151 to 175 of 415 Vulnerability Management Jobs in the UK

Strengthen and manage the organisation's cyber security posture . Detect, investigate, and respond to cyber threats and security incidents . Administer Identity & Access Management (IAM) across Microsoft , Azure , AWS , and SaaS platforms. Deploy and optimise Microsoft Defender , Microsoft Sentinel , and Microsoft Purview . Drive vulnerability management … security or information security role. Strong technical expertise in Microsoft Entra ID , Microsoft Defender Suite , Microsoft Sentinel , and Microsoft Purview . Proven experience managing vulnerability scanning and penetration testing programmes. Experience supporting ISO 27001 compliance and coordinating Cyber Essentials and Cyber Essentials Plus certifications. Strong analytical, problem-solving ...

email security, firewalls and network access control solutions Owning and managing the organisation-wide patching schedule across servers, endpoints and business-critical applications Conducting vulnerability assessments and ensuring identified risks are effectively prioritised and remediated Managing network security infrastructure, including next-generation firewalls, SASE technologies and zero-trust network … security and resilience of manufacturing and operational technology environments, ensuring appropriate segmentation between IT and OT networks Administering Active Directory, Group Policy and identity management controls while supporting the ongoing development of hybrid cloud environments Designing, delivering and continuously improving the organisation's cyber security awareness programme, including phishing ...

with other engineering and security teams to embed security best practices Automation to support security tooling like SIEM tooling log ingestion Firewall and network management within hybrid cloud and on-premises environments Develop and maintain security policies, standards and procedures Conduct security assessments in the form of infrastructure reviews … services Proficiency in scripting or programming (Python, Bash, PowerShell) Excellent problem-solving, analytical, and communication skills Experience with IDS/IPS solutions, vulnerability management, and endpoint security Familiarity with AI hardening techniques Experience in working within SOC teams Familiarity with IaC technologies (CloudFormation, Terraform, Bicep) Note: This role ...

controls into CI/CD pipelines Develop secure Infrastructure as Code (Terraform, Bicep, ARM, Ansible) Design secure Azure, AWS and hybrid cloud environments Implement vulnerability management, security monitoring and automated compliance Support threat modelling, security architecture reviews and risk assessments Drive adoption of Secure Software Development Lifecycle (SSDLC … Code experience (Terraform, Bicep, ARM Templates or Ansible) Experience securing Kubernetes and containerised environments Knowledge of Zero Trust Architecture, IAM, RBAC and Privileged Access Management (PAM) Experience implementing SAST, DAST, SCA, container scanning and secrets management Strong scripting skills with PowerShell, Python or Bash Experience with SIEM, SOAR ...

would be great if you also have: Experience working as an Incident Responder Experience developing detection rules, automation workflows or SOAR playbooks Knowledge of vulnerability management and remediation processes Understanding of HMG security standards and processes Microsoft certifications such ...

Manage and enhance the organisation's cyber security posture . Monitor, investigate, and respond to security threats and vulnerabilities . Administer Identity and Access Management (IAM) across Microsoft , Microsoft Azure , Amazon Web Services (AWS) , and Software as a Service (SaaS) platforms. Implement and maintain Microsoft Defender , Microsoft Sentinel , Microsoft … Purview , and other security technologies . Lead vulnerability management and coordinate penetration testing activities. Secure Microsoft 365 services, including Exchange Online , SharePoint Online , OneDrive , and Microsoft Teams . Implement data protection controls, including Data Loss Prevention (DLP) , Sensitivity Labels , and encryption . Manage security awareness training and phishing ...

skills with the ability to clearly explain complex technical issues related to vulnerabilities and risk to diverse audiences, including senior stakeholders, in support of vulnerability management, threat mitigation, and risk-based decision-making. Participation in GCASE/GBEST/CBEST/TIBER engagements. Desirable : Experience in threat/… vulnerability research, including publication and presentation to the wider cyber security community. Background in a related a discipline, such as protective monitoring, incident response, security engineering or security architecture. Certifications in the field of red team: CCSAS/CCRTS, CRTL Role/Responsibilities: Designing and executing threat intelligence-based ...

skills with the ability to clearly explain complex technical issues related to vulnerabilities and risk to diverse audiences, including senior stakeholders, in support of vulnerability management, threat mitigation, and risk-based decision-making. Participation in GCASE/GBEST/CBEST/TIBER engagements. Desirable: Experience in threat …/or vulnerability research, including publication and presentation to the wider cyber security community. Background in a related a discipline, such as protective monitoring, incident response, security engineering or security architecture. Certifications in the field of red team: CCSAS, CRTL Security Clearance: SC Disability Confident As a member ...

Responsibilities Define and lead the CSOC strategy, operations, and governance. Take command of major incident response, managing remediation and stakeholder communication. Oversee threat intelligence, vulnerability management, and security monitoring capabilities. Manage relationships with external agencies, Managed Security Service Providers (MSSPs), and technology partners. What We Need From … Proven experience as a SOC Manager (previous leadership experience is essential; this is not an entry-level management role). Deep expertise in incident management processes and live crisis response. Strong background in managing third-party vendors (MSSPs). Strategic mindset to plan security investments, tooling, and resourcing. ...

Responsibilities Define and lead the CSOC strategy, operations, and governance. Take command of major incident response, managing remediation and stakeholder communication. Oversee threat intelligence, vulnerability management, and security monitoring capabilities. Manage relationships with external agencies, Managed Security Service Providers (MSSPs), and technology partners. What We Need From … Proven experience as a SOC Manager (previous leadership experience is essential; this is not an entry-level management role). Deep expertise in incident management processes and live crisis response. Strong background in managing third-party vendors (MSSPs). Strategic mindset to plan security investments, tooling, and resourcing. ...

known business in their space and growing at an incredible rate. Key Responsibility: Support the development, implementation, and ongoing maintenance of the Information Security Management System (ISMS) aligned to ISO 27001 Implement and enforce information security policies, standards, and procedures across the organisation Conduct security risk assessments, ensuring risks … supplier security risk assessments and assurance processes Work with IT and project teams to ensure security is embedded into system design, development, and change management processes Deliver and continuously improve the organisation's security awareness and training programme Ensure compliance with regulatory requirements, including FCA expectations and data protection ...

technology, data, cyber security, and related operational risks. Reporting to the Head of Technical Risk and Data Protection Officer, the role supports the effective management of technology and data risks by ensuring first line teams identify, assess and mitigate risks in line with Nest’s risk appetite while enabling … organisation to deliver its strategic objectives securely and efficiently.Working across the organisation, the role promotes strong risk management practices, providing expert challenge on technology, data protection, information security, and third-party risk matters. It plays a key role in strengthening governance, embedding a strong data protection and security culture ...

monitoring processes led directly by DVSA or its service provider. It also responds to incidents of a technical nature in line with DVSA Incident Management procedures. It restores normal service operation as quickly as possible and minimises any adverse effect on business operations. This ensures that the best possible … best-practice security standards, including performing or arranging digital forensics to support evidence gathering and preservation. Driving proactive cyber defence through threat hunting and vulnerability management, using threat intelligence to identify emerging risks, suspicious activity, and weaknesses in DVSA's security posture. Manage post-incident review, including root ...

monitoring processes led directly by DVSA or its service provider. It also responds to incidents of a technical nature in line with DVSA Incident Management procedures. It restores normal service operation as quickly as possible and minimises any adverse effect on business operations. This ensures that the best possible … best-practice security standards, including performing or arranging digital forensics to support evidence gathering and preservation. Driving proactive cyber defence through threat hunting and vulnerability management, using threat intelligence to identify emerging risks, suspicious activity, and weaknesses in DVSA's security posture. Manage post-incident review, including root ...

monitoring processes led directly by DVSA or its service provider. It also responds to incidents of a technical nature in line with DVSA Incident Management procedures. It restores normal service operation as quickly as possible and minimises any adverse effect on business operations. This ensures that the best possible … best-practice security standards, including performing or arranging digital forensics to support evidence gathering and preservation. Driving proactive cyber defence through threat hunting and vulnerability management, using threat intelligence to identify emerging risks, suspicious activity, and weaknesses in DVSA's security posture. Manage post-incident review, including root ...

offensive security. Share knowledge with wider cyber security and non-security teams to help strengthen the organisation's overall security culture. Contribute to vulnerability management, threat mitigation and risk-based security decision-making. Essential Experience & Skills The successful candidate will demonstrate: Proven experience planning and executing complex, multi … including senior stakeholders. Experience contributing to or participating in GCASE, GBEST, CBEST or TIBER engagements. Desirable Experience Experience in threat research and/or vulnerability research, including publishing research or presenting findings to the wider cyber security community. Previous experience in a related security discipline, such as: Protective Monitoring ...

Identify gaps in monitoring coverage and implement improvements to strengthen security visibility Investigate and respond to DLP alerts and potential data security incidents Support vulnerability management by helping prioritise remediation activities based on risk and exploitability Contribute to SOC maturity through automation, process improvements, playbook development and post ...

pipeline design, integration of security scanning tools, and automation of security controls. Strong knowledge and understanding of service mesh, cryptography, network security, application security, vulnerability management, and risk management. Demonstrable ability to conduct threat modelling, platform security assessments, and gap analysis. Experience building and implementing maturity models, frameworks … roadmaps in complex enterprise environments. Strong stakeholder management skills, with the ability to influence senior leadership and drive change across federated technology teams. Excellent communication skills, with the ability to translate technical risk into business impact. Professional certifications such as CISSP, CISM, CCSK, CCSP, or equivalent. Hands-on knowledge ...

cloud PaaS provider (e.g. Azure or AWS) Strong working knowledge of information security standards and good practice (e.g. ISO 27001) Understanding of designing security management systems Experience with threat and vulnerability management systems Ability to assess security control designs and configurations for effectiveness in risk mitigation … collaborative, consultative approach with a genuine desire to help your team succeed Service delivery/project management experience; Agile and DevOps exposure is a plus Nice to have: A track record of building trusted relationships with security stakeholders Experience drafting, implementing and maintaining security processes Experience managing the delivery ...

Lead and embed DevSecOps engineering practices across multiple MOD digital products Design and govern secure CI/CD and GitOps pipelines Integrate security scanning, vulnerability management and compliance controls Drive Infrastructure as Code using Terraform Work across Kubernetes/Docker/AWS EKS Implement secrets, identity and access … management using technologies such as HashiCorp Vault Establish observability, monitoring, logging and audit controls Develop secure-by-design engineering practices aligned to MOD security requirements Coordinate DevSecOps engineers, developers, testers and infrastructure teams Create and maintain security processes, technical standards and operational runbooks Support incident response, patching, risk management ...

implementations Infrastructure & Networking Windows 11 deployment and support Windows Server administration and support Active Directory administration IPv4 networking VPN setup and troubleshooting Remote Monitoring & Management (RMM) platforms Managed switches UniFi wireless networking solutions AWS cloud technologies Support & Customer Service MSP or customer-focused IT support experience Helpdesk support experience … face-to-face meetings Cyber Security & Compliance Knowledge of GDPR and ISO 27001 Understanding of cyber security principles and best practices Experience with vulnerability management and security monitoring is beneficial Qualifications (Desirable) MD-102: Endpoint Administrator Associate SC-200: Microsoft Security Operations Analyst Other Microsoft, cybersecurity, networking ...

remediation workstreams during active and post-incident engagements. Deliver hands-on technical remediation across Windows, Linux, Active Directory, networking and cloud environments. Drive patching, vulnerability remediation, secure rebuilds and infrastructure hardening. Design secure recovery strategies, including isolated recovery environments, backup validation and phased restoration of critical services. Review network … infrastructure. Cloud platforms such as Azure, AWS and Microsoft 365. Recovery from ransomware, Active Directory compromise or other large-scale cyber incidents. Infrastructure hardening, vulnerability management, secure rebuilds and recovery planning. Managing technical workstreams and communicating effectively with both technical teams and senior stakeholders. Hit the Apply button ...

remediation workstreams during active and post-incident engagements. Deliver hands-on technical remediation across Windows, Linux, Active Directory, networking and cloud environments. Drive patching, vulnerability remediation, secure rebuilds and infrastructure hardening. Design secure recovery strategies, including isolated recovery environments, backup validation and phased restoration of critical services. Review network … infrastructure. Cloud platforms such as Azure, AWS and Microsoft 365. Recovery from ransomware, Active Directory compromise or other large-scale cyber incidents. Infrastructure hardening, vulnerability management, secure rebuilds and recovery planning. Managing technical workstreams and communicating effectively with both technical teams and senior stakeholders. Hit the Apply button ...

impact. What you will be doing Monitor, develop and optimise SIEM and threat detection systems Investigate security incidents, coordinating response, containment and escalation Conduct vulnerability scanning and support remediation across the IT estate Work closely with infrastructure and technical teams to implement secure configurations Support and maintain security policies … experience in a cyber security or infrastructure security role Strong understanding of security principles, threat detection and risk-based thinking Experience with SIEM platforms, vulnerability management tools and detection response technologies such as EDR, XDR or MDR Knowledge of cyber security frameworks such as ISO 27001 or NIST ...

Doing Provide assurance against contractual security obligations for product and service deliverables, including ISO 27001, CE+ and DCC. Deliver security strategies, policies, management plans, procedures and governance in accordance with relevant frameworks and industry standards. Own cybersecurity assurance artefacts and security control requirements across contracted schedules and project milestones. … Lead certification or contract dependent ITHCs, vulnerability management exercises and external penetration testing, ensuring remediation is completed and verified. Review infrastructure, cloud and application designs against Secure by Design principles and perform risk assessments for new technologies and business initiatives. Participate in Change Advisory Board (CAB) meetings ...