy management ...

Security Controls . Experience developing and maintaining security policies, standards, procedures and control frameworks . Strong understanding of security governance and risk management principles . Experience conducting or supporting technology/security risk assessments and maintaining risk registers. Good knowledge of security control frameworks such … NIST CSF . Experience assessing control design and effectiveness , identifying gaps and supporting remediation. Understanding of key IT security disciplines including vulnerability management, patching, identity and access management, privileged access management and backup governance . Experience supporting internal or external audits, assurance reviews and compliance programmes ...

markets. This Senior Associate sits within the Policy & Risk team, part of the wider Governance and Human Risk function. The role focuses on the management and maintenance of the Cyber & Information Resilience Policy Framework, including associated standards, procedures and guidance. You will help to support and articulate the organisations … such as ISO 27001, NIST Cybersecurity Framework (CIS), CIS Controls Essential: Understanding of technical security controls, including network security, cloud security, identity and access management and vulnerability management Working knowledge of Information Management practices and Data Privacy legislation Demonstrated experience in dealing with stakeholders ...

platforms and service providers, including coexistence, endpoint migration, telemetry validation, cutover, rollback and decommissioning. Define log-source onboarding, data connector, normalisation, retention, ingestion, cost-management and data-residency requirements across cloud, on-premises and third-party services. Develop detection and response architectures covering analytics rules, MITRE ATT&CK-aligned … cases, threat hunting, workbooks, watchlists, automation and SOAR playbooks. Design secure integrations with ITSM, CMDB, threat intelligence, vulnerability management, identity, network and incident response processes. Produce and own architecture artefacts including requirements, High-Level Designs (HLDs), Low-Level Designs (LLDs), reference patterns, design decisions, migration roadmaps, test criteria ...

areas requiring attention. Produce clear reporting and insight for senior technology and business stakeholders . Identify opportunities to improve security governance, reporting, risk management and control effectiveness across the IT function. Partner with technical teams to help embed a culture of security, accountability and continuous improvement. You will ideally … Power BI. Experience managing or supporting IT/security risk registers and risk assessments . An understanding of IT security controls and disciplines, including vulnerability management, patching, identity and access management, privileged access management and backup governance . The ability to analyse complex information and turn ...

areas plus ideally a broad background in Cyber and the applicable regulations: Security Operations Centres (SOC), Managed Detection and Response (MDR), Identity and Access Management, Cloud Security, Cyber Transformation Programmes, OT and Industrial Security, Exposure Management/Vulnerability Management, Risk, Compliance and Regulatory Programmes, Secure … Access, AI risk, governance and security transformation, Cyber Resilience and Incident Response Leadership Attributes. Leadership Attributes Strategic thinker with strong business acumen. Exceptional stakeholder management skills. Strong collaboration and influence capabilities. Executive presence and board‐level communication skills. Ability to simplify complex cyber security concepts into compelling business value. ...

Infrastructure Specialist – Endpoint & Operations is to provide technical capability and expertise across 7C Network’s global technology environment, with a particular focus on endpoint management, modern workplace technologies, infrastructure operations, and support for our North American and UK studios. You will join a high-performance, tight-knit but geographically … evolution of our infrastructure, security, automation and AI-assisted operational capabilities. The successful candidate will be a hands‐on technical specialist with strong endpoint management experience, including Windows and Mac platforms, combined with a broad understanding of cloud, identity, networking and security technologies. The role requires a proactive problem ...

Responsibilities 1. Governance, Compliance & Certifications Certification Ownership: Take accountability for the maintenance, auditing, and continuous improvement of Hometrack’s ISO 27001 Certified Information Security Management System (ISMS) and Cyber Essentials/Cyber Essentials Plus certifications, working in close collaboration with our Risk and Compliance officer. Audit & Risk Management: Plan and oversee internal security audits, external surveillance audits, and maintain the corporate Risk Register, prioritising and tracking remediation activities. Policy Management: Author, update, and enforce information security policies, standards, and procedures in line with industry best practices and regulatory shifts. 2. Financial Services & Regulatory Alignment Client & Regulatory ...

with internal teams and client stakeholders. Maintain comprehensive incident records, timelines, evidence, actions, and decision logs throughout the incident lifecycle. Produce timely incident reports, management updates, and post-incident summaries. Digital Forensics and Investigation Collect, preserve, and analyse endpoint, server, identity, network, email, and cloud artefacts in accordance with … eradication, recovery, and lessons learned. Experience analysing Windows and Linux systems, authentication events, network traffic, and security logs. Ability to create clear investigation reports, management updates, and technical documentation. Knowledge of MITRE ATT&CK, Cyber Kill Chain, and NIST Incident Response frameworks. Understanding of enterprise networking, identity and access ...

packet captures.Working knowledge of incident response lifecycle activities including preparation, detection, analysis, containment, eradication, recovery and lessons learned.Experience producing incident records, investigation reports, management updates and post-incident findings.Understanding of attacker behaviours and frameworks including MITRE ATT&CK, Cyber Kill Chain and NIST incident response guidance.Knowledge of enterprise networking … identity and access management, cloud services, email security, endpoint security, vulnerability management and data loss prevention.Ability to manage multiple priorities, exercise sound judgement under pressure and communicate clearly with technical and senior stakeholders.Awareness of evidence handling, forensic integrity, confidentiality and regulatory considerations relevant to cyber investigations.DesirableExperience ...

captures. Working knowledge of incident response lifecycle activities including preparation, detection, analysis, containment, eradication, recovery and lessons learned. Experience producing incident records, investigation reports, management updates and post-incident findings. Understanding of attacker behaviours and frameworks including MITRE ATT&CK, Cyber Kill Chain and NIST incident response guidance. Knowledge … enterprise networking, identity and access management, cloud services, email security, endpoint security, vulnerability management and data loss prevention. Ability to manage multiple priorities, exercise sound judgement under pressure and communicate clearly with technical and senior stakeholders. Awareness of evidence handling, forensic integrity, confidentiality and regulatory considerations relevant ...

helping to keep our infrastructure secure and compliant and our staff safe and productive. You'll be working on projects covering identity and access management, cloud and network security, vulnerability management, security monitoring, security hardening, compliance reviews, and more. It's a very varied role with lots … qualifications are a plus) Experience with Infrastructure as Code and infrastructure provisioning tools, particularly Terraform Experience configuring GCP-native security posture and threat management with Security Command Center Experience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact Analysis Experience with key and secret management ...

contract We are supporting a leading international financial services organisation seeking an experienced CyberArk PAM Support Engineer (L2) to join its Identity and Access Management (IAM) Operations team. This is a hands-on technical support position focused on maintaining, troubleshooting and improving an enterprise CyberArk Privileged Access Management … investigate recurring incidents and contribute to root cause analysis. Manage incidents, service requests, problems and changes through ServiceNow in accordance with ITIL processes. Support vulnerability remediation, security patching, platform upgrades and production releases. Collaborate with third-line engineering, infrastructure, application and security teams to resolve complex technical issues. Maintain ...

dedicated liaison between UK Sovereign technical security teams and customers, ensuring transparency, trust, and proactive communication. The Senior Trust Analyst will track and report vulnerability remediation activities in a structured Plan of Action and Milestones (POA&M) format, deliver regular security status updates, and translate complex technical information into … Maintain the public trust center and UK Sovereign customer-facing documentation, ensuring security whitepapers, certifications, and standard responses remain current and reusable. Security Posture & Vulnerability Reporting Security Posture Assessment: Collaborate closely with UK Sovereign technical and engineering teams to understand and assess the current security posture of UK Sovereign ...

team includes the Chief Data Office, Chief Software Office, Chief Technology Office, Emerging Technology, Shared Technology Services, Technology, Risk and the Executive Program Management Office (EPMO). Driven by our investment in cutting-edge technologies like AI and cloud solutions, we’re home to a diverse range of roles … About the role: The Endpoint Engineer is a key technical contributor within the global infrastructure organization, providing advanced (Tier 2/3) support, endpoint management, and platform engineering across Windows, Microsoft Intune, and related technologies. This role delivers secure, reliable, and frictionless user experiences through modern device management ...

Barclay Simpson is seeking a Threat and Vulnerability Management Consultant for a regulator. The role focuses on assessing current VM tooling, telemetry, and reporting capabilities, while identifying opportunities to enhance automation, exposure visibility, KEV intelligence integration, and executive-level assurance reporting. The successful candidate will help modernise ...

appropriate to improve efficiency and quality. Embed security and governance: Implement policy-as-code, automated security and quality gates, change controls, SAST, DAST, secrets management and vulnerability management throughout the SDLC. Engineer cloud-native solutions: Build and integrate services across Azure, Kubernetes and Azure API Management … knowledge transfer, with an interest in applying approved AI tools and automation responsibly to improve engineering outcomes. Bonus Points For Experience integrating Azure API Management with cloud-native platforms and enterprise applications. Familiarity with Snowflake, Salesforce and engineering patterns supporting data-intensive workloads. Experience migrating from Jenkins, SonarQube, Artifactory ...

including methodology development, knowledge sharing, service development and marketing activity where appropriate. Key Skills A developing understanding of cyber security, information security, governance, risk management or technology controls. Ability to analyse information, identify key points and draw sensible conclusions from client evidence and discussions. Good written communication skills, with … information security frameworks, such as NIST CSF, ISO 27001, Cyber Essentials or similar standards. An understanding of common cyber security domains, including access management, incident response, vulnerability management, third-party risk, security awareness and policy governance. Relevant practical experience, a degree, apprenticeship, professional qualification or equivalent background ...

work effectively with IT; development and business teams and communicate technical risks and recommendations clearly. The role includes participation in incident, change and problem management, with some out-of-hours work required for planned change, maintenance or urgent security response. Education, Skills & Experience Must Have Extensive hands-on cyber … security knowledge. Proven ability to design, configure, implement and improve security technologies, controls, tooling and processes. Experience with SIEM technologies, security monitoring, incident response, vulnerability management, patch compliance, server security and endpoint security. Ability to work independently, take ownership of technical deliverables and collaborate effectively with IT, Development ...

Partner with the IT Manager to set up, operate, and support audio/visual equipment for internal and external meetings and events. Endpoint and Vulnerability Management Conduct IT asset management and software audits to ensure licensing compliance. Perform routine system maintenance, such as updates and backups. Deploy … system and security patches from OEMs and software vendors using desktop management and software update tools. Monitor patch releases and remediate vulnerabilities on client devices. Ensure endpoint devices are fully patched, and antivirus software is up to date. Perform regular security vulnerability scans and monitoring. Network Administration Support ...

principles by embedding security throughout the Secure Development Lifecycle (SDLC), including threat modelling and security architecture reviews. Own and mature the Application Security Posture Management capability, including management and optimisation of Aikido and related security tooling. Develop KPIs, dashboards, and reporting for engineering and executive stakeholders, while identifying … opportunities for automation and continuous improvement. Oversee vulnerability management activities across applications and platforms, including findings from SAST, DAST, Software Composition Analysis, container security, Infrastructure as Code security, CI/CD security, API security reviews, and penetration testing. Partner with Engineering Directors, Architects, Product Leaders, and Software Engineers ...

principles by embedding security throughout the Secure Development Lifecycle (SDLC), including threat modelling and security architecture reviews. Own and mature the Application Security Posture Management capability, including management and optimisation of Aikido and related security tooling. Develop KPIs, dashboards, and reporting for engineering and executive stakeholders, while identifying … opportunities for automation and continuous improvement. Oversee vulnerability management activities across applications and platforms, including findings from SAST, DAST, Software Composition Analysis, container security, Infrastructure as Code security, CI/CD security, API security reviews, and penetration testing. Partner with Engineering Directors, Architects, Product Leaders, and Software Engineers ...