25 of 25 Contract Vulnerability Management Jobs in London

Month Contract Hybrid (2/3 days a week in Canary Wharf, London) We're looking for an experienced Vulnerability Management Lead with deep expertise in Microsoft Defender Vulnerability Management (TVM) to help shape and mature an enterprise vulnerability management capability within a well … established financial services organisation. This isn't a traditional vulnerability management role focused purely on remediation governance. Instead, you'll take ownership of the existing Microsoft Defender tooling, develop the vulnerability management strategy around it, enhance reporting for executive stakeholders, and help build a mature, data ...

Cyber Security Consultant - Incident and Vulnerability Management Duration: 30/11/2026 Pay: up to £610 per day (umbrella) Location: Preston, London or Birmingham UK, Hybrid - 30% office 70% home CONTRACTOR MUST BE MOD SC CLEARED AND BE A SOLE UK NATIONAL Role Summary The Security Incident … Vulnerability Management Consultant operates within the Operational Integrator (OI) function to support the transition to a multi-supplier (SIAM) model within a Defence environment. The role focuses on understanding, aligning and governing existing high-severity security incident management (S3/S4) and vulnerability management processes ...

Cyber Security Consultant - Incident and Vulnerability Management, UK Up to £570 per day, dependent on experience 3-month contract (Inside IR35) Hybrid working, 1 to 2 days onsite in Preston, London or Birmingham Must hold active SC clearance ABOUT THE CLIENT Our client is a major organisation operating … currently transitioning towards a multi-supplier service model and require an experienced Cyber Security Consultant to provide governance and coordination across security incident and vulnerability management. THE BENEFITS Hybrid working, approximately 1 to 2 days onsite Choice of Preston, London or Birmingham locations Opportunity to support a significant Defence ...

Cloud Vulnerability Lead Rate - £600 - £650 Inside IR35 Duration - 6 months initial Location - London (3 days a week on site) We're looking for a Cloud Vulnerability Lead to own and mature our cloud vulnerability management and CSPM capability across AWS and GCP. This role combines … expertise with leadership responsibility. You'll be the go-to SME for Qualys, ensuring the platform is being used effectively, while providing oversight of vulnerability management, cloud security posture and remediation activity across the organisation. You'll also manage a small team and work closely with Cloud Engineering ...

onsite) Hounslow £400 per day (Inside IR35 via umbrella) 6-month contract We're looking for a Cyber Security Analyst specialising in Operational Technology Vulnerability Management to join a high-profile, regulated environment supporting critical infrastructure. The Role You'll play a key role in identifying, assessing … Technology (OT) environments, helping to maintain a strong cyber security posture across complex estates. Key Responsibilities Identify and assess vulnerabilities across OT systems Support vulnerability remediation and risk prioritisation Monitor OT environments and investigate security alerts Contribute to vulnerability management strategy aligned to industry standards Collaborate with ...

user access management. Supporting desktop operating systems, laptops, mobile devices and collaboration technologies across multiple office locations. Maintaining endpoint security controls, encryption technologies and vulnerability remediation processes. Working closely with cyber security teams to strengthen infrastructure security and reduce operational risk. Supporting enterprise patch management and software deployment … Enterprise switching and routing Firewall administration DNS, DHCP and TCP/IP services Secure remote connectivity Network monitoring and performance optimisation Endpoint protection technologies Vulnerability management Security monitoring platforms Certificate and encryption management Technical Environment You'll have strong experience across most of the following technologies: Infrastructure ...

user access management. Supporting desktop operating systems, laptops, mobile devices and collaboration technologies across multiple office locations. Maintaining endpoint security controls, encryption technologies and vulnerability remediation processes. Working closely with cyber security teams to strengthen infrastructure security and reduce operational risk. Supporting enterprise patch management and software deployment … Enterprise switching and routing Firewall administration DNS, DHCP and TCP/IP services Secure remote connectivity Network monitoring and performance optimisation Endpoint protection technologies Vulnerability management Security monitoring platforms Certificate and encryption management Technical Environment You'll have strong experience across most of the following technologies: Infrastructure ...

operational delivery. Establish programme plans, governance frameworks, milestones, dependencies and success measures. Coordinate delivery across Cyber Security, SOC, Infrastructure, Cloud, IAM, Network and Service Management teams. Drive the implementation and enhancement of Security Operations capabilities, including SOC, SIEM, detection and response, vulnerability management and incident response. Manage … understanding of Security Operations and the delivery of operational cyber capabilities. Experience delivering programmes involving areas such as SOC, SIEM, incident response, threat detection, vulnerability management, security tooling or security service transformation. Proven experience transitioning security capabilities from project delivery into BAU operations. Strong programme governance, planning, financial ...

looking for a Wiz Security Engineer to focus on implementing threat modeling, asset/vulnerability management, prioritising patching along with the ability to integrate with Servicnow and other products. This is a hands on role where you will have expereince of: Asset management and audit Prioritising patch … management Integration with Servicenow and other products Experince of Tenable for Asset and Vulnerabiity management is a distinct advantage Threat Modeling: Lead security reviews and map attack surfaces across cloud infrastructure and products. Security Automation: Build policy-as-code and developer tooling to integrate security into CI/ ...

looking for a Wiz Security Engineer to focus on implementing threat modeling, asset/vulnerability management, prioritising patching along with the ability to integrate with Servicnow and other products. This is a hands on role where you will have expereince of: Asset management and audit Prioritising patch … management Integration with Servicenow and other products Experince of Tenable for Asset and Vulnerabiity management is a distinct advantage Threat Modeling: Lead security reviews and map attack surfaces across cloud infrastructure and products. Security Automation: Build policy-as-code and developer tooling to integrate security into CI/ ...

Manager requirement for a Global Risk Consulting Firm. This engagement sits within a cutting-edge Frontier AI and Cyber Security initiative focused on improving vulnerability management, patching and technology upgrade processes across a complex enterprise environment. The initial assignment is expected to run for 3 months, delivering … Duration: Initial 3-month engagement with strong potential to extend Key Responsibilities Lead a large-scale cyber transformation programme focused on patching, upgrades and vulnerability remediation. Drive improvements in speed-to-patch and security risk reduction across the organisation. Manage delivery across multiple workstreams within a complex global matrix ...

stakeholders to help ensure that IT and cyber activities are aligned with regulatory expectations, internal policies and good practice. KEY RESPONSIBILITIES Compliance and Risk Management: · Support compliance with applicable regulatory, IT, cyber and control frameworks, which may include DORA, ISO 27001, NIST CSF, SOX and Cyber Essentials. · Support … evaluation and management of IT, cyber, compliance and security risks across systems, processes and operations. · Monitor emerging technology, cyber and operational resilience risks to support proactive risk management and timely escalation. · Assist in preparing for and supporting regulatory inspections and internal, external and third-party audits. · Support ...

senior technical escalation point for complex and high-priority cyber security incidents, utilising Endpoint Detection and Response (EDR) and Security Information and Event Management (SIEM) technologies to support rapid investigation, containment, and remediation. Design, develop, and improve Security Orchestration, Automation and Response (SOAR) workflows to reduce manual effort, improve … response. Conduct proactive threat hunting activities using advanced search techniques and security telemetry to identify malicious activity that may have evaded automated detection. Support vulnerability assessment activities and contribute to security testing initiatives, including exposure to penetration testing and web application security assessments. Develop and maintain cyber security policies ...

senior technical escalation point for complex and high-priority cyber security incidents, utilising Endpoint Detection and Response (EDR) and Security Information and Event Management (SIEM) technologies to support rapid investigation, containment, and remediation. Design, develop, and improve Security Orchestration, Automation and Response (SOAR) workflows to reduce manual effort, improve … response. Conduct proactive threat hunting activities using advanced search techniques and security telemetry to identify malicious activity that may have evaded automated detection. Support vulnerability assessment activities and contribute to security testing initiatives, including exposure to penetration testing and web application security assessments. Develop and maintain cyber security policies ...

days in Office THE ROLE Own day-to-day Azure infrastructure operations for a leading alternative investments firm. You'll manage subscriptions, patch management, security posture, and identity infrastructure balancing operational efficiency with a security-first approach in a regulated environment. WHAT YOU'LL DO Administer Azure environment (compute … networking, storage, IAM) Manage patch and vulnerability remediation; maintain emergency CVE runbook Automate infrastructure using PowerShell/Terraform/Bicep Support cloud security posture management (Wiz, GitHub Advanced Security) Maintain AVD environment and session host management Configure Entra ID, conditional access, and identity governance Maintain and test ...

Work with technical and non-technical stakeholders to communicate cyber risks and security recommendations. Contribute to continuous improvement initiatives across security operations and threat management functions. Essential Skills & Experience Proven experience as a Security Operations Analyst, Cyber Security Analyst, SOC Analyst, or similar cybersecurity role. Strong understanding of cybersecurity … Experience Security Operations Centre (SOC) experience. Experience with SIEM platforms and security monitoring tools. Knowledge of cloud security and hybrid infrastructure environments. Exposure to vulnerability management and threat hunting activities. Experience supporting government, defence, or public sector programmes. Familiarity with security frameworks such as NIST ...

Cloud Vulnerability Lead Rate - £600 - £650 Inside IR35 Duration - 6 months initial Location - London (3 days a week on site) We're looking for a Cloud Vulnerability Lead to own and mature our cloud vulnerability management and CSPM capability across AWS and GCP click apply ...

Responsibilities Define and lead the CSOC strategy, operations, and governance. Take command of major incident response, managing remediation and stakeholder communication. Oversee threat intelligence, vulnerability management, and security monitoring capabilities. Manage relationships with external agencies, Managed Security Service Providers (MSSPs), and technology partners. What We Need From … Proven experience as a SOC Manager (previous leadership experience is essential; this is not an entry-level management role). Deep expertise in incident management processes and live crisis response. Strong background in managing third-party vendors (MSSPs). Strategic mindset to plan security investments, tooling, and resourcing. ...

Responsibilities Define and lead the CSOC strategy, operations, and governance. Take command of major incident response, managing remediation and stakeholder communication. Oversee threat intelligence, vulnerability management, and security monitoring capabilities. Manage relationships with external agencies, Managed Security Service Providers (MSSPs), and technology partners. What We Need From … Proven experience as a SOC Manager (previous leadership experience is essential; this is not an entry-level management role). Deep expertise in incident management processes and live crisis response. Strong background in managing third-party vendors (MSSPs). Strategic mindset to plan security investments, tooling, and resourcing. ...

system performance, availability, and security posture across environments. Automate operational and security controls using Infrastructure as Code and CI/CD pipelines. Support incident management, root cause analysis, and continuous improvement activities. Collaborate with stakeholders to implement security controls and compliance requirements. Drive improvements in observability, monitoring, logging … alerting. Conduct vulnerability remediation and support security reviews and audits. Essential Skills & Experience Active SC Clearance (mandatory). Proven experience in an SRE, DevSecOps, Platform Security, or Security Engineering role. Strong understanding of cloud platforms (AWS, Azure, or GCP). Experience with Infrastructure as Code tools such as Terraform. ...

system performance, availability, and security posture across environments. Automate operational and security controls using Infrastructure as Code and CI/CD pipelines. Support incident management, root cause analysis, and continuous improvement activities. Collaborate with stakeholders to implement security controls and compliance requirements. Drive improvements in observability, monitoring, logging … alerting. Conduct vulnerability remediation and support security reviews and audits. Essential Skills & Experience Active SC Clearance (mandatory). Proven experience in an SRE, DevSecOps, Platform Security, or Security Engineering role. Strong understanding of cloud platforms (AWS, Azure, or GCP). Experience with Infrastructure as Code tools such as Terraform. ...

/CD pipelines and DevSecOps processes. Review and analyse SAST, DAST and Software Composition Analysis (SCA) findings. Work closely with development teams to prioritise vulnerability remediation. Define security testing requirements and support penetration testing activities. Produce security standards, technical guidance and best practice documentation. Act as the Application Security … Architecture Risk Assessments DevSecOps CI/CD Security GitHub Actions GitLab Jenkins Azure DevOps Security Automation Shift Left Security Security Testing SAST DAST SCA Vulnerability Management Penetration Testing Cloud Security AWS, Azure or GCP Kubernetes Docker Container Security Cloud Security Best Practices Security Tooling Experience with ...

major government programme, helping to improve the security, reliability, and resilience of critical platforms and services. Key Skills: Splunk Security Engineering Platform & Infrastructure Security Vulnerability Management Cloud & Enterprise Environments Security Architecture Principles Responsibilities: Enhance the security posture of business-critical systems. Identify and remediate security risks and vulnerabilities. ...

segmentation and micro-segmentation strategies. Practical experience working with Cisco ACI , including security frameworks, policy enforcement, and network automation models. Strong track record in vulnerability management, remediation programmes, and coordinating security incidents and risk mitigation efforts across multiple teams. Experience operating within highly regulated industries, such as financial ...

Manager. The boundaries of the role are typically defined by the SZC Digital & IT's governance structure including policies and procedures related to data management, technology procurement, and project management. The Cyber Assurance Lead post holder operates within these boundaries to ensure that their function aligns with regulatory requirements … industry standards. Principal Accountabilities Verifying that the specified cyber security controls have been implemented in accordance with the risk management plan, with assessments of threats and vulnerabilities. Produce detailed plans for cyber security audits. Assure the implementation, operation and maintenance of security controls. Write formal reports, and sometimes deliver ...