25 of 25 Vulnerability Management Jobs in the City of London

Programme Manager - Vulnerability Management London - Hybrid £650 - £750 per day | Inside IR35 Initial 3-month contract We're looking for an experienced Programme Manager to support a major vulnerability and patch management transformation programme within a large enterprise environment. Responsibilities Manage key vulnerability and patch … management workstreams Coordinate Technology, Infrastructure, Cyber and third-party vendors Own programme plans, risks, dependencies and delivery milestones Lead senior stakeholder and vendor meetings Assess vendor capabilities and provide clear recommendations Drive actions through to completion and report progress to programme leadership Key Requirements Proven experience working ...

Client Technology - Customer Success Management - Role: Technical Customer Success Manager Location: London Other locations: Anywhere in Country Date: 1 Oct 2026 Requisition ID: 1747610 At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams … performance into measurable business value. Working with Customer Success Managers (CSMs), Global Client Service Partners, account technology leaders, Product and Engineering, Information Security, Risk Management and Support, the TCSM owns the technical success plan and coordinates action across the customer lifecycle. Your key responsibilities Own account technical health ...

Infrastructure Architect - Patch Management London - Hybrid Initial 3-month contract £650 - £750 per day | Inside IR35 We're looking for an experienced Infrastructure Architect with strong expertise across patch management, vulnerability remediation and infrastructure automation to support a major programme within a large enterprise environment. … help shape patching strategy, improve existing processes and identify opportunities to automate vulnerability remediation across a large enterprise environment. Responsibilities: Define and shape the future-state patch management and automation strategy Review existing patching processes and identify opportunities for improvement Develop technical solutions to improve vulnerability remediation ...

Security Specialist to support the protection of the organisation's information assets, systems, and services. The role will work across security operations, governance, risk management, compliance, incident response, and security awareness to help maintain a robust and resilient security posture. What you'll do: Security Operations Monitor security alerts … events from security monitoring platforms and managed SOC providers. Investigate and respond to security incidents, coordinating containment, eradication, and recovery activities. Support vulnerability management activities, including remediation tracking and reporting. Assist with threat intelligence gathering and analysis. Governance, Risk & Compliance Support the maintenance and continual improvement ...

Performance, Provision, Investigate, Connect and Reporting Design and implement endpoint onboarding, targeting, RBAC, patching, software deployment and remediation processes Support migrations from legacy endpoint-management platforms such as SCCM, Ivanti and ManageEngine Develop high- and low-level designs, implementation plans, technical documentation and operating procedures Troubleshoot complex endpoint, network … firewall, proxy, certificate and platform connectivity issues Support vulnerability management, security hygiene and compliance improvement programmes Integrate Tanium with surrounding technologies such as ServiceNow, CMDB, identity and security platforms Lead customer workshops, design reviews, demonstrations and technical presentations Provide technical leadership, mentoring and assurance to other consultants ...

Working with engineering and security teams to embed security best practice Automating security tooling and SIEM log ingestion/routing Firewall and network security management Developing and maintaining security policies, standards and procedures Conducting infrastructure security assessments using tools such as CIS Benchmarks Supporting incident detection, response and threat … intelligence activities Contributing to vulnerability management and endpoint security Supporting security improvements across complex client environments What We're Looking For We're interested in engineers with experience across some of the following areas: Cyber security and platform engineering Networking and network security Cloud security - AWS, Azure ...

CISO's delegate across executive, risk, governance, customer, supplier and regulatory forums. Ensure the function has the right operating model, capabilities, technology and management information to protect NewDay and support future growth. Turn security strategy into action Be responsible for the operational delivery of NewDay's security strategy, ensuring … investment and activity are focused on reducing material cyber and technology risk. Own the Information Security Management System and support continued alignment with ISO/IEC 27001:2022, the NIST Cybersecurity Framework and other recognised standards. Maintain effective security policies, standards and controls, ensuring they are understood, embraced, evidenced ...

into the detail of vulnerabilities, understanding how applications behave and working directly with developers to make software more secure. This isn’t a traditional vulnerability management, SOC or governance position. Instead, you’ll join a small Security Engineering team where you’ll investigate security findings, assess real‐world … exploitability and risk, monitor security tooling and help engineering teams remediate issues effectively. If you’re happiest opening unfamiliar code, understanding why a vulnerability matters and solving security problems alongside developers rather than simply raising tickets, this could be a great fit. The Role You’ll join a small ...

automation, and growing the engineers around you. Key responsibilities Own the operation of our corporate security controls: endpoint hardening, identity and access, privileged access, vulnerability and patch management, and access reviews. Partner with our central Security team on policy, vulnerability management and incident response. They … runs the joiner, mover and leaver process itself; you own the platform it runs on and the evidence that access was revoked. Own endpoint management across a genuinely mixed Mac, Windows and Linux fleet, covering enrolment, baselines, patching and compliance reporting. Own device and asset lifecycle and SaaS ...

Manage and execute operating system, middleware, application server, and Java platform patching, upgrades, and lifecycle maintenance across UNIX/Linux environments. Perform security hardening, vulnerability remediation, configuration management, cluster patching, rolling upgrades, rollback planning, disaster recovery validation, and post-patch testing while ensuring compliance with enterprise security … change management standards. Skills requireed for the role UNIX/Linux (RHEL, Solaris, AIX) Red Hat Satellite Ansible Oracle WebLogic OPatch JBoss EAP Java (JDK/JRE) JVM Tuning Security & Vulnerability Management Change Management Disaster Recovery Smoke Testing #J-18808-Ljbffr ...

Application Firewall (WAF), API Security and bot protection capabilities. Strong hands on experience with Web Application Firewalls (WAF), including policy design, rule tuning, exception management and application onboarding. Good understanding of OWASP Top 10 and OWASP API Security Top 10. Knowledge of HTTP/S, REST APIs and application … layer attack mitigation. Experience with vulnerability management, Qualys and attack surface monitoring tools. Understanding of patch management and vulnerability remediation. Strong stakeholder engagement and communication skills. Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community ...

helping to keep our infrastructure secure and compliant and our staff safe and productive. You'll be working on projects covering identity and access management, cloud and network security, vulnerability management, security monitoring, security hardening, compliance reviews, and more. It's a very varied role with lots … qualifications are a plus) Experience with Infrastructure as Code and infrastructure provisioning tools, particularly Terraform Experience configuring GCP-native security posture and threat management with Security Command Center Experience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact Analysis Experience with key and secret management ...

security monitoring platforms Support Layer 7 and web security initiatives including WAF, reverse proxy, API protection and edge security controls Support implementation and operational management of edge security platforms such as Cloudflare or similar technologies Support vulnerability management, remediation and infrastructure and networking security assessments across cloud … support the implementation, tuning and operational maturity of endpoint security, EDR and Microsoft Defender capabilities across infrastructure, corporate and production environments Support identity, access management and privileged access security initiatives across infrastructure environments Continuously evaluate emerging infrastructure threats, attack vectors and security tooling to strengthen the organisation's security ...

contribute... Key Accountabilities Own the operational performance, availability, capacity and resilience of cloud platforms and hosted services. Lead cloud incident, problem, change and event management, ensuring timely restoration, clear communication and effective root-cause resolution. Maintain operational controls, standards, runbooks and support models aligned with IT service management and engineering practices. Ensure cloud environments comply with security, risk, audit, data protection and regulatory requirements. Own and maintain vulnerability management processes to protect the estate. Manage cloud consumption, budgets, forecasts and optimisation plans, embedding effective FinOps practices. Oversee service providers and technology partners, holding them accountable ...

ongoing operation of cloud infrastructure Designing, developing and maintaining Infrastructure as Code (IaC) Improving infrastructure monitoring and alerting Managing and improving Identity and Access Management (IAM) Strengthening vulnerability management and reducing remediation times Providing technical support and guidance across infrastructure-related issues Working with third-party cloud ...

implement coordinated security strategies, policies, and procedures, while educating employees on best practices Provide intelligence services to JPMorgan Chase acquisitions, including drafting and disseminating vulnerability and intelligence reports. Liaise regularly with acquisitions to maintain lines of communication, understand and document their cybersecurity posture and unique challenges, identifying uplift opportunities … analysts on the team Required qualifications, capabilities, and skills Minimum 3 years of experience in cybersecurity operations, including threat detection, incident response, or vulnerability management Proven experience in network trace analysis, log analysis, vulnerability assessment, exploitation techniques, and security investigations in response to security incidents Proficiency ...

network, infrastructure and application security controls. Review complex technical solutions against security, regulatory and business requirements. Conduct and support threat modelling, risk assessments and vulnerability assessments . Provide technical oversight of security testing and penetration testing activities. Support vulnerability management and help teams prioritise and remediate security … reviewing security architectures, risk assessments and security testing outputs. The ability to translate complex technical security concepts into clear, business-focused recommendations. Excellent stakeholder management and communication skills. Experience working within large and complex enterprise environments. Government, Defence or wider Public Sector experience would be highly advantageous. Desirable Experience ...

cyber security best practices across the business. Administer security tools, including multi-factor authentication (MFA), mail filtering and Anti-Virus software. Participate in vulnerability management, incident response coordination, and system security reviews. Help maintain system documentation, asset registers, and compliance records in line with IT policies and data … Documentation Maintain up‐to‐date documentation of IT systems, configurations, procedures, and security protocols. Support the continuous improvement of IT operational processes and incident management workflows. Skills & Experience Required Proven experience in a Systems Analyst, IT Support Analyst, or Desktop Support role, ideally within a retail, luxury, or manufacturing ...

defence environments. They have a strong understanding of the UK Ministry of Defence/NATO approach to DevSecOps, Secure by Design, cyber risk management, security assurance, and the delivery of software into classified and operational environments. What You'll Do Design, build, and operate secure development and deployment infrastructure … segmented development environments. Implement automated security controls within CI/CD pipelines, including static analysis, dependency scanning, container scanning, secrets detection, software composition analysis, vulnerability management, and policy enforcement. Champion a DevSecOps culture where software engineers take ownership of the security, reliability, deployability, and operational performance ...

SBOM generation, so security findings and controls are enforced consistently Extending the integration between JFrog and ServiceNow, so findings flow into change and vulnerability processes Making sure every application follows the right security rules in the pipeline - scanning, approved sources and remediation with development teams Working directly with developers … environment - this is essential, and we'll be looking for real examples rather than a list of tools Experience with binary repository and package management for at least one of .NET/NuGet, Maven or Python, ideally more GitHub and GitHub Actions experience (TeamCity is used too, but Jenkins ...

endpoint, cloud, and application stack Build out our detection and monitoring capabilities, evolving our SIEM with alerting that cuts through the noise Own vulnerability management end to end - triaging, tracking, and driving issues through to resolution Proactively hunt for threats, from unusual behaviour in our environment to emerging ...

help drive our goals by: • Perform analytics on SOC incidents and other security data, identifying common trends for tuning and supporting the delivery of management reports. • Assist with in-depth investigations across endpoints, identity, cloud, and network environments. • Triage and respond to user reported phishing emails. • Help respond … concerns. • Identify and lead new areas for improvement within SOC ways of working. • Support the engineering team in deployment of new tooling • Support the vulnerability management team in prioritising and responding to vulnerabilities. Key skills that will help you succeed in this role: Currently studying for a degree ...

work across technologies including: Microsoft Defender Microsoft Purview Entra ID/Azure AD Conditional Access & MFA Microsoft 365 Security Security hardening & posture improvement Vulnerability management & remediation Intune/MDM/MAM Azure Security What we're looking for: You’ll already be a strong Microsoft Security Engineer/ ...

Platform Engineering to raise security maturity, visibility and incident response. The role emphasizes engineering and operations alignment, with a focus on scalable security controls, vulnerability management and modern tooling in a high-availability setup. #J-18808-Ljbffr ...

that takes software from source code to production. GitHub Enterprise, TeamCity, JFrog Artifactory and Xray, and Octopus Deploy, all integrated with ServiceNow change and vulnerability management. In a regulated banking environment, every build and deployment has to be secure, repeatable, traceable and auditable - and making that happen is your … Curation) Managing software supply-chain controls: approved repositories, open-source governance, package lifecycle, traceability and SBOM Integrating deployment automation with change and release management, including segregation of duties and audit evidence Working with Cyber Security, Risk and Control and development teams to onboard applications and remediate vulnerabilities Supporting platform ...