126 to 150 of 434 Vulnerability Management Jobs in the UK excluding London

with secondary support for AWS The ideal candidate will bring deep expertise in Terraformbased Infrastructure as Code CICD Kubernetes DevSecOps Nexusbased artifact management and platform reliability with strong alignment to security compliance and governance standards in regulated environments such as banking and financial services**Hybrid working:**The places that … CICD pipelines using Azure DevOps GitHub Actions Jenkins and cloudnative tooling* Build reusable Infrastructure as Code modules and standards using Terraform with strong state management and deployment governance* Deploy and manage container platforms and workloads across AKS and GKE as primary targets with practical support for EKS* Own enterprise ...

/IP, DNS, firewalls, and proxies. Experience within a SOC, NOC, or 24/7 operational environment. Familiarity with MITRE ATT&CK, CVEs, and vulnerability management. Exposure to cloud security monitoring across Azure, AWS, or Microsoft 365. Desirable Certifications Microsoft SC-200 CompTIA Security+/CySA+ ISC2 ...

continuously improve DevSecOps practices across the delivery teams, including:Secure, automated CI/CD pipelinesSecurity scanning integrated into build, test and deployment workflowsVulnerability lifecycle management, including allowlist processes and risk acceptance where required and secrets management and identity/access management;Policy enforcement for workloads, container images … leading others):CI/CD and GitOps (e.g. GitHub Actions, Argo CD, Argo Rollouts)Security and compliance tooling (e.g. Trivy scanning and vulnerability management, HashiCorp Vault, cert-manager)Containers and orchestration (e.g. Docker, AWS EKS) ; Infrastructure as Code (e.g. Terraform)Observability (e.g. Grafana, Loki) ;Scripting and automation (e.g. ...

Drive security-by-design principles and integrate security controls into cloud services, Infrastructure-as-Code (IaC), automation frameworks, and CI/CD pipelines Own vulnerability management, threat modelling, exposure management, and remediation governance across AWS and Azure platforms, ensuring security findings are remediated within agreed timelines ...

Responsibilities Define and lead the CSOC strategy, operations, and governance. Take command of major incident response, managing remediation and stakeholder communication. Oversee threat intelligence, vulnerability management, and security monitoring capabilities. Manage relationships with external agencies, Managed Security Service Providers (MSSPs), and technology partners. What We Need From … Proven experience as a SOC Manager (previous leadership experience is essential; this is not an entry-level management role). Deep expertise in incident management processes and live crisis response. Strong background in managing third-party vendors (MSSPs). Strategic mindset to plan security investments, tooling, and resourcing. ...

risk and software provenance, with reference to recognised standards. Familiarity with tools used for continuous compliance monitoring, automated controls testing, or cloud security posture management (for example, CSPM tooling, SIEM platforms, or vulnerability management tools). Evidence of actively shaping your own development - a T-shaped specialism ...

that security controls are proportionate, effective, and aligned to business objectives. Core Responsibilities Support the development, implementation, and ongoing maintenance of the Information Security Management System (ISMS) aligned to ISO 27001Implement and enforce information security policies, standards, and procedures across the organisationConduct security risk assessments, ensuring risks are identified … supplier security risk assessments and assurance processesWork with IT and project teams to ensure security is embedded into system design, development, and change management processesDeliver and continuously improve the organisation's security awareness and training programmeEnsure compliance with regulatory requirements, including FCA expectations and data protection legislation (GDPR)Provide ...

email security, firewalls and network access control solutions Owning and managing the organisation-wide patching schedule across servers, endpoints and business-critical applications Conducting vulnerability assessments and ensuring identified risks are effectively prioritised and remediated Managing network security infrastructure, including next-generation firewalls, SASE technologies and zero-trust network … security and resilience of manufacturing and operational technology environments, ensuring appropriate segmentation between IT and OT networks Administering Active Directory, Group Policy and identity management controls while supporting the ongoing development of hybrid cloud environments Designing, delivering and continuously improving the organisation's cyber security awareness programme, including phishing ...

controls into CI/CD pipelines Develop secure Infrastructure as Code (Terraform, Bicep, ARM, Ansible) Design secure Azure, AWS and hybrid cloud environments Implement vulnerability management, security monitoring and automated compliance Support threat modelling, security architecture reviews and risk assessments Drive adoption of Secure Software Development Lifecycle (SSDLC … Code experience (Terraform, Bicep, ARM Templates or Ansible) Experience securing Kubernetes and containerised environments Knowledge of Zero Trust Architecture, IAM, RBAC and Privileged Access Management (PAM) Experience implementing SAST, DAST, SCA, container scanning and secrets management Strong scripting skills with PowerShell, Python or Bash Experience with SIEM, SOAR ...

security and quality gates into the SDLC. Cloud Security & Compliance: Enforce cloud security best practices, including least privilege, encryption at rest/in transit, vulnerability scanning, and automated remediation. Support ITGC, audit, and regulatory requirements by implementing controls, monitoring, and evidence collection for cloud environments. Respond to security incidents …/CD & DevOps: Strong knowledge of CI/CD tools, containerization (Docker, Kubernetes), and orchestration Security: Solid understanding of cloud security frameworks, IAM, encryption, vulnerability management, and compliance (ISO, NIST, CIS) Networking: Expertise in cloud networking, VPNs, load balancers, DNS, CDN, and hybrid connectivity Monitoring & Observability: Experience with ...

platforms, Logic Apps, Python and APIs. Conduct proactive threat hunting and perform root cause analysis following security incidents. Support endpoint security, identity protection and vulnerability management initiatives. Requirements Experience within a SOC environment. Strong knowledge of SIEM, EDR and SOAR platforms. Hands-on experience with platforms such … Darktrace or similar security technologies. Experience monitoring and securing Azure and AWS environments. Knowledge of ISO 27001 and Cyber Essentials. Excellent communication and stakeholder management skills. Desirable Skills CISSP and/or Microsoft Security certifications (SC-200, SC-300 or SC-400). Experience working within ...

hands-on technical background in operational cyber security spanning endpoint & EDR, identity & Active Directory, Microsoft 365 & Azure, network/ZTNA, and SIEM/log management - able to act as a senior technical authority within the team. Tools: Azure, Active Directory, CrowdStrike Falcon, Zscaler, Vulnerability Management (Qualys, Tenable … execution of globally-prioritised work to agreed quality, pace and outcomes. Drive London-side delivery of in-flight initiatives through completion. Track and chase vulnerability remediation and patching on London-managed systems, escalating blockers. 3 days on site required in central London Cyber Operations & Incident Response Lead, Cloud, Security ...

security frameworks. Lead the end‐to‐end delivery of complex consultancy engagements across SOC/SIEM/SOAR, XDR/EDR, identity, cloud security, vulnerability management and related services, ensuring delivery to agreed scope, quality and timelines. Serve as a senior technical authority and escalation point for high … consultancy engagements within an MSSP or managed services environment, covering SOC design and deployment, SIEM/SOAR, XDR/EDR, identity, cloud security and vulnerability management. Proven capability designing and implementing enterprise security architectures across Microsoft and mixed-vendor environments, including SaaS platforms and hybrid cloud estates. Deep hands ...

environments tailored to both internal use and customer-facing deployments. Deploy, manage and continually enhance core SOC technologies, including SIEM, XDR, SOAR, vulnerability management and custom automation scripts, all supported by our dedicated in-house infrastructure and lab environments. Investigate Act as a senior escalation point during complex ...

Manage and enhance the organisation's cyber security posture . Monitor, investigate, and respond to security threats and vulnerabilities . Administer Identity and Access Management (IAM) across Microsoft , Microsoft Azure , Amazon Web Services (AWS) , and Software as a Service (SaaS) platforms. Implement and maintain Microsoft Defender , Microsoft Sentinel , Microsoft … Purview , and other security technologies . Lead vulnerability management and coordinate penetration testing activities. Secure Microsoft 365 services, including Exchange Online , SharePoint Online , OneDrive , and Microsoft Teams . Implement data protection controls, including Data Loss Prevention (DLP) , Sensitivity Labels , and encryption . Manage security awareness training and phishing ...

reporting. Act as the primary point of contact for all information security and IT risk matters. Provide regular reporting to senior and executive management on security posture and risk status. Promote a culture of security awareness and compliance across the organisation. Design and deliver security awareness training programmes … staff. Who are we looking for? Proven experience in information security and IT risk management, preferably within financial services or other regulated industries. Strong leadership background, with experience managing and developing high-performing teams in complex environments.Deep understanding of cyber security principles, IT risk frameworks, and operational resilience practices. ...

reporting. Act as the primary point of contact for all information security and IT risk matters. Provide regular reporting to senior and executive management on security posture and risk status. Promote a culture of security awareness and compliance across the organisation. Design and deliver security awareness training programmes … staff. Who are we looking for? Proven experience in information security and IT risk management, preferably within financial services or other regulated industries. Strong leadership background, with experience managing and developing high-performing teams in complex environments. Deep understanding of cyber security principles, IT risk frameworks, and operational resilience ...

recommend improvements. Support the Infrastructure Team with threat and risk intelligence from the Managed SOC. Investigate and respond to security alerts and incidents. Support vulnerability management and security remediation activities. Assist with Microsoft Defender and Microsoft Sentinel security operations. Promote and enhance the organisation's cyber security culture. … programmes. Experience managing phishing simulation campaigns. Security awareness compliance reporting experience. Microsoft Defender Suite. Microsoft Sentinel. Security Operations (SOC). Incident Response. Threat Intelligence. Vulnerability Management. Excellent communication and stakeholder engagement skills. Desirable Experience ISO 27001. Cyber Essentials. Microsoft Intune. Security awareness programme development. Working with Managed Security Service ...

suspicious activity. Investigating security alerts, incidents and potential breaches. Analysing vulnerabilities and implementing measures to reduce risk. Managing and monitoring Identity and Access Management controls, including the detection of inappropriate access or privilege misuse. Researching emerging cyber threats and recommending proactive security improvements. Testing and evaluating security technologies … experience in an Information Security Analyst or similar cyber security role. Strong technical background with solid infrastructure, network and system security knowledge. Experience using vulnerability management tools, Intrusion Detection Systems (IDS) and SIEM platforms. Knowledge of cyber security frameworks and standards such as ISO 27001, NIST Cybersecurity Framework ...

incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical roadmaps with … gaps and align solutions/services to mitigate risk Strong communication and storytelling skills , adapting for technical and non-technical audiences Familiarity with service management practices (e.g. ITIL, ticketing systems) Relevant certifications (e.g. CISSP, CISM, Security+, cloud security ) – desirable Proactive, accountable, and customer-focused mindset with strong ownership ...

system performance, availability, and security posture across environments. Automate operational and security controls using Infrastructure as Code and CI/CD pipelines. Support incident management, root cause analysis, and continuous improvement activities. Collaborate with stakeholders to implement security controls and compliance requirements. Drive improvements in observability, monitoring, logging … alerting. Conduct vulnerability remediation and support security reviews and audits. Essential Skills & Experience Active SC Clearance (mandatory). Proven experience in an SRE, DevSecOps, Platform Security, or Security Engineering role. Strong understanding of cloud platforms (AWS, Azure, or GCP). Experience with Infrastructure as Code tools such as Terraform. ...

Board (CAB) and leadership of an Information Security governance forum. Oversee security operations and technical controls across SIEM, firewalls, endpoint protection, identity and access management, and secure configuration. Manage cyber security across cloud and hybrid environments (Microsoft 365/Azure), including patching assurance, disaster recovery and business continuity testing. … Lead vulnerability management and security testing activity (internal scanning, external testing, remediation tracking, evidence gathering). Manage and coordinate incident response, investigation, reporting and post-incident improvement actions. Maintain compliance and evidence for key standards/frameworks, including (as applicable) PSN, PCI-DSS, Cyber Essentials Plus, GDPR ...

house and needs a hands-on Technical Lead to take the technical reins. This is a solo contractor engagement with no formal line management, but you'll be the working technical authority for a team of four (1 infrastructure engineer, 3 Java software engineers) and the key point … production-scale Java codebase Owning AWS cloud infrastructure (EC2/Node-based; Azure also fine) Directing and coordinating a small team without formal line management Supporting DevOps and integration capability moving in-house Second-line technical escalation during a defined cover period Essential Proven experience as a Technical Lead ...

working! Top 3 skills needed for this role: Highly experienced Cyber Security Operations expertise Advanced security incident response capability Proven security tooling and threat management knowledge What this role is all about: We're looking for a Senior Security Operations Engineer to play a leading role in Vitality … overall security posture This role will work closely with Information Security, IT and Architecture teams to implement and maintain robust security controls Manage vulnerability remediation activities, ensuring security risks are identified, prioritised and addressed appropriately Build strong relationships with internal stakeholders, vendors and technology partners to support effective security ...

administration of Mimecast email filtering system including email review and release. * Day-to-day administration of CyberArk identity and privileged access management tooling. * Microsoft Purview administration including DLP policy monitoring, sensitivity labels, Discovery Searches and compliance alerts. * Maintain and respond to security-related DDQs, keeping the security evidence library … success in the role. * Hands-on experience with Netskope - web filtering, CASB and cloud security and/or CyberArk - identity and privileged access management would be highly desirable skills. * Experience with Rapid7, InsightVM or InsightIDR for vulnerability management and SIEM would also be highly desirable. * Experience ...