26 to 50 of 393 Vulnerability Management Jobs in the UK excluding London

onsite) Hounslow £400 per day (Inside IR35 via umbrella) 6-month contract We're looking for a Cyber Security Analyst specialising in Operational Technology Vulnerability Management to join a high-profile, regulated environment supporting critical infrastructure. The Role You'll play a key role in identifying, assessing … Technology (OT) environments, helping to maintain a strong cyber security posture across complex estates. Key Responsibilities Identify and assess vulnerabilities across OT systems Support vulnerability remediation and risk prioritisation Monitor OT environments and investigate security alerts Contribute to vulnerability management strategy aligned to industry standards Collaborate with ...

Below Overview: We're looking for an experienced Security Architect to join a long-term programme delivering secure Back End platform, endpoint protection and vulnerability management capabilities within highly secure, air-gapped environments. This is an opportunity to play a key role in designing and assuring security solutions … security solutions. Design security capabilities for secure, offline (air-gapped) environments. Implement endpoint protection, AntiVirus and Endpoint Detection & Response (EDR) technologies. Define and implement vulnerability management frameworks, including scanning, remediation and reporting. Design secure patching, signature update and threat intelligence processes for disconnected environments. Conduct security assurance activities ...

Microsoft Azure cloud environments. As the Cyber Security Engineer, you will act as the technical cyber security subject matter expert, taking ownership of vulnerability remediation, threat response, security assessments, and the continuous improvement of security controls across a global estate. The role is ideal for someone with a strong … technical issues. Monitor, triage, and respond to threats through enterprise XDR platforms. Act as an escalation point for high-risk security events and incidents. Vulnerability Management: Lead the remediation of findings from penetration tests, vulnerability scans, and security assessments. Work closely with infrastructure, cloud, and regional ...

with a security background—or an infrastructure or IT professional looking to move further into cyber security—to gain exposure across governance, security architecture, vulnerability management, supplier assurance and security operations. What you'll be doing You'll work closely with the Information Security Manager and technical teams … security best practice is considered from the outset. Working alongside Infrastructure and Operations teams to help design and implement secure-by-design solutions. Supporting vulnerability management, penetration testing activities and remediation programmes. Managing and optimising security tools to maximise their effectiveness across the business. Conducting security risk assessments ...

security architectures, and security operating procedures. Lead and coordinate system accreditation activities for classified and sensitive systems. Develop and maintain accreditation artefacts including Risk Management and Accreditation Documentation Sets (RMADS), Security Cases, Security Management Plans, and supporting evidence. Work with Accreditors, Security Controllers, and customer security representatives … with applicable regulatory, contractual, and customer security requirements throughout system operation. Identify, assess, and mitigate cybersecurity risks within classified IT environments. Conduct security assessments, vulnerability reviews, and compliance audits against corporate and government security standards. Support risk treatment planning and remediation activities. Ensure alignment with NCSC, MoD, JSP, NIST ...

local security function based in the Glasgow office. This is a hands-on role covering incident monitoring and response, as well as risk and vulnerability management across ICT and OT environments. You'll be responsible for all aspects of cyber security. You'll also have input into … Handle incident monitoring and response for EMEA operations. Classify, prioritise, and escalate security events, and drive them through to root cause and closure. Run vulnerability management end-to-end. Run assessments, validate findings, and drive remediation and patching through to resolution. Assess and certify servers, endpoints, and network ...

international technology and cyber security provider. This is far more than a traditional SOC role. You'll be involved in incident response, threat hunting, vulnerability management, detection engineering and proactive cyber defence activities across a modern Microsoft security environment. What You'll Be Doing Investigating and managing security … network environments Threat hunting and proactive security investigations Querying and analysing data using KQL within Microsoft Sentinel Working with Microsoft Defender XDR technologies Supporting vulnerability management and security posture improvements Detection engineering, alert tuning and security tooling optimisation Producing technical reports and recommendations Supporting governance and compliance requirements ...

international technology and cyber security provider. This is far more than a traditional SOC role. You'll be involved in incident response, threat hunting, vulnerability management, detection engineering and proactive cyber defence activities across a modern Microsoft security environment. What You'll Be Doing Investigating and managing security … network environments Threat hunting and proactive security investigations Querying and analysing data using KQL within Microsoft Sentinel Working with Microsoft Defender XDR technologies Supporting vulnerability management and security posture improvements Detection engineering, alert tuning and security tooling optimisation Producing technical reports and recommendations Supporting governance and compliance requirements ...

maturity, embedding monitoring, observability, automated testing and structured incident response Drive adoption of automation and AI‐enabled tooling to improve anomaly detection, incident management, vulnerability management and operational efficiency Provide technical oversight of production operations, ensuring alignment between platform standards and operational support teams Lead cybersecurity governance … including audits, penetration testing, vulnerability management and risk frameworks Support integration of acquired platforms, ensuring alignment with EA Technology’s security and reliability standards Establish and maintain platform standards that balance delivery speed with system integrity and resilience What we’ll need from you Significant experience leading platform ...

implemented, configured correctly and supported by suitable evidence. Assess security controls across AWS, applications, databases and supporting infrastructure, including secure configuration, identity and access management, vulnerability management, audit logging, data protection, network monitoring and application security. Document security test plans, control-to-test traceability, findings, evidence, residual … stakeholders, project leaders and client team members. What We Are Looking For Strong practical experience of manual testing, including test analysis, design, execution, defect management and reporting. Proven experience creating and maintaining automated tests using Python. Hands-on experience testing applications or services hosted in AWS. Practical security testing ...

when they arise. Key responsibilities include: Leading cyber resilience strategy across cloud and enterprise technology environments. Overseeing cyber operations including SOC, SIEM, threat intelligence, vulnerability management, attack surface management and incident response. Working closely with the CISO to develop and implement strategic initiatives that improve operational resilience … cyber incidents, ensuring effective assessment, containment, recovery and lessons learned activities. Leading governance and strategy across cloud security, cyber recovery, data loss prevention and vulnerability management. Developing and operationalising threat intelligence capabilities, working with industry partners and external security communities. Defining and delivering cyber resilience testing strategies through penetration ...

leading financial services organisation, who are seeking an experienced CMDB Product Manager to drive the strategy, governance and continuous improvement of its Configuration Management Database (CMDB) capability within a large-scale IT Service Management environment. This role can be based in Northampton, Knutsford, Manchester or Glasgow. The Role … will work closely with technology teams and stakeholders to optimise IT service management processes, improve service delivery, and ensure CMDB data quality and governance standards are maintained. This role combines product ownership, strategic leadership, and deep ServiceNow expertise to support enterprise-wide technology services. Key Responsibilities Own and evolve ...

client undergoing a transformation of its Identity and Access Management practices including the delivery of a set of net new tools to overhaul how IAM is carried out in the industry. We are seeking experienced and dynamic Security Engineer who have an excellent understanding of Identity Management, with … Support Workload Identity, Human Identity and Agent Identity security controls. Implement and maintain Policy-as-Code solutions using OPA and related technologies. Integrate secrets management, PKI and certificate lifecycle services. Support cryptographic key management and certificate rotation processes. Perform security reviews of solution designs, infrastructure and application code. ...

refinement and false positive tuning. Support the implementation and tuning of identity and access controls, including Conditional Access policies, break-glass procedures, privileged access management and identity hygiene remediation such as shared account rationalisation, credential rotation and dormant privileged account deactivation. Vulnerability Management and Remediation: Execute … experience of security engineering, security operations and tactical security remediation delivery in live enterprise environments. Strong hands-on experience with CrowdStrike Falcon, including console management, detection rule creation and tuning, host investigation and response actions. Experience operationalising SIEM, EDR/XDR and vulnerability management platforms (for example ...

enterprise security tooling suite from scratch — EDR/XDR (CrowdStrike/SentinelOne), SASE/SWG (Netskope/Zscaler), SIEM, email security, DLP, endpoint privilege management, application allowlisting. Architecture: Design and implement enterprise security architecture built on zero trust and secure-by-default principles. Own the technical blueprint across cloud … false positives and expand coverage. Automation: Engineer automation for security operations at scale — scripting (Python, Bash, PowerShell) for response orchestration, access reviews, compliance checks, vulnerability reporting, threat intel enrichment. Integration & Evaluation: Ensure all security tooling integrates with existing infrastructure and identity platforms. Lead POCs, vendor evaluations and build ...

time, a team around them. What you’ll be doing Security Operations & Tooling Ownership Endpoint & Device Strategy: Own the technical configuration, lifecycle management and policy optimisation of endpoint security tooling and enterprise mobile device management (MDM/MAM), namely Microsoft Intune and Defender. Identity & Access Management: Harden … manage Identity & Access Management (IAM) baselines across our core collaboration ecosystems (including Microsoft 365 and Google Workspace), ensuring strict adherence to the Principle of Least Privilege. Authentication & Email Hardening: Optimise modern authentication types (Windows Hello, macOS Platform SSO), secure application API permissions and Entra Enterprise App Registrations, and advance ...

user access management. Supporting desktop operating systems, laptops, mobile devices and collaboration technologies across multiple office locations. Maintaining endpoint security controls, encryption technologies and vulnerability remediation processes. Working closely with cyber security teams to strengthen infrastructure security and reduce operational risk. Supporting enterprise patch management and software deployment … Enterprise switching and routing Firewall administration DNS, DHCP and TCP/IP services Secure remote connectivity Network monitoring and performance optimisation Endpoint protection technologies Vulnerability management Security monitoring platforms Certificate and encryption management Technical Environment You'll have strong experience across most of the following technologies: Infrastructure ...

information security strategy, policies, standards, and procedures in alignment with business objectives and regulatory requirements. Lead the development and implementation of an Information Security Management System (ISMS), based on ISO 27001 Conduct regular security risk assessments, identify vulnerabilities, and recommend appropriate mitigation strategies. Provide expert advice and guidance … operation of security systems and tools, including firewalls, intrusion detection/prevention systems (IDS/IPS), antivirus, anti-malware, SIEM (Security Information and Event Management), vulnerability scanners, and data encryption solutions. Manage vulnerability management programs, including regular scanning, penetration testing, and remediation of identified weaknesses. Lead ...

security is embedded throughout the entire product lifecycle. The Staff Product Security Engineer serves as a recognized security subject matter expert, partnering with product management, engineering leadership, certification teams, and executive stakeholders to establish security roadmaps, enhance security capabilities, and address emerging threats. This role combines deep technical expertise … into product design, development, deployment, and maintenance processes. Lead threat modeling activities for critical systems, products, and architectures. Conduct and oversee advanced security assessments, vulnerability investigations, attack surface analyses, and risk evaluations. Design, implement, and review security controls, cryptographic protections, and system hardening mechanisms. Lead investigations of critical security ...

sector. Through its various business units, it builds and operates renewable projects (such as solar, wind, and batteries), manages investment funds, and provides asset management services across the energy lifecycle. Overall, its mission is to accelerate the transition to sustainable energy while delivering strong financial returns for investors … clients. About the role: Working within our Technology & Digital Services (TDS) team, you'll gain hands-on experience across cyber security operations, risk management, governance, and security assurance while helping to protect critical systems and data. You'll work alongside experienced technology professionals and external partners, supporting real-world ...

Ensure proper monitoring and response plans are in place for customer (AWS) environments to enable the timely and effective response to, and management of, incidents, alarms, notifications, calls, and other activities related to the RSO and new cyber threats. Lead the vulnerability management process to ensure that … teams in relation to identifying and patching vulnerabilities. Develop processes, procedures and playbooks to improve the operational effectiveness and efficiency of the vulnerability management process. Analyse lessons learned and produce thorough documentation on complex incidents focusing on the improvements that can be made to processes, playbooks, and tooling. ...

organisation's security roadmap and controls framework Acting as the senior escalation point for security-related issues Overseeing security operations, incident response and vulnerability management Supporting secure Azure and AWS environments Managing and optimising security tooling including SIEM, EDR and related platforms Reviewing projects, infrastructure changes and technical … guidance across the wider business Skill required Security operations and cyber defence Azure and AWS security Enterprise infrastructure and networking Identity and access management Threat detection and incident response Vulnerability management Security governance, risk and compliance Secure development and DevSecOps practices Experience with Splunk Enterprise Security would ...

users. This role combines ownership of security awareness initiatives and KnowBe4 administration with hands-on cyber security operations, including incident investigation, threat analysis, vulnerability management, and Microsoft Defender-based security monitoring. Client Details This company operates within the property industry. Description Administer and manage the KnowBe4 platform … phishing simulation programmes Create targeted security awareness campaigns for different user groups Monitor training completion, engagement metrics, and programme effectiveness Produce compliance reports and management information Develop engaging cyber awareness content across multiple communication channels Deliver security awareness training to technical and non-technical audiences Support security incident investigations ...

security operations. Drive compliance with ISO 27001, NIST and CBEST frameworks. Review new infrastructure and cloud-based services, ensuring they meet security standards. Conduct vulnerability management activities and coordinate external penetration testing. Work alongside outsourced SOC and security partners to investigate and respond to security incidents. Ensure comprehensive …/3, OSPF and VPNs. Network security controls including Cisco ISE, TACACS, IPS and endpoint protection. Security monitoring and incident response within SIEM environments. Vulnerability management and penetration testing. Security governance aligned to ISO 27001, NIST and risk management frameworks. Developing security policies, conducting audits and managing ...

security operations. Drive compliance with ISO 27001, NIST and CBEST frameworks. Review new infrastructure and cloud‐based services, ensuring they meet security standards. Conduct vulnerability management activities and coordinate external penetration testing. Work alongside outsourced SOC and security partners to investigate and respond to security incidents. Ensure comprehensive …/3, OSPF and VPNs. Network security controls including Cisco ISE, TACACS, IPS and endpoint protection. Security monitoring and incident response within SIEM environments. Vulnerability management and penetration testing. Security governance aligned to ISO 27001, NIST and risk management frameworks. Developing security policies, conducting audits and managing ...