426 to 450 of 848 Vulnerability Management Jobs in the UK

adopting robust development practices, including software design, verification, validation, traceability, cybersecurity, and risk management. Partner with Software, Systems, Quality, Regulatory, Scientific, and Product Management teams throughout the product lifecycle. Contribute technical expertise to product planning, technology roadmaps, and architectural governance activities. Champion secure-by-design principles and help ensure … modern engineering practices. Experience working within regulated software development environments, including quality, safety, and cybersecurity considerations. Experience contributing to software verification, validation, requirements management, traceability, risk management, and software lifecycle activities. Ability to influence technical direction across multidisciplinary organisations through expertise, collaboration, and leadership. Strong communication skills with ...

Cyber Security Lead (Entra ID, Defender, Purview, SIEM, SOC, Cyber Essentials Plus, ISO 27001, NIST, CISSP, Hands-On, 3rd Party Management) Permanent Home Based Charles Simon Associates are currently recruiting for a Technical Cyber Security Lead for one of our key clients, a fast-growing UK business with sites … here on. The successful candidate will be the internal technical lead for security. The official title is Manager, but this isn't a people management role. They will manage the outsourced SOC and SIEM providers, choose the security tools the business uses going forward, lead Cyber Essentials Plus ...

Cyber Security Lead (Entra ID, Defender, Purview, SIEM, SOC, Cyber Essentials Plus, ISO 27001, NIST, CISSP, Hands-On, 3rd Party Management) Permanent Home Based Charles Simon Associates are currently recruiting for a Technical Cyber Security Lead for one of our key clients, a fast-growing UK business with sites … here on. The successful candidate will be the internal technical lead for security. The official title is Manager, but this isn't a people management role. They will manage the outsourced SOC and SIEM providers, choose the security tools the business uses going forward, lead Cyber Essentials Plus ...

Develop and maintain technical roadmaps aligned with business goals, collaborating with leadership to prioritize initiatives Design, implement, and continuously improve automated provisioning and systems management pipelines (CI/CD for IT tooling, endpoint management) Research and evaluate new technologies, tools, and vendors; lead proof-of-concept efforts … Assist with or own high-complexity onboarding and offboarding workflows, ensuring security and access policies are followed Perform and improve maintenance activities: backups, patch management, license audits, and monitoring Create and improve IT documentation and internal knowledge bases Respond to critical incidents and drive root cause analysis and permanent ...

implement coordinated security strategies, policies, and procedures, while educating employees on best practices Provide intelligence services to JPMorgan Chase acquisitions, including drafting and disseminating vulnerability and intelligence reports. Liaise regularly with acquisitions to maintain lines of communication, understand and document their cybersecurity posture and unique challenges, identifying uplift opportunities … analysts on the team Required qualifications, capabilities, and skills Minimum 3 years of experience in cybersecurity operations, including threat detection, incident response, or vulnerability management Proven experience in network trace analysis, log analysis, vulnerability assessment, exploitation techniques, and security investigations in response to security incidents Proficiency ...

experience of Microsoft Entra ID and Azure identity and access management. Detailed knowledge and hands-on experience of Azure RBAC, including role assignment at management group, subscription, resource group and resource level. Strong understanding of least privilege, separation of duties and privileged access management. Experience implementing and managing Microsoft … Entra Privileged Identity Management (PIM). Experience of Conditional Access, Multi-Factor Authentication and identity security controls. Experience securing service principals, managed identities and application identities. Strong understanding of Azure management groups, subscriptions and resource organisation. Experience implementing and managing Azure Policy and cloud governance controls. Experience with ...

manage lessons learned and continuous improvement activities. Produce clear reporting on remediation progress, cyber risks, and compliance outcomes. Key Skills & Experience: Proven delivery management experience within cyber security, infrastructure, or technology programmes. Strong background in remediation, patching, vulnerability management, or cyber risk reduction initiatives. Excellent stakeholder management skills with the ability to coordinate across technical and operational teams. Experience with governance, RAID management, delivery reporting, and assurance activities. Good understanding of cyber security, risk management, audit, and compliance requirements. Strong planning, organisational, and communication skills. #J-18808-Ljbffr ...

strong focus on cybersecurity, IT infrastructure, or platform security initiatives. Security & IT Domain Expertise: Deep understanding of cybersecurity frameworks, enterprise IT delivery, threat management, DevSecOps practices, and security architecture principles. Governance, Risk & Compliance (GRC): Strong experience in risk management, financial forecasting, regulatory compliance, and security governance frameworks within … enterprise tech environments. Executive Stakeholder Management: Demonstrated ability to influence, present to, and align priorities with senior and executive leadership (e.g., CISO, CTO, Head of IT). Leadership & Coaching: Proven track record in leading, coaching, and mentoring delivery professionals, fostering skills growth in technical delivery and security operations. Delivery ...

security frameworks. Lead the end-to-end delivery of complex consultancy engagements across SOC/SIEM/SOAR, XDR/EDR, identity, cloud security, vulnerability management and related services, ensuring delivery to agreed scope, quality and timelines. Serve as a senior technical authority and escalation point for high … consultancy engagements within an MSSP or managed services environment, covering SOC design and deployment, SIEM/SOAR, XDR/EDR, identity, cloud security and vulnerability management. Proven capability designing and implementing enterprise security architectures across Microsoft and mixed-vendor environments, including SaaS platforms and hybrid cloud estates. Deep hands ...

mentorship to engineering teams as an embedded security subject matter expert, influencing design decisions and raising overall DevSecOps maturity across the organization Lead vulnerability management and remediation across application, pipeline, and cloud environments while participating in threat modeling and architecture reviews to ensure security is embedded … platforms such as Snyk, Checkmarx, Veracode, or equivalent security testing solutions Cloud security expertise with experience using cloud security platforms (CSPM, CNAPP), secrets management solutions such as HashiCorp Vault or cloud-native services, and zero trust or identity-centric security architectures Financial services or regulated industry experience with knowledge ...

alerts for urgency and impact Deliver weekly and monthly reporting to clients and stakeholders Communicate security findings and trends directly to clients Support vulnerability management analysis and remediation efforts Lead false‐positive reduction and SIEM tuning activities Mentor and support development of Tier 1 and junior analysts Contribute ...

Information Security Vulnerability Engineer , Staffordshire ( Qualys, Rapid7, Nessus, Tanium, CrowdStrike) Our well-established client is seeking an Information Security Vulnerability Engineer to join their growing team in Staffordshire. In this role, you will play a key part in identifying, assessing, and mitigating security vulnerabilities across IT, OT, cloud … interested in candidates who have built strong technical foundations within Technical Support, Service Desk, or Infrastructure environments and have gained hands-on experience in vulnerability management, patching, and remediation activities. Experience managing and resolving security vulnerabilities through patch management, tooling and automation, system hardening, and working collaboratively ...

Azure, and GCPservices Proficiency in scripting or programming (Python, Bash, PowerShell) Excellent problem-solving, analytical, and communication skills Experience with IDS/IPS solutions, vulnerability management, and endpoint security Familiarity with AI hardening techniques Experience in working within SOC teams Familiarity withIaCtechnologies (CloudFormation, Terraform, Bicep) Note: This rolemayrequire ...

ongoing operation of cloud infrastructure Designing, developing and maintaining Infrastructure as Code (IaC) Improving infrastructure monitoring and alerting Managing and improving Identity and Access Management (IAM) Strengthening vulnerability management and reducing remediation times Providing technical support and guidance across infrastructure-related issues Working with third-party cloud ...

someone with a strong understanding of cybersecurity principles, controls and security architecture, with experience working across several security domains such as: Identity & Access Management Endpoint Security Vulnerability Management Network Security Detection & Response Data Protection Cloud Security Security Monitoring & Logging You should also have practical experience working with ...

Architecture Experience Experience in a Solution Architect role delivering projects and technical solutions Experience with enterprise strategies covering capacity planning, performance optimisation, data lifecycle management, tiering and storage governance. Experience operating within mature architecture governance functions. Experience working within global and highly regulated organisations. Financial Services experience is desirable … essential. Technical Expertise Technical expertise in Nutanix technologies including AHV, Prism Central, lifecycle management, automation, resilience and disaster recovery. Technical expertise in Dell enterprise storage platforms, including PowerStore, PowerScale, PowerMax, ECS and associated storage networking technologies. Strong knowledge of enterprise compute platforms including x86 server infrastructure, hyperconverged infrastructure, virtualisation ...

clear documentation and reporting. Good planning and organisational skills with attention to detail. Technical experience and skills Understanding of cybersecurity domains, including Threat Intelligence, Vulnerability Management, Security Testing, Security Architecture, Infrastructure Protection, Application Security, Identity and Access Management, Incident Investigation & Response, and Cryptography. Familiarity with information security ...

across product , application , cloud , infrastructure, network , endpoint , and third-party environments. Working knowledge of EU cybersecurity regulatory requirements, particularly the incident and actively exploited vulnerability notification requirements of the EU Cyber Resilience Act. Strong understanding of threat and vulnerability analysis, digital forensics, evidence preservation, chain of custody … technologies such as SIEM, endpoint security, threat intelligence, and vulnerability management platforms. Ability to translate complex technical findings into clear incident assessments, escalation decisions, executive communications, and regulatory notifications. Strong leadership, stakeholder management, communication, and decision-making skills, with the ability to manage high-pressure incidents ...

with HQ in Redhill; Surrey. Main Purpose of Job · Developing the information security plans and policies for the company and Customers working with Security Management and Compliance functions to embed security management plans into operational practice · Implementing protections and solutions to ensure and enforce the information security plans … testing for vulnerabilities and recommending improvements. · To participate and support all internal IT & Engineering teams including providing advice and expertise on the design and management of internal, customer and global networks from a cybersecurity perspective. Creating documentation around policies, procedures and events. Technical expertise: Security · Be the centre ...

Disclosure and Barring Service). This role is 5 days onsite in Preston and is on shift. Your role As a Security Incident Management Analyst, your mission is to detect, investigate, and... you’ll: Monitor security systems for suspicious activity and emerging threats. Log and escape incidents using … incident management platform. Ensure the health and performance of monitoring tools. Collaborate with other analysts and support teams during investigations. Document findings clearly and contribute to continuous improvement. Help produce regular service reports and insights. You can bring your whole self to work. At Capgemini building an inclusive future ...

security and quality gates into the SDLC. Cloud Security & Compliance: Enforce cloud security best practices, including least privilege, encryption at rest/in transit, vulnerability scanning, and automated remediation. Support ITGC, audit, and regulatory requirements by implementing controls, monitoring, and evidence collection for cloud environments. Respond to security incidents …/CD & DevOps: Strong knowledge of CI/CD tools, containerization (Docker, Kubernetes), and orchestration Security: Solid understanding of cloud security frameworks, IAM, encryption, vulnerability management, and compliance (ISO, NIST, CIS) Networking: Expertise in cloud networking, VPNs, load balancers, DNS, CDN, and hybrid connectivity Monitoring & Observability: Experience with ...

check (known as Disclosure and Barring Service)This role is 5 days onsite in Preston and is on shift.Your role:As a Security Incident Management Analyst, your mission is to detect, investigate, and escalate potential threats. You’ll:Monitor security systems for suspicious activity and emerging threats.Log and escalate … incidents using our incident management platform.Ensure the health and performance of monitoring tools.Collaborate with other analysts and support teams during investigations.Document findings clearly and contribute to continuous improvement.Help produce regular service reports and insights.You can bring your whole self to work. At Capgemini building an inclusive future is part ...

Cyber Security Lead (Entra ID, Defender, Purview, SIEM, SOC, Cyber Essentials Plus, ISO 27001, NIST, CISSP, Hands-On, 3rd Party Management) Permanent Home Based Position: Technical Cyber Security Lead Location: Home Based (UK) with occasional travel Salary: £55,000 to £65,000 + strong benefits The short version … wants a hands-on security lead to own cyber security across the organisation. The official title is Manager, but this isn't a people management role. You'll manage suppliers and make the big calls, and you'll still spend a good chunk of your week in Defender, Entra ...

remediation plans. Partner with engineering and product teams to embed Cyber Resilience Act (CRA) requirements into the product lifecycle, including secure-by-design principles, vulnerability management, SBOMs, and incident reporting processes. Drive implementation of cybersecurity and risk management controls, ensuring compliance with regulatory requirements related to governance … communicate compliance status to leadership. What You Will Need: 7+ years of experience in cybersecurity compliance, governance, risk & compliance (GRC), IT/cyber risk management, or a related regulatory compliance function. Strong knowledge of EU cybersecurity regulations, including NIS2 and the Cyber Resilience Act (CRA), or experience with frameworks ...

implement coordinated security strategies, policies, and procedures, while educating employees on best practices Provide intelligence services to JPMorgan Chase acquisitions, including drafting and disseminating vulnerability and intelligence reports. Liaise regularly with acquisitions to maintain lines of communication, understand and document their cybersecurity posture and unique challenges, identifying uplift opportunities … analysts on the team Required qualifications, capabilities, and skills Minimum 3 years of experience in cybersecurity operations, including threat detection, incident response, or vulnerability management Proven experience in network trace analysis, log analysis, vulnerability assessment, exploitation techniques, and security investigations in response to security incidents Proficiency ...