401 to 425 of 848 Vulnerability Management Jobs in the UK

services including EC2, ECS, Fargate, S3, and RDS. Progressing and establishing our foundational AWS Control Tower and Landing Zones architecture. Executing Cloud Security Posture Management (CSPM) and vulnerability management using tools like Snyk and various AWS security services. Owning infrastructure projects end-to-end, from the initial ...

services including EC2, ECS, Fargate, S3, and RDS. Progressing and establishing our foundational AWS Control Tower and Landing Zones architecture. Executing Cloud Security Posture Management (CSPM) and vulnerability management using tools like Snyk and various AWS security services. Owning infrastructure projects end-to-end, from the initial ...

grade or similarly secure environments such as defence. Hybrid London based Service Owner - Service Experience Proven experience as a Service Owner, Head of Service Management, Service Delivery Manager or equivalent senior role.Lead end-to-end service management, service desk, portals, self-service, NOC/APM monitoring and continual … improvement. implementing service automation, self-service platforms, service catalogues or knowledge management services SIAM and multi-supplier environments. NOC, APM, automation, self-service, service catalogue or knowledge-management implementation. GDS Service Standard and government service management experience. ITIL 4 Managing Professional, Strategic Leader or equivalent. Service Owner ...

teams help identify, reduce, monitor, and respond to technology and information security risks. In this role, you may support secure architecture, identity and access management, endpoint protection, application security, security monitoring, cloud security, documentation, and AI-enabled cybersecurity workflows while collaborating with cybersecurity engineers, product partners, software development teams … operations teams, and business stakeholders. ResponsibilitiesResponsibilities & What Type of Work to ExpectSupport secure network, endpoint, identity, access management, application security, and cloud security activities under guidance from experienced engineers. Assist with security documentation, assessment findings, remediation tracking, reporting, and control implementation activities that support compliance and security posture improvements. ...

Intact Insurance is seeking a Cyber Defence Transformation Analyst to drive continuous improvement, automation, and data-driven security capabilities. You will focus on vulnerability management, exposure management, and SOC operations to align with evolving threats and business priorities. Responsibilities include delivering a roadmap for tooling improvements, embedding ...

Engineer and Analyst while remaining technically active, coordinating complex security projects across a range of departments. You are the bridge between high-level risk management and technical execution, ensuring that security enables - rather than hinders - our global growth. Job Responsibilities Direct Management: Lead, mentor, and set the roadmap … Information Security Engineer and Analyst. Focus on career development and technical cross-skilling. Workflow Management: Act as the "Traffic Controller" for the team, using Kanban to prioritise high-value tasks and ensuring the team stays focused on meaningful risk reduction rather than just "noise." Cross-Functional Liaison: Partner with ...

better defend our mission to transition to a zero-carbon future. This role in a nutshell: As a Principal Security Engineer (Attack Surface Management) at OVO, you will be the key technical leader responsible for shaping the enterprise-wide strategy for zero trust access, attack surface observability and security … weakness amplification workflows. This involves deep hands-on expertise, driving the innovation of exposure management practices, guiding architectural decisions for zero trust access and data loss prevention controls, and leading the way in solving complex, emerging security challenges. You will ensure OVO maintains a proactive and automated defence posture ...

Assurance Officer is responsible for ensuring that GSA implements and maintains all mandatory information and cyber‐security controls required under the client Information Security Management Plan (ISMP), associated security documentation and governance agreements with parent companies. The role provides assurance across corporate and project systems, oversees integration with client … security operations, ensures subcontractor compliance, and leads the development and operation of a robust Information Security Management System (ISMS) aligned to ISO/IEC 27001. You will act as the central authority for information security governance, incident management and continuous improvement across the organisation. What ...

Developing the information security plans and policies for NSSLGlobal and Customers working with Security Management and Compliance functions to embed security management plans into operational practice Implementing protections and solutions to ensure and enforce the information security plans and policies Monitoring and collating information from monitoring tools … testing for vulnerabilities and recommending improvements. To participate and support all internal IT & Engineering teams including providing advice and expertise on the design and management of internal, customer and global networks from a cybersecurity perspective. Creating documentation around policies, procedures and events. Who we are: NSSLGlobal Group ...

concepts and 5+ years of applied experience. Background in infrastructure, system administration, and secure software development lifecycle is desired. Experience in security products, risk management, information security standards, security architecture principles, threat and vulnerability management, including incident response methodologies. Advanced proficiency in one or more programming languages … e.g., public cloud, artificial intelligence, machine learning, mobile, etc.). Advanced knowledge of enterprise networking and network security controls. Understanding of Identity and Access Management systems and processes in an enterprise environment, familiar with Federated Identity Management, SSO, OAuth, SAML, AD & ADFS, Privileged Access Management, RBAC, etc. ...

background in information or cyber security and experience across some of the following: Security Operations/incident response SIEM and EDR Identity and Access Management MFA and Conditional Access Vulnerability management Security controls and technical assurance Security reporting and metrics NIST, ISO 27001, CIS Controls or similar ...

client is a management and technology consultancy. Our Cyber Security Consultants play a critical role in supporting Defence, national security, government and critical national infrastructure organisations and protecting some of the UK's most sensitive and mission-critical systems. Working across complex Defence and MOD programmes, you will help … objectives. Desirable Experience supporting UK Defence, MOD, national security, government or critical national infrastructure organisations. Knowledge of Defence security policies, assurance approaches and risk management methodologies. Experience contributing to security assurance and accreditation activities for secure systems. Familiarity with classified or sensitive environments and associated security controls. Understanding ...

objectives. Desirable Experience supporting UK Defence, MOD, national security, government or critical national infrastructure organisations. Knowledge of Defence security policies, assurance approaches and risk management methodologies. Experience contributing to security assurance and accreditation activities for secure systems. Familiarity with classified or sensitive environments and associated security controls. Understanding … procurement and capability delivery programmes. Beneficial Knowledge Government and industry security frameworks such as HMG Security Policy Framework (SPF), ISO 27001 and NIST. Risk management methodologies and security assurance frameworks. Enterprise and security architecture approaches including TOGAF and SABSA. Cloud security and secure digital transformation programmes. Security operations, vulnerability ...

objectives. Desirable Experience supporting UK Defence, MOD, national security, government or critical national infrastructure organisations. Knowledge of Defence security policies, assurance approaches and risk management methodologies. Experience contributing to security assurance and accreditation activities for secure systems. Familiarity with classified or sensitive environments and associated security controls. Understanding … procurement and capability delivery programmes. Beneficial Knowledge Government and industry security frameworks such as HMG Security Policy Framework (SPF), ISO 27001 and NIST. Risk management methodologies and security assurance frameworks. Enterprise and security architecture approaches including TOGAF and SABSA. Cloud security and secure digital transformation programmes. Security operations, vulnerability ...

/CD & Software Delivery:** Build and maintain delivery pipelines using platforms such as Azure DevOps and GitHub Actions. Automate build, testing, security scanning, artefact management and deployment activities, and help teams move towards smaller, repeatable and lower-risk releases.**Containers & Cloud-Native Platforms:** Support containerised workloads using technologies such … Platform Engineering & Developer Experience:** Treat the internal platform as a product. Create self-service capabilities, reusable infrastructure modules, standard hosting patterns, secrets and configuration management, standard CI/CD pipelines and “golden paths” so development teams can consume cloud services without needing to become infrastructure experts.**Observability, Reliability & Operations ...

Govern security controls across the full stack: Kafka, .NET/C#, Vue.js, Kong API Gateway, Auth0, and Salesforce. Lead threat modelling, penetration testing, and vulnerability management programmes. Own identity and access management strategy, including Entra ID, Auth0, and partner federation. Drive security engineering best practices within product … Partner with the DPO on data governance and breach notification obligations. Manage third-party and supply chain security risk, including critical outsourcing oversight. Incident management & operations: Own the security incident response plan; lead major incident management for cyber events. Operate and improve security monitoring, SIEM, and alerting across ...

Oceania, and East Asia.. The group has over 150,000 employees, offering services including commercial banking, trust banking, securities, credit cards, consumer finance, asset management, and leasing. As one of the top financial groups globally with a vison to be the world's most trusted, we want to attract … more information - mufgemea.com. IT Security department covers cyber security strategy maintenance and tactical planning and operations to provide IT Security protection, governance, risk management and reporting. This includes promoting Head Office Information Security Standards and Procedures (ISSP) requirements and local security requirements. The department supports and monitors security solutions ...

through to resolution within the team’s operating model.Maintain internal IT services including LAN, wireless, VOIP and mobile telephony, and support IT procurement, supplier management and hardware refresh.Automation, Monitoring & Continuous ImprovementDevelop and maintain automation and scripts for repeatable operational tasks.Maintain effective monitoring, alerting and dashboards across metrics … effective use of modern tooling including AI-assisted development and automation.Security, Documentation & CollaborationOperate infrastructure with a security-first approach, applying access controls, hardening and vulnerability remediation in line with company policies.Support logging, monitoring and security tooling, and assist with investigation and remediation of security alerts.Plan and deliver changes ...

consistency of security delivery. Key Responsibilities: Cloud Security Engineering Build and maintain reusable cloud security guardrails for identity, logging, encryption, network segmentation, secrets management, storage, workloads, containers, serverless services, and data protection. Translate security architecture standards into deployable cloud patterns, reference implementations, templates, and engineering‐ready requirements. Partner with … related cloud security tooling. Develop policy‐as‐code and control‐as‐code mechanisms to prevent, detect, and report common cloud misconfigurations. Support cloud‐native vulnerability and misconfiguration remediation by providing prioritization logic, remediation guidance, and reusable fix patterns. Establish cloud security metrics and dashboards covering control adoption, misconfiguration trends ...

Configuring, maintaining and supporting security technologies across on-premises, cloud and SaaS environments. Supporting firewalls, VPNs, endpoint protection, email security, identity and access controls, vulnerability management and security monitoring platforms. Coordinating vulnerability assessments and working with system owners to track remediation through to completion or formal acceptance. … services and applications. You'll also bring: Practical knowledge of TCP/IP, firewalls, VPNs, DNS, DHCP, certificates and SSL/TLS. Experience with vulnerability scanning, secure configuration assessments and remediation tracking. An understanding of common attack techniques, security monitoring and incident response. Knowledge of the OWASP ...

improve the organisation’s security posture across cloud and technology environments. This role has a strong focus on platform security assessments, cloud security posture management (CSPM), and the use of security tools to detect misconfigurations, vulnerabilities, and control gaps. The successful candidate will work closely with engineering, infrastructure … secure-by-design practices. Key Responsibilities: Conduct security assessments of platforms, applications, and cloud environments to identify risks, misconfigurations, and control weaknesses. Use CSPM, vulnerability management, and related security tools to continuously monitor cloud and platform security posture. Review configurations across cloud services, infrastructure, identity, networking, containers ...

User Computing architecture for a large, distributed estate across stores, offices, and distribution centres, leading transition, transformation, and modernisation, including cloud-based endpoint management and secure, scalable EUC platforms. You will work closely with CIOs and senior IT leadership to shape EUC strategy and lead innovation through automation … architecture across Windows, macOS, mobile, and EPOS Lead EUC transition and transformation initiatives aligned to business and IT strategy Design and implement modern device management with Intune, SCCM, and Autopilot Drive endpoint security, compliance, and patch management standards across the estate Oversee application packaging, deployment, and life cycle ...

align technical initiatives with business goals. Security Oversight: Ensure compliance with security standards and frameworks (e.g., Microsoft best practice, CIS, NIST). Oversee vulnerability management in terms of patching and incident response. Work closely with SOC teams to remediate and maintain a secure client environment. Automation & Tooling: Design … development of team members. Set clear objectives and performance expectations for the team members. Promote a culture of innovation, accountability and continuous improvement. Escalations Management: Offer escalation support and guidance to team members and other employees. Resolve escalated IT support issues promptly and effectively. o Make sure that Service ...

technical documentation, operational procedures, and knowledge articles. Contribute to service improvements, platform optimisation, and operational best practices. Support platform maintenance activities, upgrades, patching, and vulnerability remediation. Required Skills & Experience Strong hands-on experience supporting enterprise network security environments. Solid understanding of: TCP/IP DNS DHCP NAT HTTP/… diagnose network and application connectivity issues using logs, monitoring tools, and packet captures. Experience working within ITIL-based Incident, Problem, Change, and Request Management processes. Strong communication and stakeholder management skills. Preferred Experience Palo Alto Firewalls and Panorama. Fortinet Firewalls, FortiManager, and FortiAnalyzer. Secure Access Service Edge (SASE ...

EMEA) to join our growing team. Reporting to the Global Security Manager, you will be responsible for supporting and enhancing information security, compliance, risk management, and business resilience activities across our UK and European operations. This is an excellent opportunity for a security professional who enjoys balancing technical security … Checks. Conduct internal audits, control reviews, and risk assessments. Maintain and monitor the organisational risk register. Support business continuity and resilience planning activities. Coordinate vulnerability scanning, penetration testing, and remediation programmes. Assist with the investigation and resolution of information security incidents. Deliver security awareness initiatives, user training, and phishing ...