1 to 25 of 37 Vulnerability Management Jobs in the South West

experienced Security Architect and Subject Matter Expert (SME) is required to support the design, build, and assurance of Backend Platform and endpoint protection and vulnerability management capabilities within secure, offline (air-gapped) environments . The Architect must apply the NIST Cybersecurity Framework and MoD security policies … implementing security controls across the infrastructure and end-user endpoints. The role will provide specialist expertise in the delivery of Security controls, AntiVirus and Vulnerability Management platforms in support of a UK Government secure account . The successful candidate will operate within high-assurance environments , ensuring compliance with ...

Senior Infrastructure Engineer Gloucester £55-70k DOE Monday-Thursday 08:00-16:30 and Friday 08:00-15:00 Line Management (2 Engineers) The Senior IT Infrastructure Engineer is responsible for managing and optimising the global IT infrastructure, with primary focus on the UK region, and for acting … senior technical lead and principal escalation point within the UK IT team, providing hands-on expertise across infrastructure and security. Team Leadership and Line Management: Provide line management for two UK-based engineers (IT Infrastructure and Support Engineer and IT Support Technician), including objective setting, performance management ...

suited to a security professional who can operate at both architectural and hands-on levels, with strong experience across endpoint protection, Antivirus/EDR, vulnerability management, platform security and secure environments. You will work closely with Infrastructure, Platform and Security teams, applying NIST Cybersecurity Framework principles … implementation of endpoint and platform security solutions. Design security controls aligned with MOD policies, NIST Cybersecurity Framework and NCSC guidance. Design and deliver vulnerability management capabilities, including scanning, risk prioritisation, remediation and reporting. Develop security solutions for offline and air-gapped environments, including controlled update, patch and signature ...

local EASA Part-IS Lead . Working as part of our global cybersecurity organisation, you'll be responsible for maintaining our Information Security Management System (ISMS), managing cyber risk, supporting compliance activities, and driving security best practices across the site. This is a corporate-directed role within a global … Tewkesbury. What You'll Do Lead EASA Part-IS compliance activities for the Tewkesbury site. Operate and maintain the site's Information Security Management System (ISMS). Monitor security events, investigate incidents, and coordinate response activities. Conduct risk assessments, vulnerability reviews, and security audits. Act as the primary ...

disaster recovery arrangements, working with Technology Teams to maintain plans, schedule testing, evidence outcomes, identify dependencies and track remediation of weaknesses. IT Change Management: Support effective IT change governance, including chairing or supporting the Good Energy Change Advisory Board, and ensuring security and resilience impacts are considered and that … Compliance: Coordinate and support PCI-DSS control activity, evidence gathering, control testing and remediation tracking where technology controls are in scope. Penetration Testing and Vulnerability Management: Coordinate penetration testing and support vulnerability management oversight, working with Technology Teams and third parties to risk assess findings, agree ...

maintain core infrastructure platforms including Windows Server, Active Directory, Microsoft Entra ID (Azure AD), Hyper‐V, storage and backup environments. Support system monitoring, patch management, vulnerability remediation and disaster recovery activities to ensure secure and resilient services. Troubleshoot and resolve infrastructure, server and application issues, providing technical expertise … Active Directory Hyper‐V PowerShell Backup and Disaster Recovery solutions Storage platforms SCCM/Microsoft Configuration Manager SCVMM HPE Infrastructure Networking technologies Security and vulnerability management tools What We're Looking For At least 3 years' experience in an Infrastructure Engineer, Systems Engineer, Systems Administrator or IT Operations ...

broaden their exposure across cloud, security, networking, and emerging technologies. Key Responsibilities Manage Windows and Linux endpoints, including provisioning, patching, compliance, and endpoint management Administer Microsoft 365, identity management, SSO integrations, certificates, and user lifecycle processes Operate and enhance security tooling covering monitoring, vulnerability management, endpoint … supporting business systems Own backup, disaster recovery, and business continuity processes Lead Cyber Essentials and Cyber Essentials Plus certification activities Maintain infrastructure documentation, asset management, and IT governance processes Identify and deliver improvements that enhance security, resilience, and operational efficiency Project Work You'll have the opportunity to lead ...

service-level objectives.* Contribute to application architecture, integration, and lifecycle activities under the guidance of senior engineers.* Collaborate with stakeholders across engineering, service management, and business teams to resolve technical issues.* Mentor junior engineers and specialists, supporting their development and promoting best practices.* Participate in continuous improvement initiatives, including … platforms (e.g. SIEM, EDR, or similar)* Ability to solve moderately complex application-related issues and contribute to secure, scalable solutions.* Understanding of application lifecycle management, integration patterns, and secure-by-design principles.* Strong communication and collaboration skills across engineering and business teams.* A proactive mindset with a passion ...

throughout the path to live. What you'll do * Design and continuously improve secure, automated CI/CD and GitOps pipelines * Embed security scanning, vulnerability management and secrets management into delivery workflows * Establish secure-by-design engineering practices and enforce security and technical standards * Lead Infrastructure … Principal Engineer with strong hands-on and leadership experience across: * CI/CD & GitOps - GitHub Actions, Argo CD, Argo Rollouts * Security & compliance - Trivy, vulnerability management, HashiCorp Vault, cert-manager * Containers & cloud - Docker, AWS EKS, AWS IAM, S3 and network policies * Infrastructure as Code - Terraform * Observability - Grafana, Loki * Automation ...

Cyber Security, Digital Operational Services, and Digital Corporate and Shared Services. These roles are central to building sustainable in-house expertise that supports the management, development and delivery of digital solutions across the transport network. As Lead SOC Manager you will be responsible for leading and managing all activities … aligning its priorities with organisational objectives and government security standards. Represent the SOC in leadership forums and serve as the primary liaison with senior management, governance, assurance, and key stakeholders. Lead the operational day to day delivery of the hybrid SOC delivery model. Manage and lead the delivery ...

least privilege principles. Support endpoint/server security controls. Ensure appropriate logging and security monitoring is enabled and reviewed. Support encryption and certificate-management requirements. Review infrastructure against security standards and vendor recommendations. Identify unsupported and end-of-life systems and associated risks. Support security improvements across existing infrastructure. … Oversee and engage in system upgrades, patching, configuration changes and lifecycle-management activities. Monitor Security and compliance within the SSTL infrastructure capacity, performance, availability and health. Diagnose and resolve security incidents and problems. Support backup, recovery, business continuity and disaster-recovery arrangements. Participate in infrastructure projects, migrations and technology ...

automation, digital transformation and other evolving technologies.* Experience of **Digital Security Operations,** including tracking adversary tradecraft, building an effective threat intelligence pipeline, monitoring, detection, vulnerability management and incident handling.* Membership of a **professional body** desirable e.g. CISSP, CISM, CCISO, GIAC certifications, CRISC.* Experience **driving change** across a complex … organisation to uplift cyber maturity and reduce risk.* Experience of enterprise **Risk Management** frameworks and methodologies.* Demonstrate **Financial Management** capability, including budget management, investment planning and supplier oversight.## **Our Package**Tailored benefits make a real difference. That’s why we offer a comprehensive range to support your ...

responsibilities will include: Managing the performance, resilience and lifecycle of cloud services, infrastructure, devices and applications. Administering Microsoft 365, Entra ID, identity and access management, endpoint security and corporate SaaS applications. Maintaining corporate networks, including firewalls, switches, wireless, VPN, DNS and DHCP. Implementing configuration changes, integrations and automation … analysis and security investigations. Coordinating patching, upgrades, backups, recovery testing and business continuity arrangements. Maintaining technical documentation, operational procedures, asset records and IT service-management standards. Mentoring colleagues, working with suppliers and stakeholders, and recommending improvements to support future priorities. What We're Looking For You'll bring proven ...

Support service transition, onboarding, acceptance and go-live decisions by assessing technical evidence and readiness. Work with security teams to ensure security-by-design, vulnerability management, compliance and assurance requirements are addressed. Provide senior technical input to major incidents, complex problems and cross-supplier technical escalations where required. … NCSC cloud security principles. Understanding of ITIL 4, SIAM principles, ISO/IEC 27001, ISO/IEC 20000-1 and OWASP practices. Strong stakeholder management and communication skills, with the ability to explain complex technical matters clearly to technical and non-technical audiences. Ability to provide constructive challenge while ...

organisational and customer environments. Successful candidates will be capable of both autonomous and collaborative work, demonstrate an aptitude for problem-solving, possess excellent time-management skills, and have a genuine desire to learn new tools and technology stacks. Ideal candidates will also have experience or interest in networking, containerisation … support of deployed IT infrastructure. Timely troubleshooting and resolution of reported IT Infrastructure issues. Regular system health monitoring and maintenance, including backups, patch-management/vulnerability management, and software/hardware upgrades in line with lifecycle management. Documentation: Creation, development, and maintenance of comprehensive documentation ...

objectives. Desirable Experience supporting UK Defence, MOD, national security, government or critical national infrastructure organisations. Knowledge of Defence security policies, assurance approaches and risk management methodologies. Experience contributing to security assurance and accreditation activities for secure systems. Familiarity with classified or sensitive environments and associated security controls. Understanding … procurement and capability delivery programmes. Beneficial Knowledge Government and industry security frameworks such as HMG Security Policy Framework (SPF), ISO 27001 and NIST. Risk management methodologies and security assurance frameworks. Enterprise and security architecture approaches including TOGAF and SABSA. Cloud security and secure digital transformation programmes. Security operations, vulnerability ...

necessary to meet UK Government or contractual security obligations. Key Responsibilities Security Architecture: Lead the design and implementation of robust security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures. DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery … pipelines. Risk & Governance: Collaborate with accreditors, Risk Owners, and project leadership to navigate security case approvals and risk management frameworks. Technical Guidance: Provide hands-on direction to engineers on vulnerability remediation, secure coding standards, and incident response preparedness. Deep knowledge of secure networking, encryption standards, IAM, and zero ...

necessary to meet UK Government or contractual security obligations. Key y Responsibilities • Security Architecture: Lead the design and implementation of robust security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures. • DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into … delivery pipelines. • Risk & Governance: Collaborate with MOD accreditors, Risk Owners, and project leadership to navigate security case approvals and risk management frameworks. • Technical Guidance: Provide hands-on direction to engineers on vulnerability remediation, secure coding standards, and incident response preparedness. Core Technical Skills • Deep knowledge of secure networking ...

alerts for urgency and impact Deliver weekly and monthly reporting to clients and stakeholders Communicate security findings and trends directly to clients Support vulnerability management analysis and remediation efforts Lead false‐positive reduction and SIEM tuning activities Mentor and support development of Tier 1 and junior analysts Contribute ...

team in a newly created role. This position sits at the heart of service delivery and will focus on improving automation, security, monitoring, patch management, and endpoint management across a diverse customer base. This is an excellent opportunity for a senior engineer with a background in MSPs … within an MSP or managed services environment. Strong technical knowledge across: Microsoft 365 Windows Server Entra ID/Active Directory Networking & VPN technologies Endpoint management Security & monitoring solutions Experience working with RMM and PSA platforms. PowerShell scripting and automation experience. Experience improving service delivery across multiple customer environments. Excellent ...

shape and grow the wider cyber security capability. Key Responsibilities Deliver Cyber Security work packages for clients and internal delivery programmes Develop Security Management Plans Understand and define capability context; perform Risk Assessments Define and architect Security Controls Plan Vulnerability Management activity Develop Key/Certificate Management ...

shape and grow the wider cyber security capability. Key Responsibilities Deliver Cyber Security work packages for clients and internal delivery programmes Develop Security Management Plans Understand and define capability context; perform Risk Assessments Define and architect Security Controls Plan Vulnerability Management activity Develop Key/Certificate Management ...

looking for a DV cleared Microsoft Support Engineer to provide day-to-day support and operational management of Microsoft server, identity,and application services within a managed service environment. You will be responsible for incident resolution, monitoring, maintenance, patching, service requests, and operational changes across a range of Microsoft … audit logs,performance counters and telemetry to identify service degradation. PProactively identify trends,capacity concerns and potential service risks. Support root cause analysis andproblem management activities. Maintain monitoring thresholdsand alerting configurations. Microsoft Identity Services Administration Administer Microsoft ActiveDirectory Federation Services (AD FS). Manage Device RegistrationServices (DRS) and device ...

select security technologies, define integration patterns, and guide implementation teams through delivery. The role requires deep technical expertise across cloud security, identity and access management, boundary and perimeter security, secure platform architectures, and security tooling ecosystems. Key Responsibilities Design and deliver security architectures across cloud, on-premise, hybrid … HLDs, LLDs, architecture patterns and data-flow diagrams. Lead the refresh and evergreening of security technologies, including IAM, PAM, firewalls, EDR/XDR, SIEM, vulnerability management and cloud security. Evaluate new technologies through PoCs/PoVs and make clear, evidence-based recommendations. Design and review cloud, identity, network ...

infrastructure, security operations and corporate systems. This is a broad, hands-on role within a small cyber-security R&D company, encompassing endpoint management, cloud infrastructure, networking, compliance and business IT. As our environment continues to evolve, you'll be expected to lead infrastructure improvement projects and help shape … applicant to go through the UK security clearance process. Core Responsibilities Manage Windows and Linux endpoints, including device provisioning, configuration,patching, compliance and endpoint management using platforms such as Microsoft Intune and Fleet. Administer Microsoft 365, identity management, SSO, integration's, certificates and user-life-cycle processes. Operate ...