23 of 23 Vulnerability Management Jobs in the City of London

better, be more and ultimately, be more fulfilled. To learn more about how we can supercharge progress for you, visit www.hcltech.com Job Title : Senior Vulnerability Management Engineer Location: London, UK ( Hybrid mode at client location ) Experience: 3 – 6 years in vulnerability management/information security ROLE … SUMMARY The L2 Senior Vulnerability Management Engineer owns the organisation's end-to-end vulnerability management programme, spanning EUC, Data Center, Network, and Application Infrastructure domains. The role is responsible for scanner architecture and tuning, risk-based prioritisation, integration with patch management and SOC functions ...

Role Summary We are seeking an experienced Project Manager to lead software development initiatives and coordinate ongoing patch/vulnerability management programs. The ideal candidate bridges technical understanding with strong project execution skills, ensuring releases, updates, and security patches are delivered on time, within scope, and with minimal … Manage sprint planning, backlog grooming, stand-ups, retrospectives, and release planning • Track and report project status, risks, and dependencies to stakeholders and leadership Patch & Vulnerability Management • Own the end-to-end patch management lifecycle: identification, testing, scheduling, deployment, and validation • Coordinate patch cycles across OS, application ...

Cyber Security Specialist/Cyber Security Engineer - CISSP, CEH, CCNA Security, Incident Response, Threat Monitoring, Vulnerability Management, Security Architecture, Azure, Windows Server Infrastructure. Permanent. London Hybrid. c.£90k - £100k + Bons +Benefits Global Law Firm seeks an experienced IT Cyber Security Specialist to join its Infrastructure Engineering team … incidents and strengthen the firm's overall security posture. This is a hands-on technical role covering Cyber Security Engineering, Incident Response, Threat Monitoring, Vulnerability Management and Security Architecture (Infrastructure focussed) using tools such as MS Defender and MS Sentinel. You'll work across a complex infrastructure environment ...

technology and IT due diligence assessments to identify risks, opportunities and value creation initiatives. Assessing enterprise architecture, infrastructure, cloud environments, technology operations, IT service management and digital capabilities. Evaluating technology organization structures, governance models, operating models and IT processes. Reviewing technology roadmaps, digital transformation programmes and strategic technology investments. … performance, digital transformation objectives or investment outcomes. Collaborating with cybersecurity specialists to evaluate key security capabilities, governance frameworks, cloud security controls, identity and access management practices, and overall cyber resilience as part of broader technology advisory engagements. Producing high-quality reports, presentations and executive briefings. Managing project workstreams ...

part of an ongoing security improvement programme. This is a hands-on role within an established IT Security team, covering security operations, incident response, vulnerability management, and risk assessment across a large enterprise environment. The role You will work across the full breadth of the security operations lifecycle … sources, investigating security logs against short and medium-term threats and indicators of compromise (IoCs). Carrying out proactive and reactive threat hunting. Executing vulnerability and web application assessments, then providing analysis and remediation recommendations. Running vulnerability management and mitigation as business-as-usual activity. Conducting risk ...

National Security environments Knowledge of security frameworks including NIST, ISO 27001, CIS or CAF Experience within areas such as security architecture, cyber risk, vulnerability management, incident response, security monitoring or threat intelligence Strong stakeholder management and client-facing communication skills Understanding of network security, encryption, authentication … Cyber Security Manager, Cyber Security, Information Security, Security Architecture, Cyber Risk, NIST, ISO 27001, CIS, CAF, Defence, Government, Security Clearance, SC, DV, Incident Response, Vulnerability Management, Threat Intelligence ...

changes to help ensure security is considered by design. Assessing cloud security controls and supporting alignment with industry good practice and regulatory expectations. Supporting vulnerability management, penetration testing and remediation activities. Working alongside developers and engineers to embed security throughout the software development lifecycle. Conducting root cause analysis … Microsoft Azure, AWS and/or Google Cloud. SIEM, XDR and security monitoring technologies. Threat hunting, investigations or digital forensics. Networking, operating systems, identity management and modern security controls. Reviewing technical solutions, architecture or technology changes from a security perspective. Secure software development practices and DevSecOps principles. Vulnerability ...

infrastructure. Practical knowledge of endpoint detection and response technologies and security monitoring platforms. Experience with technologies such as CrowdStrike, Netskope, SIEM platforms, vulnerability management tools or comparable enterprise security technologies. Understanding of network, endpoint, identity, cloud and data security principles. Ability to investigate security events using information from … multiple security platforms and data sources. Understanding of vulnerability management and security remediation processes. Familiarity with security frameworks and standards such as NIST and ISO 27001. Good understanding of Active Directory, Entra ID or similar enterprise identity environments. Ability to translate technical security issues into clear risks ...

Manage and execute operating system, middleware, application server, and Java platform patching, upgrades, and lifecycle maintenance across UNIX/Linux environments. Perform security hardening, vulnerability remediation, configuration management, cluster patching, rolling upgrades, rollback planning, disaster recovery validation, and post-patch testing while ensuring compliance with enterprise security … change management standards. Skills requireed for the role UNIX/Linux (RHEL, Solaris, AIX) Red Hat Satellite Ansible Oracle WebLogic OPatch JBoss EAP Java (JDK/JRE) JVM Tuning Security & Vulnerability Management Change Management Disaster Recovery Smoke Testing Disclaimer: This vacancy is being advertised by either ...

operational resilience of business-critical banking applications. Forward Deployed Engineers will conduct targeted, hands-on engagements with development teams that are facing challenges with vulnerability remediation, automated testing, legacy technology, production stability, or achieving a safe and rapid release cadence. The role combines senior software engineering, DevOps, SRE, test … application and drive implementation, including the use of AI coding assistance. Source suitable test data and implement secure data masking for lower environments. Conduct vulnerability triage, root-cause and dependency reachability analyses, remediation prioritization, secure code changes, and regression testing. Upgrade Java, JVM, NPM, Spring, open-source libraries, internal ...

ensuring secure development practices are adopted across engineering teams. The post holder will act as a technical authority on application security, helping reduce vulnerability risk and improve security outcomes across both internal IT systems and customer-facing solutions. Strong knowledge of application security principles and practices Experience with SAST … Java, C, C++ Experience with CI/CD pipelines and DevSecOps integration Threat modelling techniques and tools Understanding of OWASP Top 10 and common vulnerability classes Experience with API security and web application security Understanding of fuzz testing and advanced testing techniques Familiarity with secure AI development considerations Knowledge ...

Responsibilities Define and lead the CSOC strategy, operations, and governance. Take command of major incident response, managing remediation and stakeholder communication. Oversee threat intelligence, vulnerability management, and security monitoring capabilities. Manage relationships with external agencies, Managed Security Service Providers (MSSPs), and technology partners. What We Need From … Proven experience as a SOC Manager (previous leadership experience is essential; this is not an entry-level management role). Deep expertise in incident management processes and live crisis response. Strong background in managing third-party vendors (MSSPs). Strategic mindset to plan security investments, tooling, and resourcing. ...

responsible for delivering and operating shared platform capabilities that enable trusted data services and production-grade AI-driven workflows. Working closely with Platform Product Management, you will help ensure platforms are scalable, reliable, secure, and widely adopted across product domains while supporting innovation through high-quality engineering execution. Responsibilities … guardrail mechanisms required for safe AI workflows Implement security controls, access governance, encryption, and audit requirements in partnership with InfoSec while ensuring enterprise SDLC, vulnerability management, and change management compliance Requirements 12+ years leading platform engineering teams delivering shared services or large-scale SaaS systems with production ...

governance Partnering with engineering, data and technology teams to embed effective security controls into products and platforms Driving improvements in security event monitoring, exposure management and alerting capabilities Conducting security reviews of new products, services and technology initiatives Building meaningful security metrics and reporting that support informed decision-making … security, governance, risk or compliance Experience building security controls and automated security solutions within modern cloud environments Knowledge of security technologies such as SIEM, vulnerability management, data protection, endpoint security or exposure management platforms Experience working with APIs, automation, scripting and infrastructure-as-code technologies Familiarity with ...

secure-by-design principles Terraform and Infrastructure as Code CI/CD pipelines and automation AWS security, IAM and networking Security tooling and vulnerability management Kubernetes/EKS/ECS Leading and mentoring engineers Experience within government, financial services or regulated environments Desirable: Government security standards/NCSC ...

physical security policies and controls. Governance, Risk, and Compliance maintain said policies, ensure controls are operating effectively via assessment and attestation, and own the vulnerability management program to identify and correct any problems within. Responsibilities Security Metrics – Uses automated and manual processes to produce regular reports communicating … with Regulatory Compliance Experience in an exchange, trading facility, or financial services a plus Experience in Customer communication and Vendor evaluation Experience with senior management and board metrics generation and communication Advanced certifications (for example, the CISSP) Advanced technical writing and/or communication education and experience University degree ...

Cyber Security Specialist to join the Infrastructure Engineering team. This hands-on role covers cybersecurity, infrastructure security, incident response, threat monitoring and vulnerability management to continually improve the firm’s global security posture. The role is based in London with hybrid work: 3 days in office (4 days ...

Infrastructure Engineering team of a leading international law firm. This is a hands-on role covering cybersecurity, infrastructure security, incident response, threat monitoring and vulnerability management, with responsibility for continually improving the firm's global security posture. Key Responsibilities Lead and support cyber incident response and investigations. Identify ...

Deep DevSecOps implementation experience using AI GCP and Kubernetes expertise CI/CD security implementation SAST, DAST, SCA, SonarQube and Checkmarx hands-on experience Vulnerability management ownership Container and cloud security Security automation and compliance Ability to answer deep technical questions without prompting ...

identity-driven segmentation models. . Practical experience working with Cisco ACI, including security frameworks, policy enforcement, and network automation models. Strong track record in vulnerability management, remediation programmes, and coordinating security incidents and risk mitigation efforts across multiple teams. Strong expertise in network routing protocols, secure network architecture ...

Manager. The boundaries of the role are typically defined by the SZC Digital & IT's governance structure including policies and procedures related to data management, technology procurement, and project management. The Cyber Assurance Lead post holder operates within these boundaries to ensure that their function aligns with regulatory requirements … industry standards. Principal Accountabilities Verifying that the specified cyber security controls have been implemented in accordance with the risk management plan, with assessments of threats and vulnerabilities. Produce detailed plans for cyber security audits. Assure the implementation, operation and maintenance of security controls. Write formal reports, and sometimes deliver ...

enable developers and autonomous AI agents to develop, build, test, and deploy applications through to production. You will also build SRE capabilities covering release management, operational stability, monitoring, and incident and alert response. About Us Schroders is a global investment manager which provides active asset management, wealth management … assisted/agentic authoring. Build and operate CI/CD pipelines using GitHub Actions/Workflows, embedding quality controls such as linting, static analysis, vulnerability scanning, and automated tests. Define and implement test strategies for platform services and infrastructure code (e.g., unit testing for automation/services, policy tests ...

looking for an engineering-first security leader who still enjoys getting into the technical detail. This isn't a governance, compliance or traditional security management position. Instead, you'll work directly alongside the CTO, helping shape Product Security across the organisation whilst remaining technically credible enough to influence engineering … Governance, Risk & Compliance (GRC), audit or ISO27001. You've moved away from hands-on technical work. Your experience is predominantly SOC, Detection Engineering or Vulnerability Management. You're looking for a large enterprise people-management role. You haven't owned Product Security within a software engineering environment. ...