1 to 25 of 64 Vulnerability Management Jobs in the South West

experienced Security Architect and Subject Matter Expert (SME) is required to support the design, build, and assurance of Backend Platform and endpoint protection and vulnerability management capabilities within secure, offline (air-gapped) environments . The Architect must apply the NIST Cybersecurity Framework and MoD security policies … implementing security controls across the infrastructure and end-user endpoints. The role will provide specialist expertise in the delivery of Security controls, AntiVirus and Vulnerability Management platforms in support of a UK Government secure account . The successful candidate will operate within high-assurance environments , ensuring compliance with ...

assurance across engagements. Establish risk-based assurance frameworks, coordinate audit programmes, and maintain living evidence of control effectiveness — feeding findings into vulnerability management backlogs and governance reporting rather than treating audits as point-in-time events. Lead vulnerability management as a programme, not a process. Define … with government security communities and coordinate with departmental security teams. Communicate security risk in terms that drive decisions. Report security posture, audit findings, and vulnerability programme performance to senior client stakeholders — tailoring the frame for the audience, showing trends over time, and structuring reports around the decisions the reader ...

assurance across engagements. Establish risk-based assurance frameworks, coordinate audit programmes, and maintain living evidence of control effectiveness - feeding findings into vulnerability management backlogs and governance reporting rather than treating audits as point-in-time events. Lead vulnerability management as a programme, not a process. Define … with government security communities and coordinate with departmental security teams. Communicate security risk in terms that drive decisions. Report security posture, audit findings, and vulnerability programme performance to senior client stakeholders - tailoring the frame for the audience, showing trends over time, and structuring reports around the decisions the reader ...

helping to protect clinical & corporate systems from cyber threats. The post holder will monitor & manage security tools, investigate & respond to security alerts & incidents, conduct vulnerability assessments, & support patching & remediation activities. The role works closely with internal IT teams, NHS partners, suppliers & national cyber services to strengthen the organisation … post holder will contribute to cyber improvement programmes, security hardening initiatives, resilience testing, disaster recovery exercises & phishing simulations. They will also support identity & access management processes, help develop secure technical standards, & assist with the implementation of new cyber security tools & controls. The successful candidate will act as a subject ...

assurance within highly secure, mission-critical environments. This is an exciting opportunity for a security professional with expertise in platform security, endpoint protection, vulnerability management and secure infrastructure design to work on a complex programme supporting defence-critical systems. *** Hybrid, 2 days in Corsham, United Kingdom - market rate … security controls aligned to NIST Cybersecurity Framework and MOD security policies. Deliver enterprise Anti-Virus, Endpoint Protection and Endpoint Detection & Response (EDR) capabilities. Design vulnerability management frameworks, scanning strategies and remediation processes. Develop secure patching, update and threat intelligence processes for air-gapped environments. Produce High Level Designs ...

seeking a Cyber Security Operations Specialist to join its Security Operations team. This is a hands on role focused on incident response, threat detection, vulnerability management and continuous improvement across enterprise technology environments. You'll be expected to hit the ground running, managing security alerts, investigations, tickets … respond to cyber security incidents. Manage and triage security alerts, tickets and operational queues. Lead or support incident response activities through to resolution. Support vulnerability management and remediation activities. Apply threat intelligence to strengthen detection and response capabilities. Develop and optimise SIEM detections, alerting rules and response workflows. ...

looking for a Wiz Security Engineer to focus on implementing threat modeling, asset/vulnerability management, prioritising patching along with the ability to integrate with Servicnow and other products. This is a hands on role where you will have expereince of: Asset management and audit Prioritising patch … management Integration with Servicenow and other products Experince of Tenable for Asset and Vulnerabiity management is a distinct advantage Threat Modeling: Lead security reviews and map attack surfaces across cloud infrastructure and products. Security Automation: Build policy-as-code and developer tooling to integrate security into CI/ ...

security operations. Drive compliance with ISO 27001, NIST and CBEST frameworks. Review new infrastructure and cloud‐based services, ensuring they meet security standards. Conduct vulnerability management activities and coordinate external penetration testing. Work alongside outsourced SOC and security partners to investigate and respond to security incidents. Ensure comprehensive …/3, OSPF and VPNs. Network security controls including Cisco ISE, TACACS, IPS and endpoint protection. Security monitoring and incident response within SIEM environments. Vulnerability management and penetration testing. Security governance aligned to ISO 27001, NIST and risk management frameworks. Developing security policies, conducting audits and managing ...

environments Advanced knowledge and hands-on experience with attack methodologies and security testing Experience across penetration testing (application and network), AppSec, wireless security and vulnerability management Experience implementing and managing security controls (e.g. DLP, patching, RBAC, PAM, AV, DDoS mitigation, web proxy, vulnerability management) Understanding ...

engineers who focus on high-quality design, automated testing, secure-by-design principles and modern engineering practices. We look after the delivery, configuration and management of operating systems and endpoint technologies across user devices, as well as print and scan platforms. With a strong emphasis on automation and efficiency …/CD practices. Implementing monitoring, alerting and automated remediation to enhance platform reliability and efficiency. What youll bring: Strong experience with Microsoft Configuration Management technologies such as SCCM and SCORCH. Knowledge of anti-malware technologies. Experience with thin client and VDI solutions. Understanding of user profile and access management ...

role requires a strong blend of cybersecurity leadership, secure engineering, technical assurance, stakeholder management, governance, supplier oversight and defence regulatory experience. You will need to operate with autonomy, technical credibility and the ability to provide clear decision support to senior leaders. Own and maintain the Product Security Management … navigation, propulsion, communications, IT, OT and associated support environments. Define and assure network zoning, segregation, trust boundaries, secure configuration baselines and identity and access management requirements for shipboard systems. Support the definition and validation of secure architecture patterns across onboard and supporting environments. Apply relevant MOD, NCSC, defence ...

continuously improve DevSecOps practices across the delivery teams, including:Secure, automated CI/CD pipelinesSecurity scanning integrated into build, test and deployment workflowsVulnerability lifecycle management, including allowlist processes and risk acceptance where required and secrets management and identity/access management;Policy enforcement for workloads, container images … leading others):CI/CD and GitOps (e.g. GitHub Actions, Argo CD, Argo Rollouts)Security and compliance tooling (e.g. Trivy scanning and vulnerability management, HashiCorp Vault, cert-manager)Containers and orchestration (e.g. Docker, AWS EKS) ; Infrastructure as Code (e.g. Terraform)Observability (e.g. Grafana, Loki) ;Scripting and automation (e.g. ...

risk and software provenance, with reference to recognised standards. Familiarity with tools used for continuous compliance monitoring, automated controls testing, or cloud security posture management (for example, CSPM tooling, SIEM platforms, or vulnerability management tools). Evidence of actively shaping your own development - a T-shaped specialism ...

Board (CAB) and leadership of an Information Security governance forum. Oversee security operations and technical controls across SIEM, firewalls, endpoint protection, identity and access management, and secure configuration. Manage cyber security across cloud and hybrid environments (Microsoft 365/Azure), including patching assurance, disaster recovery and business continuity testing. … Lead vulnerability management and security testing activity (internal scanning, external testing, remediation tracking, evidence gathering). Manage and coordinate incident response, investigation, reporting and post-incident improvement actions. Maintain compliance and evidence for key standards/frameworks, including (as applicable) PSN, PCI-DSS, Cyber Essentials Plus, GDPR ...

administration of Mimecast email filtering system including email review and release. * Day-to-day administration of CyberArk identity and privileged access management tooling. * Microsoft Purview administration including DLP policy monitoring, sensitivity labels, Discovery Searches and compliance alerts. * Maintain and respond to security-related DDQs, keeping the security evidence library … success in the role. * Hands-on experience with Netskope - web filtering, CASB and cloud security and/or CyberArk - identity and privileged access management would be highly desirable skills. * Experience with Rapid7, InsightVM or InsightIDR for vulnerability management and SIEM would also be highly desirable. * Experience ...

inclusive, with great opportunity for professional growth. Find your future with us.You'll work within our established frameworks to enable the timely and effective, management, configuration, design of tooling and all other activities related to the SOC including new and emerging cyber threats.Position Responsibilities: Supporting the Security Specialist/… improvements in both tooling and processes to ensure services operated are aligned to industry best practice and Boeing enterprise best practicesConfigure and utilise SIEM, vulnerability management and other security-based tooling.Innovate in the areas of SIEM and SOC and develop best practice.Mentor and oversee development of junior analysts.Work ...

implementations Infrastructure & Networking Windows 11 deployment and support Windows Server administration and support Active Directory administration IPv4 networking VPN setup and troubleshooting Remote Monitoring & Management (RMM) platforms Managed switches UniFi wireless networking solutions AWS cloud technologies Support & Customer Service MSP or customer-focused IT support experience Helpdesk support experience … face-to-face meetings Cyber Security & Compliance Knowledge of GDPR and ISO 27001 Understanding of cyber security principles and best practices Experience with vulnerability management and security monitoring is beneficial Qualifications (Desirable) MD-102: Endpoint Administrator Associate SC-200: Microsoft Security Operations Analyst Other Microsoft, cybersecurity, networking ...

incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical roadmaps with … gaps and align solutions/services to mitigate risk Strong communication and storytelling skills , adapting for technical and non-technical audiences Familiarity with service management practices (e.g. ITIL, ticketing systems) Relevant certifications (e.g. CISSP, CISM, Security+, cloud security ) – desirable Proactive, accountable, and customer-focused mindset with strong ownership ...

money and contractual compliance. Ensuring suppliers and solutions operate in accordance with appropriate security and governance standards . Taking responsibility for major incident management , coordinating technical teams and suppliers to minimise disruption to users. Supporting disaster recovery, resilience and business continuity planning across the technology estate. Overseeing vulnerability management and supporting the wider organisation's approach to information and cyber security . Identifying opportunities to modernise technology, improve processes and enhance the overall user experience . Driving continual service improvement and ensuring technology delivers measurable value to the wider business. What We're Looking ...

working! Top 3 skills needed for this role: Highly experienced Cyber Security Operations expertise Advanced security incident response capability Proven security tooling and threat management knowledge What this role is all about: We're looking for a Senior Security Operations Engineer to play a leading role in Vitality … overall security posture This role will work closely with Information Security, IT and Architecture teams to implement and maintain robust security controls Manage vulnerability remediation activities, ensuring security risks are identified, prioritised and addressed appropriately Build strong relationships with internal stakeholders, vendors and technology partners to support effective security ...

Conduct compliance assessments across systems and processes to evaluate cyber and information assurance posture. Assess technical security controls across networks, systems, and infrastructure - including vulnerability management, security architecture reviews, and technical risk assessments - to inform wider assurance judgements. Develop, refine, or review security policies and procedures to align … make a real impact. You should have: Proven experience in Cyber Security & Information Assurance within Defence or UK Government environments. Strong understanding of risk management frameworks Working technical knowledge across areas such as network security, secure system architecture, vulnerability assessment/penetration testing concepts, and cloud or infrastructure ...

Conduct compliance assessments across systems and processes to evaluate cyber and information assurance posture. Assess technical security controls across networks, systems, and infrastructure - including vulnerability management, security architecture reviews, and technical risk assessments - to inform wider assurance judgements. Develop, refine, or review security policies and procedures to align … make a real impact. You should have: Proven experience in Cyber Security & Information Assurance within Defence or UK Government environments. Strong understanding of risk management frameworks Working technical knowledge across areas such as network security, secure system architecture, vulnerability assessment/penetration testing concepts, and cloud or infrastructure ...

from policy-as-code and IaC guardrails (Terraform, OPA/Conftest) to custom scripts and integrations that scale good security practice across teams. Support vulnerability management by triaging findings from scanning and pentest engagements, prioritising by exploitability and impact, and applying mitigation and remediations. Support incident response readiness … specialty certifications, Experience with infrastructure-as-code (Terraform, CloudFormation, Pulumi) and policy-as-code enforcement (OPA, Sentinel, Checkov). Experience supporting penetration testing and vulnerability scanning, and working closely with teaming team members to mitigate or remediate findings. Working knowledge of container and Kubernetes security, image hardening, admission controls ...

engineering teams build against. Design the patterns that carry the most weight i.e. authentication and authorisation, token architecture and service-to-service identity, secrets management, cryptography and secure data handling. Define API security patterns for both REST and GraphQL, covering authorisation at object and field level, schema exposure, query … useful, not because they are mandated. Strengthen software supply chain controls across dependencies, build provenance and artefact integrity. Work alongside SoC, penetration testing and vulnerability management teams so that findings feed back into architecture rather than staying at the individual finding level. Governance and regulation Maintain the application ...

play a central role in shaping the future of SAP security at Nationwide. You’ll develop security roadmaps, strengthen access governance and risk management, and champion modern approaches to vulnerability management, patching, monitoring and automation. As part of a growing technology organisation, you’ll lead the continued ...