11 of 11 Vulnerability Management Jobs in the City of London

Month Contract Hybrid (2/3 days a week in Canary Wharf, London) We're looking for an experienced Vulnerability Management Lead with deep expertise in Microsoft Defender Vulnerability Management (TVM) to help shape and mature an enterprise vulnerability management capability within a well … established financial services organisation. This isn't a traditional vulnerability management role focused purely on remediation governance. Instead, you'll take ownership of the existing Microsoft Defender tooling, develop the vulnerability management strategy around it, enhance reporting for executive stakeholders, and help build a mature, data ...

stakeholders to help ensure that IT and cyber activities are aligned with regulatory expectations, internal policies and good practice. Key Responsibilities Compliance and Risk Management: Support compliance with applicable regulatory, IT, cyber and control frameworks, which may include DORA, ISO 27001, NIST CSF, SOX and Cyber Essentials. Support … evaluation and management of IT, cyber, compliance and security risks across systems, processes and operations. Monitor emerging technology, cyber and operational resilience risks to support proactive risk management and timely escalation. Assist in preparing for and supporting regulatory inspections and internal, external and third-party audits. Support ...

overall Global Data Centers Office of Information Security (GDC-OIS) team. This role is critical in improving, developing and maintaining IT/OT vulnerability management programs and processes. This role performs and leads important tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security …/OT environments with required expertise in ICS and SCADA systems. Leads the administration and optimization of enterprise security platforms, overseeing lifecycle management including break-fix, patching, version upgrades, and integration with broader security ecosystems. Directs complex security incident response efforts across multiple vectorsendpoint protection, EDR, malware analysis, network ...

with other engineering and security teams to embed security best practices Automation to support security tooling like SIEM tooling log ingestion Firewall and network management within hybrid cloud and on-premises environments Develop and maintain security policies, standards and procedures Conduct security assessments in the form of infrastructure reviews … services Proficiency in scripting or programming (Python, Bash, PowerShell) Excellent problem-solving, analytical, and communication skills Experience with IDS/IPS solutions, vulnerability management, and endpoint security Familiarity with AI hardening techniques Experience in working within SOC teams Familiarity with IaC technologies (CloudFormation, Terraform, Bicep) Note: This role ...

Responsibilities Define and lead the CSOC strategy, operations, and governance. Take command of major incident response, managing remediation and stakeholder communication. Oversee threat intelligence, vulnerability management, and security monitoring capabilities. Manage relationships with external agencies, Managed Security Service Providers (MSSPs), and technology partners. What We Need From … Proven experience as a SOC Manager (previous leadership experience is essential; this is not an entry-level management role). Deep expertise in incident management processes and live crisis response. Strong background in managing third-party vendors (MSSPs). Strategic mindset to plan security investments, tooling, and resourcing. ...

administration of Mimecast email filtering system including email review and release. * Day-to-day administration of CyberArk identity and privileged access management tooling. * Microsoft Purview administration including DLP policy monitoring, sensitivity labels, Discovery Searches and compliance alerts. * Maintain and respond to security-related DDQs, keeping the security evidence library … success in the role. * Hands-on experience with Netskope - web filtering, CASB and cloud security and/or CyberArk - identity and privileged access management would be highly desirable skills. * Experience with Rapid7, InsightVM or InsightIDR for vulnerability management and SIEM would also be highly desirable. * Experience ...

cloud PaaS provider (e.g. Azure or AWS) Strong working knowledge of information security standards and good practice (e.g. ISO 27001) Understanding of designing security management systems Experience with threat and vulnerability management systems Ability to assess security control designs and configurations for effectiveness in risk mitigation … collaborative, consultative approach with a genuine desire to help your team succeed Service delivery/project management experience; Agile and DevOps exposure is a plus Nice to have: A track record of building trusted relationships with security stakeholders Experience drafting, implementing and maintaining security processes Experience managing the delivery ...

responsible for delivering and operating shared platform capabilities that enable trusted data services and production-grade AI-driven workflows. Working closely with Platform Product Management, you will help ensure platforms are scalable, reliable, secure, and widely adopted across product domains while supporting innovation through high-quality engineering execution. Responsibilities … guardrail mechanisms required for safe AI workflows Implement security controls, access governance, encryption, and audit requirements in partnership with InfoSec while ensuring enterprise SDLC, vulnerability management, and change management compliance Requirements 12+ years leading platform engineering teams delivering shared services or large-scale SaaS systems with production ...

closely with development teams to identify and remediate security vulnerabilities Develop monitoring, logging and compliance controls across cloud platforms Support security incident response and vulnerability remediation activities Promote DevSecOps best practices and contribute to a strong security culture Skills & Experience Commercial experience in a DevSecOps or Cloud Security Engineering … pipelines using Azure DevOps, GitHub Actions, GitLab CI or Jenkins Infrastructure as Code experience using Terraform, CloudFormation or similar Knowledge of container security, vulnerability management and secure coding practices Familiarity with security tooling such as Checkov, Trivy, SonarQube, Prisma Cloud, Wiz or Snyk Scripting experience using Python, Bash ...

Deep DevSecOps implementation experience using AI GCP and Kubernetes expertise CI/CD security implementation SAST, DAST, SCA, SonarQube and Checkmarx hands-on experience Vulnerability management ownership Container and cloud security Security automation and compliance Ability to answer deep technical questions without prompting ...

looking for an engineering-first security leader who still enjoys getting into the technical detail. This isn't a governance, compliance or traditional security management position. Instead, you'll work directly alongside the CTO, helping shape Product Security across the organisation whilst remaining technically credible enough to influence engineering … Governance, Risk & Compliance (GRC), audit or ISO27001. You've moved away from hands-on technical work. Your experience is predominantly SOC, Detection Engineering or Vulnerability Management. You're looking for a large enterprise people-management role. You haven't owned Product Security within a software engineering environment. ...