251 to 275 of 694 Vulnerability Management Jobs

enterprise and business‐aligned security initiatives end‐to‐end.* Provide expert security guidance across concurrent IT, engineering, and business projects.* Oversee security assessments including vulnerability management, penetration testing, and third‐party risk.* Translate security findings into prioritized, actionable remediation plans with clear ownership.* Provide security input into solution … security frameworks and regulations (NIST, ISO 27001, CIS, GDPR, etc.).* Ability to translate technical risk into clear, business‐relevant language.* Strong stakeholder management skills with the ability to influence without authority.* Bachelor’s degree in Engineering, Computer Science, or equivalent experience, plus relevant certifications (CISSP, CISM, GIAC ...

cloud PaaS provider (e.g. Azure or AWS) Strong working knowledge of information security standards and good practice (e.g. ISO 27001) Understanding of designing security management systems Experience with threat and vulnerability management systems Ability to assess security control designs and configurations for effectiveness in risk mitigation … collaborative, consultative approach with a genuine desire to help your team succeed Service delivery/project management experience; Agile and DevOps exposure is a plus Nice to have: A track record of building trusted relationships with security stakeholders Experience drafting, implementing and maintaining security processes Experience managing the delivery ...

security and quality gates into the SDLC. Cloud Security & Compliance: Enforce cloud security best practices, including least privilege, encryption at rest/in transit, vulnerability scanning, and automated remediation. Support ITGC, audit, and regulatory requirements by implementing controls, monitoring, and evidence collection for cloud environments. Respond to security incidents …/CD & DevOps: Strong knowledge of CI/CD tools, containerization (Docker, Kubernetes), and orchestration Security: Solid understanding of cloud security frameworks, IAM, encryption, vulnerability management, and compliance (ISO, NIST, CIS) Networking: Expertise in cloud networking, VPNs, load balancers, DNS, CDN, and hybrid connectivity Monitoring & Observability: Experience with ...

platforms, Logic Apps, Python and APIs. Conduct proactive threat hunting and perform root cause analysis following security incidents. Support endpoint security, identity protection and vulnerability management initiatives. Requirements Experience within a SOC environment. Strong knowledge of SIEM, EDR and SOAR platforms. Hands-on experience with platforms such … Darktrace or similar security technologies. Experience monitoring and securing Azure and AWS environments. Knowledge of ISO 27001 and Cyber Essentials. Excellent communication and stakeholder management skills. Desirable Skills CISSP and/or Microsoft Security certifications (SC-200, SC-300 or SC-400). Experience working within ...

hands-on technical background in operational cyber security spanning endpoint & EDR, identity & Active Directory, Microsoft 365 & Azure, network/ZTNA, and SIEM/log management - able to act as a senior technical authority within the team. Tools: Azure, Active Directory, CrowdStrike Falcon, Zscaler, Vulnerability Management (Qualys, Tenable … execution of globally-prioritised work to agreed quality, pace and outcomes. Drive London-side delivery of in-flight initiatives through completion. Track and chase vulnerability remediation and patching on London-managed systems, escalating blockers. 3 days on site required in central London Cyber Operations & Incident Response Lead, Cloud, Security ...

security frameworks. Lead the end‐to‐end delivery of complex consultancy engagements across SOC/SIEM/SOAR, XDR/EDR, identity, cloud security, vulnerability management and related services, ensuring delivery to agreed scope, quality and timelines. Serve as a senior technical authority and escalation point for high … consultancy engagements within an MSSP or managed services environment, covering SOC design and deployment, SIEM/SOAR, XDR/EDR, identity, cloud security and vulnerability management. Proven capability designing and implementing enterprise security architectures across Microsoft and mixed-vendor environments, including SaaS platforms and hybrid cloud estates. Deep hands ...

mentorship to engineering teams as an embedded security subject‐matter expert, influencing design decisions and raising overall DevSecOps maturity across the organization. Lead vulnerability management and remediation across application, pipeline, and cloud environments while participating in threat modeling and architecture reviews to ensure security is embedded … platforms such as Snyk, Checkmarx, Veracode, or equivalent security testing solutions. Cloud security expertise with experience using cloud security platforms (CSPM, CNAPP), secrets management solutions such as HashiCorp Vault or cloud‐native services, and zero trust or identity‐centric security architectures. Financial services or regulated industry experience with knowledge ...

DevSecOps: Embed security into our CI/CD pipelines without slowing down our high-velocity engineering team. Integrate automated SAST/DAST scanning, dependency management (SCA), and secret detection into our daily workflow. Cloud & Infrastructure Hardening: Work closely with Systems Engineers to secure our Kubernetes clusters and compute environments. … Design strict IAM policies (least privilege for agents) and ensure network isolation so that agent execution environments are impenetrable. Vulnerability Management: Own the lifecycle of vulnerability detection and remediation. Manage bug bounty programs, coordinate third-party pentests, and ensure our open-source dependencies (and the code ...

security assessments, design security architectures, and help clients build security programs that meet regulatory requirements without creating operational friction. Responsibilities Lead penetration testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct incident response planning … tabletop exercises Advise C-level executives on security strategy and risk management Requirements 8+ years in information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security ...

outcomes of security controls Skills: Cloud Security and Development (AWS a prerequisite) Understanding and experience with CICD and secure CICD best practices (CircleCI) Vulnerability Mgmt tooling (code scanning, IaC) Security expertise in cryptography and exploit development Strong investigative and analytical problem solving skills. Experience with secure architecture design. Strong ...

recognised methodologies. Conduct assurance reviews against industry standards, regulations, and frameworks. Produce security reports, policies, and assurance evidence for stakeholders. Support security control assessments, vulnerability management, and incident analysis. Provide guidance on security requirements and best practices. Build trusted relationships with clients and security stakeholders. What we need … from you: Experience aligned to the CIISec Skills Framework, particularly across Information Assurance, Governance, Risk Management, Security Assurance, and Security Management. Experience in Information Assurance, Cyber Risk, GRC, or Security Consulting. Knowledge of security standards and frameworks, including ISO 27001 and industry best practices. Experience conducting security assessments, reviewing ...

responsible for delivering and operating shared platform capabilities that enable trusted data services and production‐grade AI‐driven workflows. Working closely with Platform Product Management, you will help ensure platforms are scalable, reliable, secure, and widely adopted across product domains while supporting innovation through high‐quality engineering execution. Responsibilities … guardrail mechanisms required for safe AI workflows Implement security controls, access governance, encryption, and audit requirements in partnership with InfoSec while ensuring enterprise SDLC, vulnerability management, and change management compliance Requirements 12+ years leading platform engineering teams delivering shared services or large‐scale SaaS systems with production ...

Manage and enhance the organisation's cyber security posture . Monitor, investigate, and respond to security threats and vulnerabilities . Administer Identity and Access Management (IAM) across Microsoft , Microsoft Azure , Amazon Web Services (AWS) , and Software as a Service (SaaS) platforms. Implement and maintain Microsoft Defender , Microsoft Sentinel , Microsoft … Purview , and other security technologies . Lead vulnerability management and coordinate penetration testing activities. Secure Microsoft 365 services, including Exchange Online , SharePoint Online , OneDrive , and Microsoft Teams . Implement data protection controls, including Data Loss Prevention (DLP) , Sensitivity Labels , and encryption . Manage security awareness training and phishing ...

reporting. Act as the primary point of contact for all information security and IT risk matters. Provide regular reporting to senior and executive management on security posture and risk status. Promote a culture of security awareness and compliance across the organisation. Design and deliver security awareness training programmes … staff. Who are we looking for? Proven experience in information security and IT risk management, preferably within financial services or other regulated industries. Strong leadership background, with experience managing and developing high-performing teams in complex environments.Deep understanding of cyber security principles, IT risk frameworks, and operational resilience practices. ...

reporting. Act as the primary point of contact for all information security and IT risk matters. Provide regular reporting to senior and executive management on security posture and risk status. Promote a culture of security awareness and compliance across the organisation. Design and deliver security awareness training programmes … staff. Who are we looking for? Proven experience in information security and IT risk management, preferably within financial services or other regulated industries. Strong leadership background, with experience managing and developing high-performing teams in complex environments. Deep understanding of cyber security principles, IT risk frameworks, and operational resilience ...

contributing to a team that values lifelong learning. As a Security Engineer , you are a critical guardian of the platform that powers video knowledge management for global universities and businesses. You won't be working in an "ivory tower." Instead, you will elevate the Craft of security by embedding … suggest the secure code alternative. Automation Mindset: You prefer a script over a manual check. You have experience with SAST/DAST and vulnerability management platforms. Pragmatic Compliance: You understand that security must support business velocity. You’ve implemented controls in regulated environments without slowing down the mission. ...

deeply technical and apply that skill to the business environment Expertise in one or more of the following areas; Identity and Access Management, Data Security, Threat and Vulnerability Management, Third Party Risk, Cyber Security Infrastructure and Cyber Security Operations Strong decision-making ability when faced with complex … business critical threats Excellent communication, negotiation and conflict management skills, with an ability to anticipate and pre-empt potential obstacles; strong listening skills Good ability to write and articulate, summarise and present complex problems and messages in a succinct and comprehensible manner Exceptionally curious and enquiring mindset with ...

recommend improvements. Support the Infrastructure Team with threat and risk intelligence from the Managed SOC. Investigate and respond to security alerts and incidents. Support vulnerability management and security remediation activities. Assist with Microsoft Defender and Microsoft Sentinel security operations. Promote and enhance the organisation's cyber security culture. … programmes. Experience managing phishing simulation campaigns. Security awareness compliance reporting experience. Microsoft Defender Suite. Microsoft Sentinel. Security Operations (SOC). Incident Response. Threat Intelligence. Vulnerability Management. Excellent communication and stakeholder engagement skills. Desirable Experience ISO 27001. Cyber Essentials. Microsoft Intune. Security awareness programme development. Working with Managed Security Service ...

equivalent . Knowledge, Skills, and Abilities Minimum of five years of hands-on experience with Arctic Wolf SOC, including incident triage, alert review, ticket management, and escalation procedures. Minimum of five years of experience working with Microsoft 365 Defender, including Defender for Endpoint, Defender for Identity, and Defender … Minimum of five years of experience configuring, administering, and managing Web Application Firewall technologies, preferably Akamai WAF. Strong knowledge of cybersecurity principles, threat detection, vulnerability management, access controls, and incident response practices. Strong analytical, troubleshooting, and problem-solving skills. Effective verbal and written communication skills, with the ability ...

suspicious activity. Investigating security alerts, incidents and potential breaches. Analysing vulnerabilities and implementing measures to reduce risk. Managing and monitoring Identity and Access Management controls, including the detection of inappropriate access or privilege misuse. Researching emerging cyber threats and recommending proactive security improvements. Testing and evaluating security technologies … experience in an Information Security Analyst or similar cyber security role. Strong technical background with solid infrastructure, network and system security knowledge. Experience using vulnerability management tools, Intrusion Detection Systems (IDS) and SIEM platforms. Knowledge of cyber security frameworks and standards such as ISO 27001, NIST Cybersecurity Framework ...

incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical roadmaps with … gaps and align solutions/services to mitigate risk Strong communication and storytelling skills , adapting for technical and non-technical audiences Familiarity with service management practices (e.g. ITIL, ticketing systems) Relevant certifications (e.g. CISSP, CISM, Security+, cloud security ) – desirable Proactive, accountable, and customer-focused mindset with strong ownership ...

incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical roadmaps with … gaps and align solutions/services to mitigate risk Strong communication and storytelling skills , adapting for technical and non-technical audiences Familiarity with service management practices (e.g. ITIL, ticketing systems) Relevant certifications (e.g. CISSP, CISM, Security+, cloud security ) – desirable Proactive, accountable, and customer-focused mindset with strong ownership ...

system performance, availability, and security posture across environments. Automate operational and security controls using Infrastructure as Code and CI/CD pipelines. Support incident management, root cause analysis, and continuous improvement activities. Collaborate with stakeholders to implement security controls and compliance requirements. Drive improvements in observability, monitoring, logging … alerting. Conduct vulnerability remediation and support security reviews and audits. Essential Skills & Experience Active SC Clearance (mandatory). Proven experience in an SRE, DevSecOps, Platform Security, or Security Engineering role. Strong understanding of cloud platforms (AWS, Azure, or GCP). Experience with Infrastructure as Code tools such as Terraform. ...

system performance, availability, and security posture across environments. Automate operational and security controls using Infrastructure as Code and CI/CD pipelines. Support incident management, root cause analysis, and continuous improvement activities. Collaborate with stakeholders to implement security controls and compliance requirements. Drive improvements in observability, monitoring, logging … alerting. Conduct vulnerability remediation and support security reviews and audits. Essential Skills & Experience Active SC Clearance (mandatory). Proven experience in an SRE, DevSecOps, Platform Security, or Security Engineering role. Strong understanding of cloud platforms (AWS, Azure, or GCP). Experience with Infrastructure as Code tools such as Terraform. ...

Board (CAB) and leadership of an Information Security governance forum. Oversee security operations and technical controls across SIEM, firewalls, endpoint protection, identity and access management, and secure configuration. Manage cyber security across cloud and hybrid environments (Microsoft 365/Azure), including patching assurance, disaster recovery and business continuity testing. … Lead vulnerability management and security testing activity (internal scanning, external testing, remediation tracking, evidence gathering). Manage and coordinate incident response, investigation, reporting and post-incident improvement actions. Maintain compliance and evidence for key standards/frameworks, including (as applicable) PSN, PCI-DSS, Cyber Essentials Plus, GDPR ...