551 to 575 of 891 Vulnerability Management Jobs in the UK

comprehensive observability and robust disaster recovery and failover strategies across on-premises and cloud environments. Own Relation’s platform security controls, including IAM, secrets management, network policy and vulnerability management, ensuring the platform meets the data governance standards required of a clinical-stage biotech working with sensitive ...

Security Engineer to take ownership of network and device security across internal and customer environments. The role covers security monitoring, incident response, vulnerability management, security solutions and providing technical security expertise across network environments. Key Responsibilities Develop and implement information security policies, controls and solutions. Monitor security events … risks and vulnerabilities and investigate incidents. Design, build, test and troubleshoot security solutions including SIEM and IDS/IPS. Manage vulnerability testing and recommend improvements. Provide cybersecurity expertise across network design and management. Maintain security policies, procedures and technical documentation. Act as a senior point of contact for security ...

enterprise environments. To be considered for this position, you will need solid hands-on skills with: cloud, endpoint, or infrastructure security identity and access management, multifactor authentication, privileged access, and zero-trust principles managing Windows endpoints through modern device management platforms and implementing endpoint detection and response technologies … into understandable reports. Excellent collaboration and communication skills, capable of working with both technical and non-technical colleagues. Experience working with external security providers, vulnerability management platforms, and SaaS security. Knowledge of frameworks such as ISO 27001 or NIST CSF, along with relevant professional certifications As a Cyber ...

testing, documentation, monitoring and governance standards. Plan and deliver application improvements in collaboration with stakeholders and colleagues, covering requirements, estimation, prioritisation, reporting, risk management, service improvement, knowledge sharing, coaching and continuous professional development. Please see the full Job Description for further details about the role and its requirements. Person … error handling approaches in application services. Awareness of change impact and the need to update existing applications and dependent services. Experience of system management and support (e.g. supporting live applications, troubleshooting and assisting with releases). Desirable NHS or public sector experience (or evidence of working in regulated environments ...

modelling for new tools and features, identifying design flaws and defining security requirementsAdvise engineering and business teams on security best practice as they buildVulnerability management and testingManage penetration testing engagements, from scoping through remediationUse SAST/DAST and vulnerability scanning tools to prioritise and drive down riskPerform secure … managing penetration testing engagements and working with engineering on remediationComfortable reading and writing code (Python, Go, TypeScript, or similar)Experience with SAST/DAST, vulnerability management toolingStrong written and verbal communication — able to explain technical risk to non-technical stakeholdersComfortable evangelising and coaching security practices with teams that ...

administration of Mimecast email filtering system including email review and release. Day-to-day administration of CyberArk identity and privileged access management tooling. Microsoft Purview administration including DLP policy monitoring, sensitivity labels, Discovery Searches and compliance alerts. Maintain and respond to security-related DDQs, keeping the security evidence library … these in spirit and factCarry out such other tasks as you may be directed to do by your line manager and the senior management team from time to timeUndertake training and development as appropriate and engage fully in the performance management processWilling to travel to other officesEssential Knowledge ...

applications, including incremental decomposition, API enablement, cloud adoption and technical debt retirement. Guide the appropriate use of Azure services, containers, application services, messaging, API management, relational and NoSQL data platforms. Improve continuous integration, continuous delivery, automated quality controls, infrastructure management, observability and release safety. Promote cost‐effective architecture … shared platforms where they meet UK product and regulatory needs Security, compliance and operational integrity Ensure threat modelling, secure design, privacy by design, vulnerability management and data protection controls are integrated into engineering ways of working. Work with security, risk, architecture and operations stakeholders to address audit findings ...

infrastructure-as-code (IaC) using Terraform, implementing reusable, secure modules. Drive improvements to automation workflows and configuration management. Contribute to the creation and lifecycle management of golden AMIs. Containerisation & Orchestration: Manage and optimise containerised workloads on Kubernetes (EKS). Use Helm to package and manage Kubernetes deployments. Implement … style initiatives to improve system resilience, scalability, and fault tolerance. Security & Compliance Implement and enforce cloud security best practices, including identity and access management, encryption, and secrets governance. Manage key lifecycle and cryptographic operations using AWS KMS. Participate in vulnerability management processes and remediation work. Ensure infrastructure ...

Essentials Plus certifications. Coordinate annual assessments and remediation activities. Continuously monitor compliance against Cyber Essentials requirements. Drive improvements that exceed minimum certification standards. Risk Management Maintain the Information Security risk register. Conduct regular risk assessments across systems, suppliers and business processes. Track remediation actions and ensure risks are managed … appropriately. Provide guidance on risk treatment and mitigation strategies. Security Operations Oversee vulnerability management activities. Review security alerts, monitoring outputs and threat intelligence. Coordinate remediation activity with Infrastructure, Development and Operational teams. Support investigation and response to security incidents. Lead post-incident reviews and lessons learned activities. Security ...

helping to keep our infrastructure secure and compliant and our staff safe and productive. You'll be working on projects covering identity and access management, cloud and network security, vulnerability management, security monitoring, security hardening, compliance reviews, and more. It's a very varied role with lots ...

being formed. What You’ll Work On Application and API security across Saturn’s web applications, backend services and integrations, including authentication, authorisation, session management and firm-level data separation AWS security , covering IAM, network controls, secrets, encryption and workload isolation Threat modelling and security review for new systems … financial workflows, external integrations and AI capabilities, joining projects early enough to change their design Vulnerability management end to end : discovery, prioritisation by real risk, remediation and verification across code, dependencies, cloud resources and employee systems Security tooling and automation , including checks built into CI/ ...

Administer and secure our on-premises data centre estate alongside public cloud environments (AWS, GCP or similar). Own OS patching, certificate lifecycle, and vulnerability remediation across the estate. Build and maintain configuration management and automation (Ansible or similar) for consistent, repeatable infrastructure changes. Support containerised workloads (Docker … Hands-on experience with virtualisation and on-premises server infrastructure (VMware ESXi or similar). Strong, proven experience with Linux. Experience with configuration management/infrastructure-as-code (Ansible, Terraform or similar). Experience with logging and monitoring stacks (ELK or similar). Understanding of containerisation and orchestration (Docker ...

escalated IT issues, including incidents and service requests, ensuring timely resolution and minimal disruption to business operations. Own the end-to-end patch and vulnerability management lifecycle, from scanning and prioritisation through to remediation and reporting. Hands‐on experience configuring and administering enterprise email security platforms such … RPOs Experience with backup and recovery tooling such as Veeam, Azure Site Recovery, or equivalent Hands‐on experience managing the full patch and vulnerability lifecycle, from scanning through to remediation and reporting Experience configuring and administering email security gateways such as Mimecast, Proofpoint, or Microsoft Defender for Office ...

vulnerabilities from cyber-attacks by developing a security road-map tailored to your unique needs. We help organisations improve processes such as threat management by building an identity management programme, and establishing prevention, detection and response capabilities to cyber-attacks. Role Summary The Senior Cyber Analyst … within cyber operations, the role provides leadership, mentoring, and strategic direction to ensure customers maintain a strong and resilient security posture. Incident Response & Threat Management Lead the investigation and resolution of complex cyber security incidents across endpoint, network, cloud, and identity platforms. Act as the senior escalation point ...

based and requires five days per week on-site presence. Key ResponsibilitiesLead the firm's security operations function, owning threat detection, incident response, and vulnerability management end-to-endMonitor, triage, and respond to security events across the environment, including log analysis, anomaly detection, and threat hunting, with … best practices and compliance with security policiesDesign and implement secure infrastructure solutions, embedding security requirements from the outset rather than retrofitting themConduct regular vulnerability assessments and penetration testing exercises, prioritising and remediating findings in a timely mannerManage and continuously improve security tooling, including SIEM, EDR, firewalls, IDS/ ...

evolving threats. Responsibilities Key Responsibilities: Design, implement and optimise security controls across network and cloud environments. Manage and improve firewall, IDS/IPS, and vulnerability management solutions. Identify security weaknesses and drive remediation activities. Support incident response and security investigations. Improve infrastructure logging, monitoring, and threat detection capabilities. … Qualifications Position Requirements 3-5 years' experience in Security Engineering, Network Engineering, or Infrastructure Engineering. Strong knowledge of firewalls, networking, IDS/IPS, and vulnerability management. Experience securing enterprise infrastructure and virtualised environments. Understanding of cyber attack techniques and defensive controls. Knowledge of Azure and/ ...

boards and design authorities. Supporting solution architects and engineering teams in defining clear security and non-functional requirements. Leading or contributing to threat modelling, vulnerability assessments and penetration testing activities. Additional requirements specific to the role: Occasional travel across our client sites and operational locations. Participation in governance … Strong knowledge of industry frameworks such as NCSC guidance, NIST CSF/800-53, ISO 27001/2 or SABSA. Understanding of identity & access management, network security, encryption, API security and secrets management. Experience with vulnerability management, penetration testing and security assurance processes. Ability to define, document ...

build a diverse, dedicated, and high‐performing team of subject matter experts to help our clients achieve resilient supply chain, asset management, and operational excellence. Job Overview/Introduction As our business grows, we need to inject the right balance of a) established industry expertise, b) energetic new perspectives … quality our clients expect. We are looking for a handful of seasoned technology specialists to join our team. You will have experience in management consultancy with a minimum of five years track record in the delivery of cyber security services. You will sit in the Squarcle Digital capabilities team. ...

from design through to production support. Security and DevSecOps Strong, practical application of secure‐by‐design and Zero Trust principles, including managed identities, secrets management (for example Key Vault), RBAC and vulnerability management, embedding security throughout the delivery lifecycle. Automation and reliability engineering Proficient in Python with ...

Overview Expleo is a trusted partner for end-to-end, integrated engineering, quality services, and management consulting for digital transformation. We help businesses harness technological change to successfully deliver innovation, improve resilience and support the secure delivery of complex products, platforms and systems.As part of the Expleo UK Cybersecurity … customer stakeholders, internal cyber assurers and MOD-related security groups to ensure secure-by-design delivery, robust threat and risk assessment, effective security requirements management, and the production of cybersecurity artefacts required to support accreditation and assurance.This is a customer-facing role requiring strong technical judgement, independence, clear communication ...

insights, recommendations and executive reports. Drive Customer Success Plans and Continuous Service Improvement initiatives. Monitor service performance across SOC, SIEM, MDR, EDR/XDR, vulnerability management and threat intelligence services. Coordinate the response to major security incidents, managing communications, escalations and stakeholder engagement. Identify security risks, trends ...

existing Senior AppSec Engineer and Security Architect, strengthening our capacity and resilience as we continue to mature our security services. This is not a vulnerability management position. It is true engineering‐led AppSec, shaping secure design, embedding controls into CI/CD, operating core security services and getting ...

Lead our application security team covering a range of areas, including application security, cloud security, and internal tooling development. Lead 1st and 3rd party vulnerability management, including coordinated disclosure with external reporters and embargoed fixes. Define, optimize, and implement the engineering strategy in concert with the security leadership ...

schema creation, and operational workflows across cloud and on-prem platforms.* Support production systems with a focus on high availability, disaster recovery, incident response, vulnerability management, patching, and change management.* Containerize applications and support deployments using container orchestration platforms.* Partner with development teams to understand application codebases … architecture, improving deployment, monitoring, and operational readiness.* Use infrastructure as code and configuration management tools such as Terraform, Chef, or Ansible to drive consistency and repeatability.* Troubleshoot complex deployment, performance, networking, and infrastructure issues, with an emphasis on preventing recurring manual fixes through automation.* Use AI-assisted engineering tools ...

define and maintain our IT and security policies, then turn them into working processes, technical controls and training that sticks: access reviews, vulnerability management, external testing, incident processes and an easy way to report concerns. Trust, assurance and compliance Customers increasingly want evidence that we take security seriously. … make that evidence easy to provide: security questionnaires, audit evidence, Cyber Essentials and future certifications, risk management and governance. Certifications should follow real controls, not stand in for them. Rather than answering every questionnaire from scratch, you’ll build a reusable, increasingly self‐service trust process. Where security meets ...