51 to 75 of 403 Vulnerability Management Jobs in London

Cyber Security Specialist/Cyber Security Engineer - CISSP, CEH, CCNA Security, Incident Response, Threat Monitoring, Vulnerability Management, Security Architecture, Azure, Windows Server Infrastructure. Permanent. London Hybrid. c.£90k - £100k + Bons +Benefits Global Law Firm seeks an experienced IT Cyber Security Specialist to join its Infrastructure Engineering team … incidents and strengthen the firm's overall security posture. This is a hands-on technical role covering Cyber Security Engineering, Incident Response, Threat Monitoring, Vulnerability Management and Security Architecture (Infrastructure focussed) using tools such as MS Defender and MS Sentinel. You'll work across a complex infrastructure environment ...

leads cyber defence operations (including the MSSP) and cybersecurity incident response across the organisation. This fits within the context of the broader organizational Crisis Management plan owned outside Technology. A key focus is optimising security tooling (e.g., SIEM, SOAR, EDR/XDR, NDR, email security, vulnerability scanning … driving strong vulnerability and threat management, using threat intelligence to prioritise defensive improvements. Key ResponsibilitiesOwn the incident response lifecycle (prepare, detect, analyse, contain, eradicate, recover), ensuring playbooks, tooling, and decision-making processes are in place and exercised. Lead and coordinate response to security incidents, acting as incident commander ...

leads cyber defence operations (including the MSSP) and cybersecurity incident response across the organisation. This fits within the context of the broader organizational Crisis Management plan owned outside Technology. A key focus is optimising security tooling (e.g., SIEM, SOAR, EDR/XDR, NDR, email security, vulnerability scanning … driving strong vulnerability and threat management, using threat intelligence to prioritise defensive improvements. Key Responsibilities Own the incident response lifecycle (prepare, detect, analyse, contain, eradicate, recover), ensuring playbooks, tooling, and decision-making processes are in place and exercised. Lead and coordinate response to security incidents, acting as incident ...

coverage scope, methods, reporting, and remediation tracking Coordinate Red Team and testing activities to ensure outputs support programme assurance and close testing capability gaps Vulnerability Management and Post‐Production Assurance Establish and assure governance for post‐production vulnerability management, including monitoring from suppliers, research findings … supplier assurance requirements Familiarity with CRA compliance needs, including defined reporting workflows such as Article 14 Excellent technical writing, communication, and stakeholder management skills, with the ability to present risk clearly and pragmatically Knowledge or experience of TARA and threat modelling approaches, including review of threat artefacts such ...

enhance industry compliance. As a Technology Risk and Controls Director within our Cloud Foundational Services Function, you will be passionate about operational risk management and control solutions for computing environments. You will partner with one or more disciplines, lines of business, regions and locations to respond to evolving business … Technology, Risk & Controls Portfolio Lead and will be responsible for a small team. Lead the strategic development and implementation of technology risk management in a dynamic, evolving tech landscape. Cloud Technology Risk & Controls Lead (Executive Director) who helps teams run cloud services safely and reliably. You’ll work with ...

internal security teams to deliver actionable intelligence. You will support a diverse range of customers and contribute to key initiatives such as threat hunting, vulnerability management, and insider threat detection. Collaboration is at the heart of this position. You will work alongside Mastercard's global threat intelligence capabilities … customers and partners across the business. Prepare and QC intelligence reports for teams across the wider security function, including the SOC, Identity and Access Management, Vulnerability Management, Insider Threat and Physical Security, highlighting emerging threats and critical vulnerabilities. Collaborate with Mastercard's global threat intelligence team, supporting ...

technical teams and supporting key stakeholders across the organization. This role requires a strong blend of technical expertise, leadership capability, operational excellence, and stakeholder management skills, within a complex enterprise environment that includes financial, trading, and treasury systems. Role Description The IT Infrastructure & Systems Manager is a full-time … control, and security monitoring. Proven ability to manage IT projects, prioritize tasks, and deliver improvements on time and within scope. Excellent communication and stakeholder management skills, with the ability to explain technical concepts to non-technical audiences. Experience leading or mentoring IT team members or support staff is highly ...

third-party tooling for monitoring, logging, alerting, diagnostics, and service health reporting Implement DevSecOps practices, including shift-left security, policy as code, secrets management, vulnerability management, and secure software supply chain controls Troubleshoot complex infrastructure, networking, identity, security, pipeline, and production issues to maintain reliable business-critical … networking, identity, compute, storage, monitoring, and governance Deep experience with Azure DevOps or GitHub for source control, pull requests, CI/CD pipelines, release management, deployment automation, and environment controls Proven experience delivering infrastructure as code using Bicep, Terraform, ARM templates, or similar technologies Strong understanding of Docker, Kubernetes ...

Vulnerability & Threat Exposure Manager (Contract, Inside IR35) Location: London (1–2 days per week in office, remainder remote) Contract: Initial 6 months, with potential to extend IR35 Status: Inside IR35 Our client, a large, complex enterprise organisation, is urgently seeking a manager to lead their vulnerability and exposure … management capability, with a mandate to expand into threat intelligence and enhanced security testing over time. You'll join a lean, focused team and play a hands-on leadership role from day one, with genuine scope to shape process, tooling, and maturity over a six-month roadmap. The immediate ...

facing applications. Provide subject matter expertise for web application security, secure application delivery and WAF best practices. Provide technical support to Audit & Compliance, Capacity Management, Lifecycle Management, Vulnerability Management and Risk Management Functions. Provide technical leadership during major incidents and drive to quick resolutions. Coach … preferred, or equivalent industry experience. Strong industry expertise within IT or Telecommunications environments. Financial Services experience preferred. Advanced expertise in Azure WAF and network management within complex enterprise environments. Deep technical expertise in Network Security, with exposure to technologies such as Azure Firewall, Palo Alto Firewall/ ...

Cyber Security Lead - Vulnerability & Exposure Management An established organisation operating within a highly regulated environment is looking for a Cyber Security Lead to strengthen its approach to identifying, assessing and reducing technical security risk. You will take ownership of the vulnerability management function, developing it into … proactive, intelligence-led exposure management capability. This will include: * Establishing an effective CTEM framework and longer-term security roadmap. * Improving vulnerability scanning across cloud, on-premises and externally accessible technology. * Prioritising remediation using asset importance, active threats, EPSS, attack paths and business impact. * Coordinating patching and remediation activity ...

CyberArk will be your deepest area of expertise, complemented by hands-on experience across the wider modern security stack, including Zscaler, EDR, SIEM and vulnerability management. The Opportunity As Senior Cyber Security Engineer, you’ll take ownership of CyberArk and privileged access management solutions throughout their lifecycle—from … central role in strengthening clients’ security environments by: Owning the design, deployment and operation of CyberArk solutions across managed client environments. Managing vaulting, session management, secrets management and privileged threat analytics. Designing PAM onboarding programmes covering discovery, scoping, policy design and rollout. Integrating PAM with Entra ID, conditional ...

department’s controls design and effectiveness, ensuring controls are proportionate and embedded in day‐to‐day department activity* Provide proactive assurance around risk management through appropriate data driven monitoring and through the implementation of structured sampling techniques to validate that controls are functioning as intended before failure* Educate … with industry and company standards* Work in partnership with the Digital Engineering Solutions and Services Product and Platform owners, challenging and advising on risk management for new products, processes and change programmes. Provide risk-based decision making, supporting the department to make informed, risk-based decisions by providing ...

security policies, procedures and governance frameworks. Establish and maintain risk registers and support security governance forums. Support incident response planning, tabletop exercises and crisis management activities. Provide advice across areas including vulnerability management, identity and access management, cloud security, security operations and supplier assurance. Support Secure … SDLC and broader security transformation initiatives. Provide vCISO/outsourced security management support where required. Design and facilitate client workshops, discovery sessions and stakeholder interviews. Translate technical security issues into clear business risks and practical recommendations. Produce high-quality, client-ready reports, assessments, roadmaps and presentations. Manage multiple client ...

service-led banking powered by modern technology. Job Purpose Support the Bank's operational cyber security capability through cyber security monitoring, incident response coordination, vulnerability management, supplier assurance and operational reporting activities. To place the interests of customers at the centre of all activities … alerts, incidents and escalations, ensuring actions, decisions and outcomes are appropriately recorded and tracked. Act as Incident Coordinator during cyber security incidents, supporting incident management, communications, action tracking and post-incident activities. Maintain incident, vulnerability, threat intelligence and operational cyber security registers, ensuring records remain accurate ...

coding training, workshops and awareness sessions. Mentor development teams and promote security-first engineering practices. Drive adoption of secure development standards and methodologies. Threat & Vulnerability Management Support application vulnerability management activities. Assist development teams with vulnerability triage and remediation planning. Identify recurring weaknesses and opportunities … DAST and Software Composition Analysis (SCA) tools. Experience integrating security controls into CI/CD pipelines. Strong understanding of OWASP Top 10 and common vulnerability classes. Experience with API and web application security. Knowledge of threat modelling techniques and methodologies. Experience working closely with software engineering teams in enterprise ...

classifications and segmented development environments • Implement automated CI/CD security controls including static analysis, dependency scanning, container scanning, secrets detection, software composition analysis, vulnerability management, and policy enforcement • Champion a DevSecOps culture emphasizing security, reliability, deployability, and operational performance ownership Requirements BS or MS in Computer Science … understanding of the UK Ministry of Defence/NATO approach to DevSecOps and Secure by Design, including the integration of cyber security and risk management throughout the capability lifecycle Experience applying MOD security policies, security assurance processes, and technical security requirements to software intensive defence programmes Experience developing ...

information security strategy, policies, standards, and procedures in alignment with business objectives and regulatory requirements. Lead the development and implementation of an Information Security Management System (ISMS), based on ISO 27001 Conduct regular security risk assessments, identify vulnerabilities, and recommend appropriate mitigation strategies. Provide expert advice and guidance … operation of security systems and tools, including firewalls, intrusion detection/prevention systems (IDS/IPS), antivirus, anti-malware, SIEM (Security Information and Event Management), vulnerability scanners, and data encryption solutions. Manage vulnerability management programs, including regular scanning, penetration testing, and remediation of identified weaknesses. Lead ...

security posture while enabling innovation and growth. Lead Metro Bank's Cyber Protection capability, including Cyber Risk Assessment, Cyber Awareness & Training, Identity & Access Management (IAM), and Data Loss Prevention (DLP). Define and deliver the Cyber Protection strategy and roadmap, ensuring alignment with the Bank's overall cyber security … cyber security leadership role within a regulated financial services environment or similarly complex organisation. Demonstrable expertise in leading cyber protection, security engineering, security architecture, vulnerability management, identity and access management, or security operations functions. Strong track record of delivering significant cyber security control improvements, remediation programmes ...

security posture while enabling innovation and growth. Lead Metro Bank's Cyber Protection capability, including Cyber Risk Assessment, Cyber Awareness & Training, Identity & Access Management (IAM), and Data Loss Prevention (DLP). Define and deliver the Cyber Protection strategy and roadmap, ensuring alignment with the Bank's overall cyber security … cyber security leadership role within a regulated financial services environment or similarly complex organisation. Demonstrable expertise in leading cyber protection, security engineering, security architecture, vulnerability management, identity and access management, or security operations functions. Strong track record of delivering significant cyber security control improvements, remediation programmes ...

customers. As part of a Critical National Infrastructure environment, the IT Information Security Manager will play a crucial role in the day-to-day management of the technical cyber security landscape, SOC services and wider information security management. Reporting to the Head of IT and managing an IT Security … strong culture of IT and cyber security awareness and responsibility across the organisation Conduct ongoing security threat, risk, capability and maturity assessments Manage vulnerability management, penetration testing schedules, remediation activities and threat intelligence Maintain and develop incident management processes and security playbooks Conduct and respond to security ...

lead the delivery of strategic security initiatives across their technology estate. This role sits at the intersection of cyber security, technology delivery, risk management and business change, requiring someone who can drive projects from inception through to implementation while engaging a broad range of technical and business stakeholders. … status reporting. Coordinate work across Cyber Security, Infrastructure, Architecture, Risk, Compliance and third-party suppliers. Drive delivery of security initiatives including IAM, cloud security, vulnerability management and security tooling projects. Manage project budgets, resources, timelines and dependencies. Identify, assess and mitigate project risks and issues. Ensure projects align ...

secure, reliable, and scalable as the company grows. This is a hands-on leadership role , combining responsibility for end-user computing, identity and access management, corporate networking, and cyber security operations . You will partner closely with: Engineering team , who manage product infrastructure (AWS, CI/CD, robotics environments … ITSM Lead , who manages service process, management and support The IT Director , to align on overall strategy, operational reliability, governance, and security maturity with business growth. What You'll Do Own Humanoid's corporate IT environment – covering endpoints, networks, identity, and security – ensuring reliability, scalability, and compliance. Lead ...

Security Specialist to support the protection of the organisation's information assets, systems, and services. The role will work across security operations, governance, risk management, compliance, incident response, and security awareness to help maintain a robust and resilient security posture. The successful candidate will collaborate with IT, business stakeholders … third-party suppliers, and senior management to identify and mitigate cyber risks while ensuring compliance with relevant standards and regulatory requirements. What you'll do: Security Operations Monitor security alerts and events from security monitoring platforms and managed SOC providers. Investigate and respond to security incidents, coordinating containment, eradication ...

secure, resilient and trustworthy as we continue to grow. This role has a broad scope, as you will work across security operations, access reviews, vulnerability management, supplier assurance, security awareness, audits, incident response, risk management and the day-to-day running of our Information Security Management … continuity planning (BCP) exercises. Assessing our vendors to ensure we accurately identify, evaluate, and mitigate any security risks brought in by outside partners. Supporting vulnerability management across our estate, helping teams understand, prioritise and remediate issues rather than just logging them. Monitoring security alerts, incidents and internal security ...