151 to 175 of 401 Vulnerability Management Jobs in London

Application Firewall (WAF), API Security and bot protection capabilities. Strong hands on experience with Web Application Firewalls (WAF), including policy design, rule tuning, exception management and application onboarding. Good understanding of OWASP Top 10 and OWASP API Security Top 10. Knowledge of HTTP/S, REST APIs and application … layer attack mitigation. Experience with vulnerability management, Qualys and attack surface monitoring tools. Understanding of patch management and vulnerability remediation. Strong stakeholder engagement and communication skills. Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community ...

monitoring, and alerting tools Security & Compliance Practical experience implementing ISO27001 and SOC2 controls Knowledge of OWASP methodologies and secure development lifecycle practices Experience with vulnerability management, PAM, secrets management, and secure access Platform & Operations Excellence Experience running and scaling highly available SaaS platforms Strong understanding … incident management, and operational best practices Experience implementing BCP/DR solutions across cloud and on-prem Leadership & Delivery Proven leadership experience managing technical teams (5+ years) Ability to lead multiple complex initiatives end-to-end Strong stakeholder management and communication skills Ability to balance business priorities with ...

helping to keep our infrastructure secure and compliant and our staff safe and productive. You'll be working on projects covering identity and access management, cloud and network security, vulnerability management, security monitoring, security hardening, compliance reviews, and more. It's a very varied role with lots … qualifications are a plus) Experience with Infrastructure as Code and infrastructure provisioning tools, particularly Terraform Experience configuring GCP-native security posture and threat management with Security Command Center Experience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact Analysis Experience with key and secret management ...

team includes the Chief Data Office, Chief Software Office, Chief Technology Office, Emerging Technology, Shared Technology Services, Technology, Risk and the Executive Program Management Office (EPMO). Driven by our investment in cutting‐edge technologies like AI and cloud solutions, we’re home to a diverse range of roles … About The Role The Endpoint Engineer is a key technical contributor within the global infrastructure organization, providing advanced (Tier 2/3) support, endpoint management, and platform engineering across Windows, Microsoft Intune, and related technologies. This role delivers secure, reliable, and frictionless user experiences through modern device management ...

supporting the firm's engineering, trading, data and corporate technology platforms. The position drives automation, infrastructure-as-code adoption, operational simplification and technology lifecycle management, enabling Platform Engineering to provide stable foundations for application delivery, data platforms, AI workloads and business‐critical services. Main Responsibilities Lead the Platform Operations … team responsible for compute, virtualisation, storage, backup, network services, operating systems, patch management and core infrastructure platforms. Own operational performance, availability, capacity and resilience of infrastructure services across on‐premise, co‐located and cloud‐hosted environments. Establish infrastructure standards, operational procedures and engineering practices that promote automation, repeatability ...

team includes the Chief Data Office, Chief Software Office, Chief Technology Office, Emerging Technology, Shared Technology Services, Technology, Risk and the Executive Program Management Office (EPMO). Driven by our investment in cutting-edge technologies like AI and cloud solutions, we’re home to a diverse range of roles … About the role: The Endpoint Engineer is a key technical contributor within the global infrastructure organization, providing advanced (Tier 2/3) support, endpoint management, and platform engineering across Windows, Microsoft Intune, and related technologies. This role delivers secure, reliable, and frictionless user experiences through modern device management ...

standards, and governance frameworks. Provide expert guidance on OT cyber risk, controls, investments, and best practices. Lead OT cybersecurity audits and remediation activities. Risk Management & Compliance Conduct OT cyber risk assessments and vulnerability reviews. Identify, assess, and mitigate risks across industrial and operational environments. Ensure compliance with industry … during security events. Monitor emerging OT threats and vulnerabilities. Asset Security & Continuous Improvement Maintain visibility of OT assets, systems, and communication networks. Oversee OT vulnerability management, patching, and remediation programmes. Ensure secure configuration and lifecycle management of industrial assets. Drive continuous improvement across OT security controls ...

more and ultimately, be more fulfilled. To learn more about how we can supercharge progress for you, visit www.hcltech.com Job Title : Senior Patch Management Engineer Location: London, UK ( Hybrid mode at client location ) Experience: 3 – 6 years in network engineering/operations ROLE SUMMARY The L2 Senior Network Patch … Management Engineer owns the firmware and software lifecycle across a multi-vendor network estate (LAN, WAN, data centre fabrics, firewalls, load balancers, and wireless). Responsibilities include risk assessment, automated patching workflows, vulnerability-led prioritisation, and cross-team co-ordination for zero-disruption maintenance. The role serves ...

genuine opportunity to shape how a leading security operations practice takes its services to market — working across SIEM, EDR/XDR, SOAR, exposure management and email security, with an initial focus on Microsoft Defender and Microsoft Sentinel. The Role Reporting to the SecOps Solutions Architect … detection and response Working knowledge of Microsoft Defender and Microsoft Sentinel Familiarity with at least two of: SIEM, EDR/XDR, SOAR, threat intelligence, vulnerability management, exposure management or email security Confident presenter, comfortable engaging both technical and business stakeholders Strong written skills for proposals and technical ...

better regulatory decisions and build greater cohesion across our broad financial services remit. Significant improvements in digital enablement, business intelligence, market data and information management maturity are all being pursued to maintain our position as a world leader in financial services regulation. In March 2025, the FCA launched … detect, and recover from disruption, failure, or exploitation. The role brings together operational resilience, infrastructure governance, supplier oversight, and enterprise technology and AI‐specific vulnerability management, ensuring that both traditional infrastructure and AI‐enabled systems are designed, operated, and governed to remain safe, dependable, and trustworthy under stress. ...

serve government customers who have no tolerance for downtime or data compromise. Key Responsibilities Own the security posture of the Spaceflux platform: threat modelling, vulnerability management, penetration test remediation, and incident response. Design and maintain secure CI/CD pipelines, integrating SAST, DAST, dependency scanning, and container security … tooling. Manage cloud infrastructure (Azure) using infrastructure-as-code, with security controls, secrets management, and least-privilege access enforced by default. Lead on compliance requirements for UK Government programmes, including Cyber Essentials Plus, ISO 27001, and defence data handling standards. Work with engineering to define and enforce secure coding ...

service offerings. Contribute to the development and presentation of compelling client proposals collaborating with teams across our business. Contribute to documented Information Security Management Plans which incorporate Regulatory, Legal and Compliance in relation to applicable security policies. Standards and guidelinesContribute to the identification of identified risks and emerging cyber … security vulnerabilities and threats. The subsequent analysis to quantify and lead risk mitigation plansWork with Service Management to ensure that partners and suppliers adhere to agreed standards, policies and verify/evidence appropriate compliance and security KPIsWork closely with 1st, 2nd and 3rd lines of defense on all matters ...

service offerings. Contribute to the development and presentation of compelling client proposals collaborating with teams across our business. Contribute to documented Information Security Management Plans which incorporate Regulatory, Legal and Compliance in relation to applicable security policies. Standards and guidelines Contribute to the identification of identified risks and emerging … cyber security vulnerabilities and threats. The subsequent analysis to quantify and lead risk mitigation plans Work with Service Management to ensure that partners and suppliers adhere to agreed standards, policies and verify/evidence appropriate compliance and security KPIs Work closely with 1st, 2nd and 3rd lines of defense ...

security monitoring platforms Support Layer 7 and web security initiatives including WAF, reverse proxy, API protection and edge security controls Support implementation and operational management of edge security platforms such as Cloudflare or similar technologies Support vulnerability management, remediation and infrastructure and networking security assessments across cloud … support the implementation, tuning and operational maturity of endpoint security, EDR and Microsoft Defender capabilities across infrastructure, corporate and production environments Support identity, access management and privileged access security initiatives across infrastructure environments Continuously evaluate emerging infrastructure threats, attack vectors and security tooling to strengthen the organisation’s security ...

applications Improving security monitoring, detection engineering and incident response Supporting complex and high‐severity security incidents alongside internal teams and external SOC partners Strengthening vulnerability and exposure management using threat intelligence, exploitability and business risk Automating security processes using Python, PowerShell, Logic Apps, Azure Functions and APIs Supporting … cloud, endpoint, data, network and application security Experience with threat modelling and security architecture reviews Exposure to detection engineering, incident response, threat hunting and vulnerability management Security automation or scripting experience Knowledge of Zero Trust, ISO 27001, Cyber Essentials Plus and NIST CSF The ability to communicate technical ...

minimal oversight, collaborating with global IT teams to protect Medpace’s systems; Own the administration and reliability of key security platforms, including privileged access management, EDR, and SIEM; Coordinate platform upgrades and fixes proactively; Lead cross-functional security projects from planning through execution; Coordinate with stakeholders across departments … Active Directory, networks, and cloud architectures; Experience securing Azure cloud architectures; Hands‐on experience with SIEM, endpoint detection and response, identity or privileged access management, and cloud security tools; Excellent communication and documentation skills; Ability to explain complex security concepts to technical and non‐technical stakeholders; Strong analytical ...

communicate Flo’s security strategy and roadmap, promoting strong shared security ownership culture. Security Programme: Oversee all aspects of Flo’s security programme, risk management, security architecture, product security, and security operations, including embedded security engineering functions. Data Protection & Governance: Define and enforce standards for storing, protecting, and deleting … Act. Third-Party & Supply-Chain Risk: Establish evaluation criteria and ongoing governance controls for vendors, SDKs, and external partners accessing internal environments or data. Vulnerability Management: Oversee the management life cycle of code, third party and platform vulnerabilities, ensuring remediation paths are transparent, risk-based, and tracked ...

Endpoint and Entra ID environments. The successful candidate will be responsible for endpoint security, device compliance, EDR investigations, identity controls and modern endpoint management across the business. This role is primarily office-based, with four days per week in their London office (closest station - London Bridge … role will include: Own and manage Windows 11, iOS, and Android endpoints using Microsoft Intune, including Autopilot provisioning, device configuration, compliance policies, patching, update management, and application deployment. Maintain endpoint security standards, device lifecycle management, and secure configuration baselines aligned to Microsoft and industry best practices. Administer ...

digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose … server OS configuration, TCP/IP networking hardware, protocols, LAN and WAN technologies & configurations, and network design) and/or IS (ideally PKI, firewall management, IDS & IPS, vulnerability management, and network scanners), in engineering, administration or support roles Familiarity with cryptographic principles, digital certificates, and PKI concepts. ...

world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered the company ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose … server OS configuration, TCP/IP networking hardware, protocols, LAN and WAN technologies & configurations, and network design) and/or IS (ideally PKI, firewall management, IDS & IPS, vulnerability management, and network scanners), in engineering, administration or support roles Familiarity with cryptographic principles, digital certificates, and PKI concepts. ...

range of industries. Manage multiple client projects, ensuring high-quality delivery, commercial success and client satisfaction. Advise organisations on cyber security strategy, governance, risk management and compliance. Deliver security maturity assessments, gap analyses and cyber risk reviews. Develop practical security roadmaps and recommendations that help clients improve their security … technical deliverables. Facilitate workshops, executive briefings and stakeholder meetings, translating complex technical topics into clear business outcomes. Provide guidance on security architecture, cloud security, vulnerability management and supplier assurance. Contribute to cyber resilience initiatives, incident preparedness and risk reduction programmes. Support business development through client meetings, proposals, tender ...

service offerings. Contribute to the development and presentation of compelling client proposals collaborating with teams across our business. Contribute to documented Information Security Management Plans which incorporate Regulatory, Legal and Compliance in relation to applicable security policies. Standards and guidelines Contribute to the identification of identified risks and emerging … cyber security vulnerabilities and threats. The subsequent analysis to quantify and lead risk mitigation plans Work with Service Management to ensure that partners and suppliers adhere to agreed standards, policies and verify/evidence appropriate compliance and security KPIs Work closely with 1st, 2nd and 3rd lines of defense ...

operational resilience of business-critical banking applications. Forward Deployed Engineers will conduct targeted, hands-on engagements with development teams that are facing challenges with vulnerability remediation, automated testing, legacy technology, production stability, or achieving a safe and rapid release cadence. The role combines senior software engineering, DevOps, SRE, test … application and drive implementation, including the use of AI coding assistance. Source suitable test data and implement secure data masking for lower environments. Conduct vulnerability triage, root-cause and dependency reachability analyses, remediation prioritization, secure code changes, and regression testing. Upgrade Java, JVM, NPM, Spring, open-source libraries, internal ...

operational resilience of business-critical banking applications. Forward Deployed Engineers will conduct targeted, hands-on engagements with development teams that are facing challenges with vulnerability remediation, automated testing, legacy technology, production stability, or achieving a safe and rapid release cadence. The role combines senior software engineering, DevOps, SRE, test … application and drive implementation, including the use of AI coding assistance. Source suitable test data and implement secure data masking for lower environments. Conduct vulnerability triage, root-cause and dependency reachability analyses, remediation prioritization, secure code changes, and regression testing. Upgrade Java, JVM, NPM, Spring, open-source libraries, internal ...

vulnerabilities from cyber-attacks by developing a security road-map tailored to your unique needs. We help organisations improve processes such as threat management by building an identity management programme, and establishing prevention, detection and response capabilities to cyber-attacks. The SOC Team Lead drives performance and operational … mitigation strategies Strong leadership and communication skills with the ability to guide teams in high-pressure scenarios Experience working with SIEM, EDR, and vulnerability management platforms Understanding of risk-based prioritisation and regulatory compliance considerations Willingness to support out-of-hours activities based on threat levels or response ...