1 to 25 of 42 Vulnerability Management Jobs in the South West

DESCRIPTION Join us to directly influence the future of technology at JPMorganChase. As a Senior Security Architect - SecOps and Vulnerability Management, you'll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion for security and drive to make a real … dynamic environment designed for achievers. Help us build products that prioritize security from the start. Job Summary: As a Senior Security Architect - SecOps and Vulnerability Management in the Cybersecurity & Technology Controls team for International Consumer, you will proactively partner with technology and business colleagues to identify and address ...

experienced Security Architect and Subject Matter Expert (SME) is required to support the design, build, and assurance of Backend Platform and endpoint protection and vulnerability management capabilities within secure, offline (air-gapped) environments . The Architect must apply the NIST Cybersecurity Framework and MoD security policies … implementing security controls across the infrastructure and end-user endpoints. The role will provide specialist expertise in the delivery of Security controls, AntiVirus and Vulnerability Management platforms in support of a UK Government secure account . The successful candidate will operate within high-assurance environments , ensuring compliance with ...

experienced Security Architect and Subject Matter Expert (SME) is required to support the design, build, and assurance of Backend Platform and endpoint protection and vulnerability management capabilities within secure, offline (air-gapped) environments . The Architect must apply the NIST Cybersecurity Framework and MoD security policies … implementing security controls across the infrastructure and end-user endpoints. The role will provide specialist expertise in the delivery of Security controls, AntiVirus and Vulnerability Management platforms in support of a UK Government secure account . The successful candidate will operate within high-assurance environments , ensuring compliance with ...

Senior Infrastructure Engineer Gloucester £55-70k DOE Monday-Thursday 08:00-16:30 and Friday 08:00-15:00 Line Management (2 Engineers) The Senior IT Infrastructure Engineer is responsible for managing and optimising the global IT infrastructure, with primary focus on the UK region, and for acting … senior technical lead and principal escalation point within the UK IT team, providing hands-on expertise across infrastructure and security. Team Leadership and Line Management: Provide line management for two UK-based engineers (IT Infrastructure and Support Engineer and IT Support Technician), including objective setting, performance management ...

suited to a security professional who can operate at both architectural and hands-on levels, with strong experience across endpoint protection, Antivirus/EDR, vulnerability management, platform security and secure environments. You will work closely with Infrastructure, Platform and Security teams, applying NIST Cybersecurity Framework principles … implementation of endpoint and platform security solutions. Design security controls aligned with MOD policies, NIST Cybersecurity Framework and NCSC guidance. Design and deliver vulnerability management capabilities, including scanning, risk prioritisation, remediation and reporting. Develop security solutions for offline and air-gapped environments, including controlled update, patch and signature ...

suited to a security professional who can operate at both architectural and hands-on levels, with strong experience across endpoint protection, Antivirus/EDR, vulnerability management, platform security and secure environments. You will work closely with Infrastructure, Platform and Security teams, applying NIST Cybersecurity Framework principles … implementation of endpoint and platform security solutions. Design security controls aligned with MOD policies, NIST Cybersecurity Framework and NCSC guidance. Design and deliver vulnerability management capabilities, including scanning, risk prioritisation, remediation and reporting. Develop security solutions for offline and air-gapped environments, including controlled update, patch and signature ...

local EASA Part-IS Lead . Working as part of our global cybersecurity organisation, you'll be responsible for maintaining our Information Security Management System (ISMS), managing cyber risk, supporting compliance activities, and driving security best practices across the site. This is a corporate-directed role within a global … Tewkesbury. What You'll Do Lead EASA Part-IS compliance activities for the Tewkesbury site. Operate and maintain the site's Information Security Management System (ISMS). Monitor security events, investigate incidents, and coordinate response activities. Conduct risk assessments, vulnerability reviews, and security audits. Act as the primary ...

local EASA Part-IS Lead. Working as part of our global cybersecurity organisation, you'll be responsible for maintaining our Information Security Management System (ISMS), managing cyber risk, supporting compliance activities, and driving security best practices across the site. This is a corporate-directed role within a global organisation … Tewkesbury. What You’ll Do Lead EASA Part-IS compliance activities for the Tewkesbury site. Operate and maintain the site’s Information Security Management System (ISMS). Monitor security events, investigate incidents, and coordinate response activities. Conduct risk assessments, vulnerability reviews, and security audits. Act as the primary ...

disaster recovery arrangements, working with Technology Teams to maintain plans, schedule testing, evidence outcomes, identify dependencies and track remediation of weaknesses. IT Change Management: Support effective IT change governance, including chairing or supporting the Good Energy Change Advisory Board, and ensuring security and resilience impacts are considered and that … Compliance: Coordinate and support PCI-DSS control activity, evidence gathering, control testing and remediation tracking where technology controls are in scope. Penetration Testing and Vulnerability Management: Coordinate penetration testing and support vulnerability management oversight, working with Technology Teams and third parties to risk assess findings, agree ...

service-level objectives. Contribute to application architecture, integration, and lifecycle activities under the guidance of senior engineers. Collaborate with stakeholders across engineering, service management, and business teams to resolve technical issues. Mentor junior engineers and specialists, supporting their development and promoting best practices. Participate in continuous improvement initiatives, including … platforms (e.g. SIEM, EDR, or similar) Ability to solve moderately complex application-related issues and contribute to secure, scalable solutions. Understanding of application lifecycle management, integration patterns, and secure-by-design principles. Strong communication and collaboration skills across engineering and business teams. A proactive mindset with a passion ...

service-level objectives.* Contribute to application architecture, integration, and lifecycle activities under the guidance of senior engineers.* Collaborate with stakeholders across engineering, service management, and business teams to resolve technical issues.* Mentor junior engineers and specialists, supporting their development and promoting best practices.* Participate in continuous improvement initiatives, including … platforms (e.g. SIEM, EDR, or similar)* Ability to solve moderately complex application-related issues and contribute to secure, scalable solutions.* Understanding of application lifecycle management, integration patterns, and secure-by-design principles.* Strong communication and collaboration skills across engineering and business teams.* A proactive mindset with a passion ...

throughout the path to live. What you'll do * Design and continuously improve secure, automated CI/CD and GitOps pipelines * Embed security scanning, vulnerability management and secrets management into delivery workflows * Establish secure-by-design engineering practices and enforce security and technical standards * Lead Infrastructure … Principal Engineer with strong hands-on and leadership experience across: * CI/CD & GitOps - GitHub Actions, Argo CD, Argo Rollouts * Security & compliance - Trivy, vulnerability management, HashiCorp Vault, cert-manager * Containers & cloud - Docker, AWS EKS, AWS IAM, S3 and network policies * Infrastructure as Code - Terraform * Observability - Grafana, Loki * Automation ...

ideally have: Significant experience designing, building or deploying Security Operations Centre solutions . Experience with at least two of the following: SIEM SOAR EDR Vulnerability Management Threat Intelligence Strong understanding of SOC operating models, including people, process, policy, services and technology . Good understanding of common cyber threats … appropriate mitigation techniques. Experience with risk assessment and vulnerability management . Strong knowledge of on-premise architecture and infrastructure . Experience designing cloud security architectures . Understanding of security principles including least privilege, encryption and secure-by-design architecture . Experience designing scalable and resilient solutions . Familiarity ...

right for you. Here are some of the areas you could work in: Application Security: Learn how we build security into applications, including vulnerability management, penetration testing, threat modelling and security reviews. Cloud Security: Gain experience of how we protect cloud environments, identify security weaknesses and help teams … apply appropriate security controls. Identity & Access Management: Learn how we manage identities and access to systems, including access reviews, privileged access and the principles of giving people the right access at the right time. Security Operations: See how we identify, investigate and respond to security threats and incidents, working ...

least privilege principles. Support endpoint/server security controls. Ensure appropriate logging and security monitoring is enabled and reviewed. Support encryption and certificate-management requirements. Review infrastructure against security standards and vendor recommendations. Identify unsupported and end-of-life systems and associated risks. Support security improvements across existing infrastructure. … Oversee and engage in system upgrades, patching, configuration changes and lifecycle-management activities. Monitor Security and compliance within the SSTL infrastructure capacity, performance, availability and health. Diagnose and resolve security incidents and problems. Support backup, recovery, business continuity and disaster-recovery arrangements. Participate in infrastructure projects, migrations and technology ...

applicable security standards, policies and industry best practice. Essential Skills/Experience Information Security Strategy Security Assessment Technical Security Architecture Enterprise Security Architecture Stakeholder Management Desirable Skills/Experience Extensive Cybersecurity Technical Knowledge, with a strong understanding of modern cyber security principles, technologies, threats, vulnerabilities, and best practices across … automation, digital transformation and other evolving technologies. Experience of Digital Security Operations, including tracking adversary tradecraft, building an effective threat intelligence pipeline, monitoring, detection, vulnerability management and incident handling. Membership of a professional body desirable e.g. CISSP, CISM, CCISO, GIAC certifications, CRISC. Experience driving change across a complex ...

happy to discuss flexible working! Top 3 skills needed for this role: Proven Security Operations Experience Strong Information Security Knowledge Demonstrated Risk Management Capability What this role is all about: We are looking for a Cyber Security Analyst to join the Information Security team, supporting the ongoing development … best practice advice to business areas and technology teams across the organisation Support the ongoing development, maintenance and improvement of the Information Security Management System to ensure continued ISO27001 compliance Monitor security systems, tools and alerts, investigating issues and escalating incidents where required Participate in the detection, management ...

services align with key cyber security and regulatory frameworks. This is a unique opportunity to work at the intersection of cyber security, governance, risk management, and operational engineering. You'll help translate complex compliance requirements into practical technical controls that protect critical systems and services. What … Benchmarks, and IEC 62443 Experience implementing or governing technical compliance programmes within operational environments Strong understanding of risk assessment methodologies and compliance management practices Excellent stakeholder management, communication, and technical documentation skills Experience working with technologies such as networking, firewalls, virtualisation, endpoint security, vulnerability management, SIEM ...

continuously improve DevSecOps practices across the delivery teams, including:Secure, automated CI/CD pipelinesSecurity scanning integrated into build, test and deployment workflowsVulnerability lifecycle management, including allowlist processes and risk acceptance where required and secrets management and identity/access management;Policy enforcement for workloads, container images … leading others):CI/CD and GitOps (e.g. GitHub Actions, Argo CD, Argo Rollouts)Security and compliance tooling (e.g. Trivy scanning and vulnerability management, HashiCorp Vault, cert-manager)Containers and orchestration (e.g. Docker, AWS EKS) ; Infrastructure as Code (e.g. Terraform)Observability (e.g. Grafana, Loki) ;Scripting and automation (e.g. ...

objectives. Desirable Experience supporting UK Defence, MOD, national security, government or critical national infrastructure organisations. Knowledge of Defence security policies, assurance approaches and risk management methodologies. Experience contributing to security assurance and accreditation activities for secure systems. Familiarity with classified or sensitive environments and associated security controls. Understanding … procurement and capability delivery programmes. Beneficial Knowledge Government and industry security frameworks such as HMG Security Policy Framework (SPF), ISO 27001 and NIST. Risk management methodologies and security assurance frameworks. Enterprise and security architecture approaches including TOGAF and SABSA. Cloud security and secure digital transformation programmes. Security operations, vulnerability ...

consistency of security delivery. Key Responsibilities: Cloud Security Engineering Build and maintain reusable cloud security guardrails for identity, logging, encryption, network segmentation, secrets management, storage, workloads, containers, serverless services, and data protection. Translate security architecture standards into deployable cloud patterns, reference implementations, templates, and engineering‐ready requirements. Partner with … related cloud security tooling. Develop policy‐as‐code and control‐as‐code mechanisms to prevent, detect, and report common cloud misconfigurations. Support cloud‐native vulnerability and misconfiguration remediation by providing prioritization logic, remediation guidance, and reusable fix patterns. Establish cloud security metrics and dashboards covering control adoption, misconfiguration trends ...

alerts for urgency and impact Deliver weekly and monthly reporting to clients and stakeholders Communicate security findings and trends directly to clients Support vulnerability management analysis and remediation efforts Lead false‐positive reduction and SIEM tuning activities Mentor and support development of Tier 1 and junior analysts Contribute ...

shape and grow the wider cyber security capability. Key Responsibilities Deliver Cyber Security work packages for clients and internal delivery programmes Develop Security Management Plans Understand and define capability context; perform Risk Assessments Define and architect Security Controls Plan Vulnerability Management activity Develop Key/Certificate Management ...

Conduct compliance assessments across systems and processes to evaluate cyber and information assurance posture. Assess technical security controls across networks, systems, and infrastructure - including vulnerability management, security architecture reviews, and technical risk assessments - to inform wider assurance judgements. Develop, refine, or review security policies and procedures to align … make a real impact. You should have: Proven experience in Cyber Security & Information Assurance within Defence or UK Government environments. Strong understanding of risk management frameworks Working technical knowledge across areas such as network security, secure system architecture, vulnerability assessment/penetration testing concepts, and cloud or infrastructure ...

working! Top 3 skills needed for this role: Highly experienced Cyber Security Operations expertise Advanced security incident response capability Proven security tooling and threat management knowledge What this role is all about: We're looking for a Senior Security Operations Engineer to play a leading role in Vitality … overall security posture This role will work closely with Information Security, IT and Architecture teams to implement and maintain robust security controls Manage vulnerability remediation activities, ensuring security risks are identified, prioritised and addressed appropriately Build strong relationships with internal stakeholders, vendors and technology partners to support effective security ...