51 to 75 of 146 Vulnerability Management Jobs in the South East

practical knowledge in at least two of the following areas and sufficient breadth to lead customer conversations across the wider portfolio: Identity and Access Management, including PAM, PIM, NHI, ITDR, MFA and SSO. Data Centre and Cloud Security, including CNAPP, micro‐segmentation, CSPM and cloud workload protection. Application Security … Security, including DSPM, DLP, encryption, insider risk and HSM. Network Security, including NGFW, NAC, NDR, SASE, SSE and secure SD‐WAN. Threat and Exposure Management, including EDR, EPP, XDR, CTEM, vulnerability management and OT security. Security Operations and Governance, including SOAR, SIEM, MDR, GRC and third‐party ...

necessary to meet UK Government or contractual security obligations. Key Responsibilities Security Architecture: Lead the design and implementation of robust security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures. DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery … pipelines. Risk & Governance: Collaborate with accreditors, Risk Owners, and project leadership to navigate security case approvals and risk management frameworks. Technical Guidance: Provide hands-on direction to engineers on vulnerability remediation, secure coding standards, and incident response preparedness. Deep knowledge of secure networking, encryption standards, IAM, and zero ...

Developing the information security plans and policies for NSSLGlobal and Customers working with Security Management and Compliance functions to embed security management plans into operational practice Implementing protections and solutions to ensure and enforce the information security plans and policies Monitoring and collating information from monitoring tools … testing for vulnerabilities and recommending improvements. To participate and support all internal IT & Engineering teams including providing advice and expertise on the design and management of internal, customer and global networks from a cybersecurity perspective. Creating documentation around policies, procedures and events. Who we are: NSSLGlobal Group ...

cloud infrastructure, applications and Operational Technology (OT). Working alongside technical teams and senior stakeholders, you will provide expertise across security assurance, risk management and security architecture, ensuring appropriate security controls are implemented and maintained. Key Responsibilities Lead and support cyber security assurance assessments across IT, cloud … environments. Conduct risk assessments, maintain risk registers and recommend mitigation strategies. Review security architectures and advise on secure infrastructure and cloud solutions. Support vulnerability management and identify potential security weaknesses. Ensure compliance with GovAssure, CAF, ISO 27001 and Cyber Essentials. Promote secure-by-design principles and effective security ...

Configuring, maintaining and supporting security technologies across on-premises, cloud and SaaS environments. Supporting firewalls, VPNs, endpoint protection, email security, identity and access controls, vulnerability management and security monitoring platforms. Coordinating vulnerability assessments and working with system owners to track remediation through to completion or formal acceptance. … services and applications. You'll also bring: Practical knowledge of TCP/IP, firewalls, VPNs, DNS, DHCP, certificates and SSL/TLS. Experience with vulnerability scanning, secure configuration assessments and remediation tracking. An understanding of common attack techniques, security monitoring and incident response. Knowledge of the OWASP ...

small technical team. You will bring: Strong knowledge of Microsoft 365, Windows environments, networking and core IT infrastructure. A sound understanding of cybersecurity, access management, endpoint protection, vulnerability management and disaster recovery. Experience managing IT incidents, prioritising workloads and delivering technical projects. The ability to communicate clearly ...

application security controls. Review complex technical solutions to ensure they meet security, regulatory and business requirements. Conduct and support threat modelling, risk assessments and vulnerability assessments. Provide technical oversight of security testing and penetration testing activities. Support vulnerability management, helping teams prioritise and remediate security risks. Collaborate … Experience reviewing security designs, risk assessments and security testing outputs. Ability to translate complex technical security concepts into clear, business-focused recommendations. Excellent stakeholder management and communication skills. Qualifications Relevant industry certifications are advantageous, including: CISSP or CCSP SABSA or TOGAF OSCP, OSWP, CRTO, CRTE, GXPN or CREST qualifications ...

Consult with stakeholders to define technical enablement needs; this is a shared responsibility with the training team. Work with multiple teams, including Engineering, Product Management, SME, Sales, and Support, to consolidate knowledge elements, review, validate, and ensure training content aligns with business requirements. Manage and deliver technical training … employees. Assist in designing, building, and maintaining virtual lab environments and associated lab guides to support technical training courses. Manage functions in the Learning Management System relevant to your job duties. Skills and Experience Essential BSc/MSc degree or equivalent experience in computer science or related engineering fields. ...

network, infrastructure and application security controls. Review complex technical solutions against security, regulatory and business requirements. Conduct and support threat modelling, risk assessments and vulnerability assessments . Provide technical oversight of security testing and penetration testing activities. Support vulnerability management and help teams prioritise and remediate security … reviewing security architectures, risk assessments and security testing outputs. The ability to translate complex technical security concepts into clear, business-focused recommendations. Excellent stakeholder management and communication skills. Experience working within large and complex enterprise environments. Government, Defence or wider Public Sector experience would be highly advantageous. Desirable Experience ...

VMware vSphere and Microsoft Hyper-V across DXC-managed customer environments, maintaining performance, availability and security through OS patching, hardening, capacity monitoring, VM lifecycle management and incident resolution within agreed SLAs. Required experience spans design, implementation and day-to-day support of:Windows Server OS versions 2016–2025WSUS … pointsWorking within ITIL-aligned processes, the engineer implements approved changes, maintains accurate CMDB records and runbooks, validates backup and failover readiness, and supports vulnerability remediation. Complex or architectural issues are escalated to senior engineers with clear diagnostics and recommended next steps.Due to the nature of the work ...

response capabilities. Provide engineering expertise during complex security incidents where required. Ensure lessons identified through incidents are translated into sustainable technical improvements. Partner on vulnerability prioritisation and remediation, focusing particularly on systemic and repeatable engineering solutions. Stakeholder & Cross-Functional Leadership Build strong relationships with Software Engineering, Platform Engineering, Enterprise … understanding of cloud-native architecture, containers and modern infrastructure. Proven experience integrating security into CI/CD and software engineering workflows. Strong understanding of vulnerability management and threat modelling. Experience building security automation using Python, PowerShell or similar , REST APIs and orchestration technologies. Strong Infrastructure as Code experience ...

remediation plans. Partner with engineering and product teams to embed Cyber Resilience Act (CRA) requirements into the product lifecycle, including secure-by-design principles, vulnerability management, SBOMs, and incident reporting processes. Drive implementation of cybersecurity and risk management controls, ensuring compliance with regulatory requirements related to governance … communicate compliance status to leadership. What You Will Need: 7+ years of experience in cybersecurity compliance, governance, risk & compliance (GRC), IT/cyber risk management, or a related regulatory compliance function. Strong knowledge of EU cybersecurity regulations, including NIS2 and the Cyber Resilience Act (CRA), or experience with frameworks ...

customer services by identifying, investigating and helping to contain cyber threats across a 24x7x365 multi-customer CSOC.The role converts security telemetry, threat intelligence and vulnerability information into timely, evidence-led decisions. Success is demonstrated through accurate alert disposition, complete incident records, decisive escalation, effective handovers and practical improvements … evidence-based rationale and escalate material risk without delay.• Create and maintain complete, accurate cyber security incident records in the relevant IT service management (ITSM) tool, ensuring that evidence, timestamps, affected assets, indicators, actions, ownership and escalation decisions support effective response, handover and audit.• Correlate logs and events across ...

activities, translating lessons learned into measurable improvements to SOC processes, controls, detection capabilities, operational readiness, and cyber resilience.* Collaborate with Security Engineering, Threat Intelligence, Vulnerability Management, Digital Forensics, IT, cloud and identity teams, and other stakeholders, while mentoring SOC analysts, producing high-quality technical and executive communications, supporting … learning and professional development.**Required skills*** Relevant industry certifications (e.g., CISSP, GCIH, GCFA, GCIA, Security+, Azure Security, or equivalent) would be a plus.* Incident Management, Curiosity, Critical thinking, Problem-solving, Technical Writing, Continuous improvement, Communication, Mentoring/Coaching.* Advanced threat investigation, Threat actor TTP analysis (MITRE ATT&CK), Threat ...

investigation workflows. Build clear timelines of activity and maintain accurate investigation notes. Escalate complex cases to Senior and Lead Analysts with appropriate context. Review vulnerability management output and provide basic prioritisation insight. Hunt and improve Take part in directed threat hunting activities. Suggest improvements to detections, dashboards … customer updates, investigation notes and shift handovers. Strong Microsoft 365 skills, particularly Excel, Word and PowerPoint, plus experience of Salesforce or a comparable case‐management platform. Desirable skills: Hands‐on experience with Microsoft Sentinel and Defender; Palo Alto Networks XSIAM, XDR and XSOAR; SentinelOne; CrowdStrike Falcon; or Google SecOps. ...

solutions, identify security risks and ensure security is embedded throughout the design and delivery lifecycle. Combining deep technical expertise with strong consulting and stakeholder management skills, the role will involve leading security architecture reviews, advising on security controls, supporting technical assurance and helping delivery teams implement robust, secure … security controls. Review complex technical solutions to ensure alignment with security, regulatory and business requirements. Conduct and support threat modelling, cyber risk assessments and vulnerability assessments. Provide technical oversight and recommendations for security testing and penetration testing activities. Support vulnerability management, helping teams prioritise and remediate security ...

Requirements Experience: Significant cybersecurity background within highly regulated environments (e.g., Financial Services). Technical Skills: Strong foundation in Cloud/SaaS risk, Identity & Access Management (IAM), threat/vulnerability management, and Application Security. GRC Expertise: Deep capability in cyber risk articulation, control mapping, and issue management. Soft ...

alerting capabilities. Support cloud governance and compliance initiatives across the wider programme. Provide security recommendations and remediation guidance for cloud-based risks. Identity & Access Management Configure and manage AWS IAM policies, roles, and permissions. Utilise IAM Access Analyzer to identify and remediate excessive permissions. Implement least-privilege access controls … across AWS environments. Support identity security reviews and privilege management activities. Cloud Security Operations Manage and optimise AWS-native security tooling. Support threat detection, investigation, and remediation activities. Maintain security visibility and monitoring through AWS logging and security services. Assist with vulnerability management and cloud security assessments. ...

evidence-based rationale and escalation material risk without delay. Create and maintain complete, accurate cyber security incident records in the relevant IT service management (ITSM) tool, ensuring that evidence, timestamps, affected assets, indicators, actions, ownership and escalation decisions support effective response, handover and audit. Correlate logs and events across … CSOC or comparable environment, or demonstrable transferable skills and the ability to develop rapidly. Working knowledge of Microsoft Sentinel, Microsoft Defender XDR, Microsoft Defender Vulnerability Management, Microsoft Azure and Amazon Web Services (AWS). Experience of proactive threat hunting and of using validated investigation outcomes to improve detection ...

timely responses and where needed, direct engagement with customer security teams Support the development and maintenance of Dexory's information security policies and risk management framework Conduct vendor and third-party security assessments as part of the procurement and onboarding process Contribute to Dexory's incident response and vulnerability management processes Monitor the threat landscape for risks relevant to an autonomous robotics and warehouse intelligence business Develop and run security awareness training and phishing simulation programmes across the business Experience in an information security, GRC, or compliance role, ideally within a B2B SaaS or technology business Hands ...

across product , application , cloud , infrastructure, network , endpoint , and third-party environments. Working knowledge of EU cybersecurity regulatory requirements, particularly the incident and actively exploited vulnerability notification requirements of the EU Cyber Resilience Act. Strong understanding of threat and vulnerability analysis, digital forensics, evidence preservation, chain of custody … technologies such as SIEM, endpoint security, threat intelligence, and vulnerability management platforms. Ability to translate complex technical findings into clear incident assessments, escalation decisions, executive communications, and regulatory notifications. Strong leadership, stakeholder management, communication, and decision-making skills, with the ability to manage high-pressure incidents ...

detection by tuning alerts, analysing false positives and recommending monitoring use cases across endpoint, identity, email, network and cloud services. Strengthen resilience by supporting vulnerability management, security hardening, playbooks and automation across on-premises and cloud environments. Support European compliance by gathering evidence, maintaining records and contributing … risk assessments, audits and regulatory activities, including EASA Part-IS. Translate security into action by communicating findings, risks and recommendations clearly to technical teams, management and operational stakeholders. DUTIES & RESPONSIBILITIES Serve as the primary escalation point for incidents raised by our SOC requiring deeper investigation and analysis Recommend improvement ...

lead cyber improvement initiatives, coordinate assurance activities and support the organisation's ongoing cyber maturity journey. The role combines strategic cyber governance and risk management with practical oversight of incident readiness, response and recovery, making it an excellent opportunity for someone who enjoys balancing security assurance with operational delivery. … Interim Cyber Security Lead position will include * Significant experience working within cyber security, information security or cyber resilience roles * Strong experience of cyber risk management and security assurance frameworks * Experience leading or coordinating cyber incident response activities and organisational resilience initiatives * Experience managing security audits, compliance reviews and assurance ...

select security technologies, define integration patterns, and guide implementation teams through delivery. The role requires deep technical expertise across cloud security, identity and access management, boundary and perimeter security, secure platform architectures, and security tooling ecosystems. Key Responsibilities Design and deliver security architectures across cloud, on-premise, hybrid … HLDs, LLDs, architecture patterns and data-flow diagrams. Lead the refresh and evergreening of security technologies, including IAM, PAM, firewalls, EDR/XDR, SIEM, vulnerability management and cloud security. Evaluate new technologies through PoCs/PoVs and make clear, evidence-based recommendations. Design and review cloud, identity, network ...

database migrations into Azure Build and manage infrastructure using Terraform, ARM or Bicep Implement Entra ID, RBAC, managed identities and Key Vault Manage patching, vulnerability remediation and security baselines Develop automation using PowerShell and Bash Implement backup, disaster recovery, monitoring and observability Optimise cloud performance, cost and resource utilisation … services Infrastructure-as-code expertise, ideally Terraform Windows Server and Linux administration Azure networking, DNS, load balancing, firewalls and VPNs Cloud security, identity and vulnerability management Azure Monitor, Application Insights, New Relic or similar Experience delivering highly available cloud environments Strong troubleshooting, documentation and stakeholder-management skills ...