10 of 10 Vulnerability Management Jobs in the City of London

Title: Network Security Engineer – Vulnerability Management (Tufin & RSA). Canary Wharf, UK Long Term Contract (Inside IR35) Hybrid (2 days a week) Job Overview We are hiring a Network Security Engineer with strong expertise in Vulnerability Management, network security, and remediation practices . The ideal candidate … should have hands-on experience with Tufin for firewall policy management and RSA Authentication Manager for secure access/authentication controls. The role involves identifying vulnerabilities, assessing risks, and driving effective remediation across enterprise environments. Key Responsibilities Identify, analyze, and manage network and system vulnerabilities across the environment Understand ...

health and security of the Azure environment, work closely with the security function, and play a key role in vulnerability management, identity governance, and infrastructure automation. The organisation takes cloud security seriously — Wiz, GitHub Advanced Security, Entra ID, and JIT privilege access are all in active use. … Responsibilities Day-to-day administration and monitoring of the Azure environment — subscriptions, resource groups, networking, and storage Patch management and vulnerability remediation across Azure-hosted workloads, including maintaining and executing the emergency patching runbook for critical CVEs Infrastructure automation using PowerShell and Terraform/Bicep Support ...

health and security of the Azure environment, work closely with the security function, and play a key role in vulnerability management, identity governance, and infrastructure automation. The organisation takes cloud security seriously — Wiz, GitHub Advanced Security, Entra ID, and JIT privilege access are all in active use. … Responsibilities Day-to-day administration and monitoring of the Azure environment — subscriptions, resource groups, networking, and storage Patch management and vulnerability remediation across Azure-hosted workloads, including maintaining and executing the emergency patching runbook for critical CVEs Infrastructure automation using PowerShell and Terraform/Bicep Support ...

team responsible for designing and implementing cutting-edge security solutions across the business. This is a broad, hands-on role encompassing Identity and Access Management (IAM), device security, vulnerability management, and incident response - with a strong emphasis on building secure-by-default, zero trust environments at scale. … will have 5+ years of hands-on cybersecurity experience, with strong proficiency in IAM tooling such as Entra ID , Conditional Access, and Privileged Access Management (PAM), alongside solid exposure to cloud platforms including Azure and AWS . Candidates should be comfortable leading vulnerability management programmes, scripting ...

team responsible for designing and implementing cutting-edge security solutions across the business. This is a broad, hands-on role encompassing Identity and Access Management (IAM), device security, vulnerability management, and incident response - with a strong emphasis on building secure-by-default, zero trust environments at scale. … will have 5+ years of hands-on cybersecurity experience, with strong proficiency in IAM tooling such as Entra ID , Conditional Access, and Privileged Access Management (PAM), alongside solid exposure to cloud platforms including Azure and AWS . Candidates should be comfortable leading vulnerability management programmes, scripting ...

hands-on and the environment moves fast. You'll own the security posture across a cloud-native, Azure-first stack, covering incident response, vulnerability management and day-to-day monitoring and defence. The tools are already in place. CrowdStrike, Sumo Logic, Tenable, Wiz. Your … What they're looking for: 5+ years of hands-on security experience, ideally within a fast-moving or scaling environment Strong across security operations, vulnerability management and incident response Cloud-first mindset with solid Azure exposure. This is not an on-prem role Hands-on with modern security ...

This is an excellent opportunity for someone with around 1-2 years of Cyber Security experience who is looking to develop their career within Vulnerability Assessment, Penetration Testing, and Security Testing. The successful Junior Security Testing Analyst will work alongside experienced Penetration Testers and Security Consultants, supporting the delivery … vulnerability assessments, attack surface reviews, security testing activities, and remediation programmes across a diverse portfolio of clients. This role offers a clear progression path towards becoming a Penetration Tester, supported by mentoring, practical client work, and funded certifications. Please note: Unfortunately, this role is not able to offer visa ...

analytics rules, alerts, and workbooks within Microsoft Sentinel and Microsoft Defender. Threat Hunting: Conduct proactive threat hunting initiatives using KQL and intelligence-led techniques. Vulnerability Management: Oversee vulnerability scanning, remediation tracking, and control assurance activities. 🔐 Privacy Operations (1/3) Smarter Data Discovery: Own the operational response …/SOAR: Microsoft Sentinel (Analytics rules, playbooks, KQL) XDR: Microsoft Defender (Endpoint, Office 365, Identity, Cloud Apps) Compliance: Microsoft Purview (eDiscovery, DLP, Insider Risk Management) Automation: Logic Apps/Security Automation workflows What They’re Looking For The Microsoft Expert: Deep, engineering-level experience across Sentinel, Defender, and Purview ...

analytics rules, alerts, and workbooks within Microsoft Sentinel and Microsoft Defender. Threat Hunting: Conduct proactive threat hunting initiatives using KQL and intelligence-led techniques. Vulnerability Management: Oversee vulnerability scanning, remediation tracking, and control assurance activities. Privacy Operations (1/3) Smarter Data Discovery: Own the operational response …/SOAR: Microsoft Sentinel (Analytics rules, playbooks, KQL) XDR: Microsoft Defender (Endpoint, Office 365, Identity, Cloud Apps) Compliance: Microsoft Purview (eDiscovery, DLP, Insider Risk Management) Automation: Logic Apps/Security Automation workflows What They’re Looking For The Microsoft Expert: Deep, engineering-level experience across Sentinel, Defender, and Purview ...

government customers who have no tolerance for downtime or data compromise. Areas of Responsibility: Own the security posture of the Spaceflux platform: threat modelling, vulnerability management, penetration test remediation, and incident response. Design and maintain secure CI/CD pipelines, integrating SAST, DAST, dependency scanning, and container security … tooling. Manage cloud infrastructure (Azure) using infrastructure-as-code, with security controls, secrets management, and least-privilege access enforced by default. Lead on compliance requirements for UK Government programmes, including Cyber Essentials Plus, ISO 27001, and defence data handling standards. Work with engineering to define and enforce secure coding ...

government customers who have no tolerance for downtime or data compromise. Areas of Responsibility: Own the security posture of the Spaceflux platform: threat modelling, vulnerability management, penetration test remediation, and incident response. Design and maintain secure CI/CD pipelines, integrating SAST, DAST, dependency scanning, and container security … tooling. Manage cloud infrastructure (Azure) using infrastructure-as-code, with security controls, secrets management, and least-privilege access enforced by default. Lead on compliance requirements for UK Government programmes, including Cyber Essentials Plus, ISO 27001, and defence data handling standards. Work with engineering to define and enforce secure coding ...

days in Office THE ROLE Own day-to-day Azure infrastructure operations for a leading alternative investments firm. You'll manage subscriptions, patch management, security posture, and identity infrastructure balancing operational efficiency with a security-first approach in a regulated environment. WHAT YOU'LL DO Administer Azure environment (compute … networking, storage, IAM) Manage patch and vulnerability remediation; maintain emergency CVE runbook Automate infrastructure using PowerShell/Terraform/Bicep Support cloud security posture management (Wiz, GitHub Advanced Security) Maintain AVD environment and session host management Configure Entra ID, conditional access, and identity governance Maintain and test ...

days/week in office Duration - Initially 6 months Rate - £650-£740/day Inside IR35 via Umbrella Skills and Experience Required: Emphasis on vulnerability management or exposure management Qualys, sonarqube, exposure to the vulnerability aspects of MDE and Oligo, paloAlto xpanse, dradis, bugbounty program Scrum ...

Building and optimising CI/CD pipelines through CircleCI • Driving developer experience through internal tooling and platform improvements • Supporting security initiatives including IAM, secrets management and vulnerability management • Enhancing observability, monitoring and reliability using Datadog • Contributing to backend development across Go microservices • Optimising cloud cost, scalability ...

systems, and procuring threat intelligence to inform the hunts. Key Skills: * Strong understanding of network and end point security, incident response, threat intelligence, and vulnerability management. * Experienced with security tools such as SIEM platforms, EDR/XDR solutions, firewalls, IDS/IPS. * Strong knowledge of Microsoft Azure cloud security ...

agility, and customer trust rather than hinder them. What you’ll be doing Compliance & Governance ● Implement, and maintain the company’s compliance and security management framework aligned to UK defence-sector expectations and applicable regulatory requirements. ● Ensure ongoing compliance with relevant standards, frameworks, and contractual obligations, including Cyber Essentials … information security, ensuring appropriate technical, physical, and procedural safeguards are implemented and maintained. ● Ensure appropriate arrangements are in place for security risk assessment, vulnerability management, incident response and remediation. ● Embed secure-by-design principles into systems, products, and business processes. ● Manage security incidents, and lessons learned processes. ● Support ...

agility, and customer trust rather than hinder them. What you’ll be doing Compliance & Governance ● Implement, and maintain the company’s compliance and security management framework aligned to UK defence-sector expectations and applicable regulatory requirements. ● Ensure ongoing compliance with relevant standards, frameworks, and contractual obligations, including Cyber Essentials … information security, ensuring appropriate technical, physical, and procedural safeguards are implemented and maintained. ● Ensure appropriate arrangements are in place for security risk assessment, vulnerability management, incident response and remediation. ● Embed secure-by-design principles into systems, products, and business processes. ● Manage security incidents, and lessons learned processes. ● Support ...

endpoints, supporting innovation while managing risk appropriately. Key Responsibilities Own and evolve the group cyber security strategy and control framework Lead cyber risk management, governance and assurance activities Oversee threat detection, vulnerability management and incident response Act as a mandatory assurance point for high-risk technology … leadership and the board Experience Required Senior experience in cyber security or information security leadership roles Strong background in governance, risk, compliance and incident management Experience in regulated, brand-sensitive or customer-trust-driven environments Ability to communicate cyber risk clearly to non-technical stakeholders Why This Role This ...

Doing • Providing 3rd line support for complex technical issues • Managing Microsoft 365 and Windows environments • Supporting Azure infrastructure and cloud services • Leading patching, vulnerability management and security improvements • Managing backup and disaster recovery processes • Working with networking, firewalls and email security platforms • Supporting infrastructure upgrades, migrations and improvement ...

DevOps/DevSecOps Platform Engineer to manage, maintain, integrate, and automate enterprise DevOps platforms. The role involves administration of CI/CD tools, repository management systems, code quality, and security platforms, lower env Unix servers, and automation frameworks. The engineer will work closely with development, security, and infrastructure teams … best practices across platforms. Manage authentication, authorization, and role-based access controls. Secure APIs and service integrations. Ensure compliance with enterprise security standards. Support vulnerability management and security tool integrations. Documentation & Governance Create and maintain: High-Level Design (HLD) Low-Level Design (LLD) Operational Runbooks Upgrade and Migration ...

DevOps/DevSecOps Platform Engineer to manage, maintain, integrate, and automate enterprise DevOps platforms. The role involves administration of CI/CD tools, repository management systems, code quality, and security platforms, lower env Unix servers, and automation frameworks. The engineer will work closely with development, security, and infrastructure teams … best practices across platforms. Manage authentication, authorization, and role-based access controls. Secure APIs and service integrations. Ensure compliance with enterprise security standards. Support vulnerability management and security tool integrations. Documentation & Governance Create and maintain: High-Level Design (HLD) Low-Level Design (LLD) Operational Runbooks Upgrade and Migration ...