201 to 225 of 854 Vulnerability Management Jobs in the UK

best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies, standards and procedures. Conduct infrastructure security assessments using recognised methodologies … tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify and mitigate emerging security risks ...

best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies, standards and procedures. Conduct infrastructure security assessments using recognised methodologies … tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify and mitigate emerging security risks ...

best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies, standards and procedures. Conduct infrastructure security assessments using recognised methodologies … tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify and mitigate emerging security risks ...

mitigation strategies Strong leadership and communication skills with the ability to guide teams in high-pressure scenarios Experience working with SIEM, EDR, and vulnerability management platforms Understanding of risk-based prioritisation and regulatory compliance considerations Willingness to support out-of-hours activities based on threat levels or response … experience contributing to GRC or ISO standards Desirable: knowledge of ITIL, NIST, or MITRE ATT&CK frameworks Desirable: understanding of customer impact and stakeholder management within cyber contexts Awareness of applicable regulations and frameworks such as NCSC, NIST, ISO27001, and Cyber Essentials Plus Core Competencies Demonstrates expertise in cybersecurity ...

secure and compliant cloud environments. Your Primary Responsibilities Operate and support cloud security platforms and services across AWS, Azure, and GCP, including CSPM, CNAPP, vulnerability management, compliance monitoring, and identity security solutions. Investigate, analyze, and assist with remediation of cloud security findings, vulnerabilities, misconfigurations, and compliance gaps … CISSP, etc.). Talents Needed For Success Experience securing cloud environments in AWS, Azure, and/or GCP. Hands-on experience with CSPM, CNAPP, vulnerability management, and security tooling such as Wiz, Qualys, CrowdStrike, AquaSec, or similar platforms. Knowledge of cloud identity and access management, security monitoring ...

position may require occasional travel.* RESPONSIBILITIES: Own and evolve EU/UK financial services and digital operational resilience posture across DORA (including ICT risk management, incident reporting, resilience testing, and third‐party ICT provider oversight), and complementary expectations from EBA/ESMA/EIOPA guidance, PSD2/PSR where … business rather than depending on manual, point‐in‐time checks. Operate and extend GRC platforms (e.g., Vanta) as the backbone for control mapping, evidence management, and continuous compliance; integrate with cloud, identity, logging, and engineering systems to reduce administrative bottlenecks. Partner with Architects and Engineering Leads to bake ...

ownership of the tooling and procedures that keep security operations running. What you'll be responsible forSupporting and enhancing security tooling SIEM, EDR, DLP, vulnerability management, and automation platforms including configuration, tuning, and day-to-day maintenanceBuilding and improving operational procedures, runbooks, and playbooks so the team … handling security alerts, escalating high-severity events, and contributing to incident response under the direction of senior engineersTracking, coordinating, and driving pentest and vulnerability findings through to remediation across engineering teams (ownership, action plans, status, closure)Maintaining the accuracy and hygiene of security data asset inventories, finding trackers ...

attacks within a large network infrastructure. Experience reviewing procedures and recommending improvements to hardware and network security resilience. In-depth knowledge of antivirus and vulnerability management products. Strong information risk analysis and management skills. Excellent analytical and problem-solving skills, with the ability to resolve complex security … attacks within a large network infrastructure. Experience reviewing procedures and recommending improvements to hardware and network security resilience. In-depth knowledge of antivirus and vulnerability management products. Strong information risk analysis and management skills. Excellent analytical and problem-solving skills, with the ability to resolve complex security ...

schools), and TTS (educational resources). Within the assessment market we are experts in providing solutions for online exam testing and marking and the management and analysis of educational data. We work with government ministries, exam boards and professional awarding bodies for high stakes assessment such as GCSEs, ALevels … shift and on‐call cover, escalation, and the runbooks the analysts work from. Administer SOC tooling: workspace and data connector health, ingestion and cost management, retention, and integration with Defender XDR, Defender for Cloud and Entra ID Protection. Own detection engineering: write and tune KQL analytics rules and hunting ...

primary practitioner resource within a small, specialist Cyber Security team of three, including the VP, responsible for day-to-day security monitoring, vulnerability management, incident response, and internal audit activity that keeps our security posture credible and improving. Hands-on delivery is the core expectation; this … Operating and maintaining security tooling, including CSPM, SAST, and DAST platforms, ensuring coverage, configuration, and outputs are maintained to a defined standard Managing the vulnerability management programme, including coordination of internal and external penetration testing Conducting internal security audits and risk assessments, producing findings reports and tracking remediation ...

architectures. Translate identified cybersecurity risks into clear and testable engineering requirements. Advise engineering teams on appropriate cybersecurity controls, including secure boot, authentication, encryption, key management, access control, secure diagnostics and secure communications. Support cybersecurity verification and validation, including vulnerability analysis, penetration testing, fuzz testing and requirements-based testing. … Evaluate cybersecurity vulnerabilities and support incident response, remediation and coordinated vulnerability management activities. Produce and maintain cybersecurity work products, traceability records and evidence supporting the cybersecurity case. Perform cybersecurity reviews and assessments to confirm compliance with project plans, organisational processes and ISO/SAE 21434. Support the integration ...

software development processes, helping the organisation meet the requirements of the European Union Cyber Resilience Act (CRA). This includes strengthening security-by-design, vulnerability management, software assurance, and the engineering evidence needed to demonstrate effective security controls. The role requires close collaboration with software engineering, product security … complex codebase and drive improvements to software quality, reliability, and security. Experience applying secure software development lifecycle practices, including threat modelling, secure design, vulnerability management, and release governance. Experience with vulnerability disclosure, severity assessment, remediation planning, and security updates. Experience leading technical initiatives and influencing teams without ...

world’s fastest-growing companies to secure their users, apps, and devices. Built for the AI era, Iru unifies identity & access, endpoint security & management, and compliance automation—collapsing the stack and giving IT & security time and control back. Iru is backed by some of the smartest investors in tech … full Iru platform, including: Endpoint: enrollment, configuration, app deployment, and patching on Mac, iPhone, iPad, Apple TV, Windows, and Android, plus EDR and vulnerability management Identity: passwordless access, SSO, and identity providers like Microsoft Entra ID and Okta Compliance: compliance automation and Trust Center APIs, MCP, and integrations ...

more). Leverage CloudTrail, GuardDuty, and SIEM integrations to maintain visibility across the AWS estate. Align detection logic with MITRE ATT&CK for Cloud. Vulnerability & Configuration Management: Own vulnerability management for cloud workloads - prioritizing findings from cloud configuration assessments, and runtime protection tools. Drive remediation with … Engineering and Infrastructure teams, and build automated enforcement where manual review doesn't scale. Identity & Access Management: Define and enforce least‐privilege principles across AWS IAM, service accounts, and federated identity. Review and improve IAM policies, permission boundaries, cross‐account roles, and access patterns. Reduce standing access and enforce ...

desired business outcomes. Leverage your understanding of the cybersecurity landscape to effectively position Arctic Wolf and communicate key differentiators across security operations, endpoint security, vulnerability management, and cloud security. Build and maintain strong relationships within reseller, channel, and MSP communities to support partner-led opportunities and regional growth. … role. Proven success supporting complex cybersecurity sales cycles, driving technical wins, and helping secure new business. Strong technical expertise across networking, identity and access management, cloud services, private cloud environments, and Windows, Linux, and macOS operating systems. Strong understanding of cybersecurity technologies and strategies, including Security Operations, Incident Response ...

desired business outcomes. Leverage your understanding of the cybersecurity landscape to effectively position Arctic Wolf and communicate key differentiators across security operations, endpoint security, vulnerability management, and cloud security. Build and maintain strong relationships within reseller, channel, and MSP communities to support partner-led opportunities and regional growth. … role. Proven success supporting complex cybersecurity sales cycles, driving technical wins, and helping secure new business. Strong technical expertise across networking, identity and access management, cloud services, private cloud environments, and Windows, Linux, and macOS operating systems. Strong understanding of cybersecurity technologies and strategies, including Security Operations, Incident Response ...

infrastructure and systems, utilising intelligence gathered along with Partnership tooling. You will then generate reporting on your findings at appropriate levels (technical analysis, management summary, etc). You’ll work within the team and with a variety of stakeholders to support the provision of up-to-the-minute intelligence … Partnership, in context with the business, our customers, Partners and suppliers. Working closely with our Vulnerability Management team, you will integrate threat intelligence into remediation efforts and leverage scan data to guide threat hunting initiatives and future intelligence reporting. Internally the role is known as Senior Information Security ...

CISO's delegate across executive, risk, governance, customer, supplier and regulatory forums. Ensure the function has the right operating model, capabilities, technology and management information to protect NewDay and support future growth. Turn security strategy into action Be responsible for the operational delivery of NewDay's security strategy, ensuring … investment and activity are focused on reducing material cyber and technology risk. Own the Information Security Management System and support continued alignment with ISO/IEC 27001:2022, the NIST Cybersecurity Framework and other recognised standards. Maintain effective security policies, standards and controls, ensuring they are understood, embraced, evidenced ...

cyber and technology risks on behalf of Santander London Branch (SLB) based on Santander group policies and standards in line with internally defined risk management frameworks, appetite and best practice. Reporting to the CISO for SLB, you’ll play a key role in the effective application, administration, and implementation … strategies and controls designed to manage cyber risks for SLB. You’ll promote and embed the technology risk management framework and operating model, driving measurable reductions across all areas of technology risk. The difference you’ll make: Providing independent oversight and effective challenge of cyber and information security risks ...

Essex. Please Note That We Do Not Provide Sponsorship This is a hands-on senior role covering security operations, cloud security, incident response, vulnerability management and continuous security improvement. Responsibilities * Lead investigation and response to cyber security incidents. * Manage and improve SIEM, EDR/XDR and security monitoring. … team members and advise senior stakeholders. Experience * Strong background in Cyber Security Engineering, SOC or Security Operations. * SIEM, EDR/XDR, incident response and vulnerability management experience. * Knowledge of Azure/Microsoft 365, cloud security and IAM. * Understanding of ISO 27001, NIST and Cyber Essentials. * Experience in complex ...

experience, including a minimum of 3 years of dedicated information security experience. Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle). Active Splunk certification combined with hands‐on experience managing … featuring recent experience in technical design and architecture. Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance. Proven experience acting as a technical leader, mentor, or subject matter expert in consulting or architectural roles. Excellent ...

experience, including a minimum of 3 years of dedicated information security experience. Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle). Active Splunk certification combined with hands-on experience managing … featuring recent experience in technical design and architecture. Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance. Proven experience acting as a technical leader, mentor, or subject matter expert in consulting or architectural roles. Excellent ...

experience, including a minimum of 3 years of dedicated information security experience. Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle). Active Splunk certification combined with hands-on experience managing … featuring recent experience in technical design and architecture. Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance. Proven experience acting as a technical leader, mentor, or subject matter expert in consulting or architectural roles. Excellent ...

resilient, and scalable platforms across Azure, AWS, or both. Design and improve CI/CD pipelines, infrastructure as code, automated testing, release controls, environment management, and deployment strategies. Work with software engineering and data science teams to productionize AI solutions and ensure services are ready to operate reliably … such as Docker and Kubernetes. Strong software engineering and automation skills using Python, Bash, PowerShell, Go, or a similar language. Knowledge of observability, incident management, cloud security, identity and access management, secrets management, network security, vulnerability management, and software supply‐chain risk. Demonstrable experience using ...

Magentus has been at the forefront of transforming healthcare through technology across Australia and the UK. From pathology and radiology to oncology, and practice management, our solutions connect the healthcare ecosystem and unlock better patient outcomes at scale. At Magentus, people are at the heart of everything we do. … identify and mitigate risks, respond to incidents, and support compliance with internal policies and external regulations. Key responsibilities include monitoring security systems, conducting vulnerability assessments, supporting audit and compliance activities, and contributing to the development of strategies to enhance the organization's security posture. The SecOps Engineer also supports ...