1 to 25 of 27 Vulnerability Management Jobs in the City of London

Programme Manager - Vulnerability Management London - Hybrid £650 - £750 per day | Inside IR35 Initial 3-month contract We're looking for an experienced Programme Manager to support a major vulnerability and patch management transformation programme within a large enterprise environment. Responsibilities Manage key vulnerability and patch … management workstreams Coordinate Technology, Infrastructure, Cyber and third-party vendors Own programme plans, risks, dependencies and delivery milestones Lead senior stakeholder and vendor meetings Assess vendor capabilities and provide clear recommendations Drive actions through to completion and report progress to programme leadership Key Requirements Proven experience working ...

Client Technology - Customer Success Management - Role: Technical Customer Success Manager Location: London Other locations: Anywhere in Country Date: 1 Oct 2026 Requisition ID: 1747610 At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams … performance into measurable business value. Working with Customer Success Managers (CSMs), Global Client Service Partners, account technology leaders, Product and Engineering, Information Security, Risk Management and Support, the TCSM owns the technical success plan and coordinates action across the customer lifecycle. Your key responsibilities Own account technical health ...

Infrastructure Architect - Patch Management London - Hybrid Initial 3-month contract £650 - £750 per day | Inside IR35 We're looking for an experienced Infrastructure Architect with strong expertise across patch management, vulnerability remediation and infrastructure automation to support a major programme within a large enterprise environment. … help shape patching strategy, improve existing processes and identify opportunities to automate vulnerability remediation across a large enterprise environment. Responsibilities: Define and shape the future-state patch management and automation strategy Review existing patching processes and identify opportunities for improvement Develop technical solutions to improve vulnerability remediation ...

Security Specialist to support the protection of the organisation's information assets, systems, and services. The role will work across security operations, governance, risk management, compliance, incident response, and security awareness to help maintain a robust and resilient security posture. What you'll do: Security Operations Monitor security alerts … events from security monitoring platforms and managed SOC providers. Investigate and respond to security incidents, coordinating containment, eradication, and recovery activities. Support vulnerability management activities, including remediation tracking and reporting. Assist with threat intelligence gathering and analysis. Governance, Risk & Compliance Support the maintenance and continual improvement ...

Performance, Provision, Investigate, Connect and Reporting Design and implement endpoint onboarding, targeting, RBAC, patching, software deployment and remediation processes Support migrations from legacy endpoint-management platforms such as SCCM, Ivanti and ManageEngine Develop high- and low-level designs, implementation plans, technical documentation and operating procedures Troubleshoot complex endpoint, network … firewall, proxy, certificate and platform connectivity issues Support vulnerability management, security hygiene and compliance improvement programmes Integrate Tanium with surrounding technologies such as ServiceNow, CMDB, identity and security platforms Lead customer workshops, design reviews, demonstrations and technical presentations Provide technical leadership, mentoring and assurance to other consultants ...

Working with engineering and security teams to embed security best practice Automating security tooling and SIEM log ingestion/routing Firewall and network security management Developing and maintaining security policies, standards and procedures Conducting infrastructure security assessments using tools such as CIS Benchmarks Supporting incident detection, response and threat … intelligence activities Contributing to vulnerability management and endpoint security Supporting security improvements across complex client environments What We're Looking For We're interested in engineers with experience across some of the following areas: Cyber security and platform engineering Networking and network security Cloud security - AWS, Azure ...

into the detail of vulnerabilities, understanding how applications behave and working directly with developers to make software more secure. This isn’t a traditional vulnerability management, SOC or governance position. Instead, you’ll join a small Security Engineering team where you’ll investigate security findings, assess real‐world … exploitability and risk, monitor security tooling and help engineering teams remediate issues effectively. If you’re happiest opening unfamiliar code, understanding why a vulnerability matters and solving security problems alongside developers rather than simply raising tickets, this could be a great fit. The Role You’ll join a small ...

play a key role in strengthening security across our Microsoft 365 environment, cloud platforms, networks and infrastructure. From threat detection and incident response to vulnerability management and security-by-design, you'll be at the centre of keeping our organisation secure in an ever-changing threat landscape. This … investigations into security incidents and emerging threats. Managing and enhancing Microsoft security technologies including Defender, Intune, Entra ID and Purview. Hands-on experience supporting vulnerability management, threat hunting and security monitoring activities. Strong knowledge of PAM, network segmentation and secure configuration Conducting security reviews, audits and penetration testing ...

automation, and growing the engineers around you. Key responsibilities Own the operation of our corporate security controls: endpoint hardening, identity and access, privileged access, vulnerability and patch management, and access reviews. Partner with our central Security team on policy, vulnerability management and incident response. They … runs the joiner, mover and leaver process itself; you own the platform it runs on and the evidence that access was revoked. Own endpoint management across a genuinely mixed Mac, Windows and Linux fleet, covering enrolment, baselines, patching and compliance reporting. Own device and asset lifecycle and SaaS ...

Application Firewall (WAF), API Security and bot protection capabilities. Strong hands on experience with Web Application Firewalls (WAF), including policy design, rule tuning, exception management and application onboarding. Good understanding of OWASP Top 10 and OWASP API Security Top 10. Knowledge of HTTP/S, REST APIs and application … layer attack mitigation. Experience with vulnerability management, Qualys and attack surface monitoring tools. Understanding of patch management and vulnerability remediation. Strong stakeholder engagement and communication skills. Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community ...

helping to keep our infrastructure secure and compliant and our staff safe and productive. You'll be working on projects covering identity and access management, cloud and network security, vulnerability management, security monitoring, security hardening, compliance reviews, and more. It's a very varied role with lots … qualifications are a plus) Experience with Infrastructure as Code and infrastructure provisioning tools, particularly Terraform Experience configuring GCP-native security posture and threat management with Security Command Center Experience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact Analysis Experience with key and secret management ...

security monitoring platforms Support Layer 7 and web security initiatives including WAF, reverse proxy, API protection and edge security controls Support implementation and operational management of edge security platforms such as Cloudflare or similar technologies Support vulnerability management, remediation and infrastructure and networking security assessments across cloud … support the implementation, tuning and operational maturity of endpoint security, EDR and Microsoft Defender capabilities across infrastructure, corporate and production environments Support identity, access management and privileged access security initiatives across infrastructure environments Continuously evaluate emerging infrastructure threats, attack vectors and security tooling to strengthen the organisation's security ...

contribute... Key Accountabilities Own the operational performance, availability, capacity and resilience of cloud platforms and hosted services. Lead cloud incident, problem, change and event management, ensuring timely restoration, clear communication and effective root-cause resolution. Maintain operational controls, standards, runbooks and support models aligned with IT service management and engineering practices. Ensure cloud environments comply with security, risk, audit, data protection and regulatory requirements. Own and maintain vulnerability management processes to protect the estate. Manage cloud consumption, budgets, forecasts and optimisation plans, embedding effective FinOps practices. Oversee service providers and technology partners, holding them accountable ...

Cyber Security Lead (Entra ID, Defender, Purview, SIEM, SOC, Cyber Essentials Plus, ISO 27001, NIST, CISSP, Hands-On, 3rd Party Management) Permanent Home Based/Ad-Hoc Travel Charles Simon Associates are currently recruiting for a Technical Cyber Security Lead for one of our key clients, a fast-growing … here on. The successful candidate will be the internal technical lead for security. The official title is Manager, but this isn't a people management role. They will manage the outsourced SOC and SIEM providers, choose the security tools the business uses going forward, lead Cyber Essentials Plus ...

implement coordinated security strategies, policies, and procedures, while educating employees on best practices Provide intelligence services to JPMorgan Chase acquisitions, including drafting and disseminating vulnerability and intelligence reports. Liaise regularly with acquisitions to maintain lines of communication, understand and document their cybersecurity posture and unique challenges, identifying uplift opportunities … analysts on the team Required qualifications, capabilities, and skills Minimum 3 years of experience in cybersecurity operations, including threat detection, incident response, or vulnerability management Proven experience in network trace analysis, log analysis, vulnerability assessment, exploitation techniques, and security investigations in response to security incidents Proficiency ...

ongoing operation of cloud infrastructure Designing, developing and maintaining Infrastructure as Code (IaC) Improving infrastructure monitoring and alerting Managing and improving Identity and Access Management (IAM) Strengthening vulnerability management and reducing remediation times Providing technical support and guidance across infrastructure-related issues Working with third-party cloud ...

application security controls. Review complex technical solutions to ensure they meet security, regulatory and business requirements. Conduct and support threat modelling, risk assessments and vulnerability assessments. Provide technical oversight of security testing and penetration testing activities. Support vulnerability management, helping teams prioritise and remediate security risks. Collaborate … Experience reviewing security designs, risk assessments and security testing outputs. Ability to translate complex technical security concepts into clear, business-focused recommendations. Excellent stakeholder management and communication skills. Qualifications Relevant industry certifications are advantageous, including: CISSP or CCSP SABSA or TOGAF OSCP, OSWP, CRTO, CRTE, GXPN or CREST qualifications ...

implement coordinated security strategies, policies, and procedures, while educating employees on best practices Provide intelligence services to JPMorgan Chase acquisitions, including drafting and disseminating vulnerability and intelligence reports. Liaise regularly with acquisitions to maintain lines of communication, understand and document their cybersecurity posture and unique challenges, identifying uplift opportunities … analysts on the team Required qualifications, capabilities, and skills Minimum 3 years of experience in cybersecurity operations, including threat detection, incident response, or vulnerability management Proven experience in network trace analysis, log analysis, vulnerability assessment, exploitation techniques, and security investigations in response to security incidents Proficiency ...

network, infrastructure and application security controls. Review complex technical solutions against security, regulatory and business requirements. Conduct and support threat modelling, risk assessments and vulnerability assessments . Provide technical oversight of security testing and penetration testing activities. Support vulnerability management and help teams prioritise and remediate security … reviewing security architectures, risk assessments and security testing outputs. The ability to translate complex technical security concepts into clear, business-focused recommendations. Excellent stakeholder management and communication skills. Experience working within large and complex enterprise environments. Government, Defence or wider Public Sector experience would be highly advantageous. Desirable Experience ...

cyber security best practices across the business. Administer security tools, including multi-factor authentication (MFA), mail filtering and Anti-Virus software. Participate in vulnerability management, incident response coordination, and system security reviews. Help maintain system documentation, asset registers, and compliance records in line with IT policies and data … Documentation Maintain up‐to‐date documentation of IT systems, configurations, procedures, and security protocols. Support the continuous improvement of IT operational processes and incident management workflows. Skills & Experience Required Proven experience in a Systems Analyst, IT Support Analyst, or Desktop Support role, ideally within a retail, luxury, or manufacturing ...

ideally have: Significant experience designing, implementing and managing application security programmes and tooling. Strong knowledge of application security practices, secure coding principles and vulnerability management. Experience working with SCA, SAST, DAST and related application security technologies. Strong experience integrating security into CI/CD pipelines and DevSecOps environments. Experience ...

defence environments. They have a strong understanding of the UK Ministry of Defence/NATO approach to DevSecOps, Secure by Design, cyber risk management, security assurance, and the delivery of software into classified and operational environments. What You'll Do Design, build, and operate secure development and deployment infrastructure … segmented development environments. Implement automated security controls within CI/CD pipelines, including static analysis, dependency scanning, container scanning, secrets detection, software composition analysis, vulnerability management, and policy enforcement. Champion a DevSecOps culture where software engineers take ownership of the security, reliability, deployability, and operational performance ...

SBOM generation, so security findings and controls are enforced consistently Extending the integration between JFrog and ServiceNow, so findings flow into change and vulnerability processes Making sure every application follows the right security rules in the pipeline - scanning, approved sources and remediation with development teams Working directly with developers … environment - this is essential, and we'll be looking for real examples rather than a list of tools Experience with binary repository and package management for at least one of .NET/NuGet, Maven or Python, ideally more GitHub and GitHub Actions experience (TeamCity is used too, but Jenkins ...

endpoint, cloud, and application stack Build out our detection and monitoring capabilities, evolving our SIEM with alerting that cuts through the noise Own vulnerability management end to end - triaging, tracking, and driving issues through to resolution Proactively hunt for threats, from unusual behaviour in our environment to emerging ...

work across technologies including: Microsoft Defender Microsoft Purview Entra ID/Azure AD Conditional Access & MFA Microsoft 365 Security Security hardening & posture improvement Vulnerability management & remediation Intune/MDM/MAM Azure Security What we're looking for: You’ll already be a strong Microsoft Security Engineer/ ...