12 of 12 Vulnerability Management Jobs in the City of London

Month Contract Hybrid (2/3 days a week in Canary Wharf, London) We're looking for an experienced Vulnerability Management Lead with deep expertise in Microsoft Defender Vulnerability Management (TVM) to help shape and mature an enterprise vulnerability management capability within a well … established financial services organisation. This isn't a traditional vulnerability management role focused purely on remediation governance. Instead, you'll take ownership of the existing Microsoft Defender tooling, develop the vulnerability management strategy around it, enhance reporting for executive stakeholders, and help build a mature, data ...

Cyber Security Specialist/Cyber Security Engineer - CISSP, CEH, CCNA Security, Incident Response, Threat Monitoring, Vulnerability Management, Security Architecture, Azure, Windows Server Infrastructure. Permanent. London Hybrid. c.£90k - £100k + Bons +Benefits Global Law Firm seeks an experienced IT Cyber Security Specialist to join its Infrastructure Engineering team … incidents and strengthen the firm's overall security posture. This is a hands-on technical role covering Cyber Security Engineering, Incident Response, Threat Monitoring, Vulnerability Management and Security Architecture (Infrastructure focussed) using tools such as MS Defender and MS Sentinel. You'll work across a complex infrastructure environment ...

more and ultimately, be more fulfilled. To learn more about how we can supercharge progress for you, visit www.hcltech.com Job Title : Senior Patch Management Engineer Location: London, UK ( Hybrid mode at client location ) Experience: 3 – 6 years in network engineering/operations ROLE SUMMARY The L2 Senior Network Patch … Management Engineer owns the firmware and software lifecycle across a multi-vendor network estate (LAN, WAN, data centre fabrics, firewalls, load balancers, and wireless). Responsibilities include risk assessment, automated patching workflows, vulnerability-led prioritisation, and cross-team co-ordination for zero-disruption maintenance. The role serves ...

days in Office THE ROLE Own day-to-day Azure infrastructure operations for a leading alternative investments firm. You'll manage subscriptions, patch management, security posture, and identity infrastructure balancing operational efficiency with a security-first approach in a regulated environment. WHAT YOU'LL DO Administer Azure environment (compute … networking, storage, IAM) Manage patch and vulnerability remediation; maintain emergency CVE runbook Automate infrastructure using PowerShell/Terraform/Bicep Support cloud security posture management (Wiz, GitHub Advanced Security) Maintain AVD environment and session host management Configure Entra ID, conditional access, and identity governance Maintain and test ...

Develop and maintain technical roadmaps aligned with business goals, collaborating with leadership to prioritize initiatives Design, implement, and continuously improve automated provisioning and systems management pipelines (CI/CD for IT tooling, endpoint management) Research and evaluate new technologies, tools, and vendors; lead proof-of-concept efforts … Assist with or own high-complexity onboarding and offboarding workflows, ensuring security and access policies are followed Perform and improve maintenance activities: backups, patch management, license audits, and monitoring Create and improve IT documentation and internal knowledge bases Respond to critical incidents and drive root cause analysis and permanent ...

major incidents. Manage, operate, and tune key security platforms, including SIEM, EDR/XDR, Network Anomaly Detection (NAD), and cloud security technologies. Oversee vulnerability management and coordinate remediation efforts across global systems. Design and operate SOAR workflows to automate response playbooks and improve operational efficiency. Support the operational … management of Secure Email Gateways (SEG), Secure Web Gateways (SWG), Firewalls, and CASB. Monitor third-party vendor SLAs and participate in service performance reviews. Maintain accurate operational documentation, security playbooks, and incident reports. What We Are Looking For Essential Experience & Skills: 4–6 years of experience within cyber security ...

with other engineering and security teams to embed security best practices Automation to support security tooling like SIEM tooling log ingestion Firewall and network management within hybrid cloud and on-premises environments Develop and maintain security policies, standards and procedures Conduct security assessments in the form of infrastructure reviews … services Proficiency in scripting or programming (Python, Bash, PowerShell) Excellent problem-solving, analytical, and communication skills Experience with IDS/IPS solutions, vulnerability management, and endpoint security Familiarity with AI hardening techniques Experience in working within SOC teams Familiarity with IaC technologies (CloudFormation, Terraform, Bicep) Note: This role ...

Responsibilities Define and lead the CSOC strategy, operations, and governance. Take command of major incident response, managing remediation and stakeholder communication. Oversee threat intelligence, vulnerability management, and security monitoring capabilities. Manage relationships with external agencies, Managed Security Service Providers (MSSPs), and technology partners. What We Need From … Proven experience as a SOC Manager (previous leadership experience is essential; this is not an entry-level management role). Deep expertise in incident management processes and live crisis response. Strong background in managing third-party vendors (MSSPs). Strategic mindset to plan security investments, tooling, and resourcing. ...

cloud PaaS provider (e.g. Azure or AWS) Strong working knowledge of information security standards and good practice (e.g. ISO 27001) Understanding of designing security management systems Experience with threat and vulnerability management systems Ability to assess security control designs and configurations for effectiveness in risk mitigation … collaborative, consultative approach with a genuine desire to help your team succeed Service delivery/project management experience; Agile and DevOps exposure is a plus Nice to have: A track record of building trusted relationships with security stakeholders Experience drafting, implementing and maintaining security processes Experience managing the delivery ...

responsible for delivering and operating shared platform capabilities that enable trusted data services and production-grade AI-driven workflows. Working closely with Platform Product Management, you will help ensure platforms are scalable, reliable, secure, and widely adopted across product domains while supporting innovation through high-quality engineering execution. Responsibilities … guardrail mechanisms required for safe AI workflows Implement security controls, access governance, encryption, and audit requirements in partnership with InfoSec while ensuring enterprise SDLC, vulnerability management, and change management compliance Requirements 12+ years leading platform engineering teams delivering shared services or large-scale SaaS systems with production ...

Manager. The boundaries of the role are typically defined by the SZC Digital & IT's governance structure including policies and procedures related to data management, technology procurement, and project management. The Cyber Assurance Lead post holder operates within these boundaries to ensure that their function aligns with regulatory requirements … industry standards. Principal Accountabilities Verifying that the specified cyber security controls have been implemented in accordance with the risk management plan, with assessments of threats and vulnerabilities. Produce detailed plans for cyber security audits. Assure the implementation, operation and maintenance of security controls. Write formal reports, and sometimes deliver ...

looking for an engineering-first security leader who still enjoys getting into the technical detail. This isn't a governance, compliance or traditional security management position. Instead, you'll work directly alongside the CTO, helping shape Product Security across the organisation whilst remaining technically credible enough to influence engineering … Governance, Risk & Compliance (GRC), audit or ISO27001. You've moved away from hands-on technical work. Your experience is predominantly SOC, Detection Engineering or Vulnerability Management. You're looking for a large enterprise people-management role. You haven't owned Product Security within a software engineering environment. ...