14 of 14 Contract Vulnerability Management Jobs in London

hands-on technical security position. Key Responsibilities: Develop supplier onboarding packs covering security processes, policies, governance and reporting. Align incoming suppliers with established Incident Management, Vulnerability Management and Security Assurance processes. Define supplier roles, responsibilities and interaction models across the SIAM/OI environment. Identify and manage … gaps between supplier capabilities and existing security requirements. Support Security Management Plans, compliance reporting, audit and assurance activities. Support Operational Readiness Reviews (ORR) and Service Commencement activities. Produce clear, reusable security and service management documentation. Coordinate with incoming and incumbent suppliers, transition teams and client stakeholders. Support operational ...

integration and enablement position focused on aligning suppliers to established security processes rather than redesigning them. You will work closely with Security Assurance, Incident Management and Vulnerability Management teams to ensure suppliers understand their obligations and can demonstrate readiness from day one. Key responsibilities Develop structured supplier … onboarding documentation. Identify and manage gaps between supplier capabilities, client expectations and existing SI/OI processes. Support supplier assessments relating to Security Management Plans, compliance reporting and assurance activities. Ensure suppliers understand audit expectations, governance requirements and evidence obligations. Coordinate onboarding across multiple service commencement dates and transition ...

ingestion, optimisation, data onboarding, and security analytics. Collaborate with SOC and Threat Intelligence teams to improve monitoring and response capabilities. Security Assessments & Risk Management Conduct security assessments, reviews, and audits to identify vulnerabilities and weaknesses. Assess risks and recommend appropriate mitigation strategies. Support vulnerability management and remediation … cloud, infrastructure, and application environments. Strong understanding of security architecture and secure design principles. Experience conducting security assessments, audits, and risk reviews. Knowledge of vulnerability management and remediation processes. Excellent analytical and problem-solving capabilities. Ability to work independently and provide technical leadership. Active SC Clearance. Technical Experience ...

libraries and templates that all three teams can reuse. Review code, infrastructure-as-code and configuration changes for security issues. Handle day-to-day vulnerability management, including pen test findings: prioritise what's genuinely exploitable, track fixes and check they've worked. Help run threat modelling sessions … IriusRisk and turn the results into backlog tickets. Look after secrets management, certificates and access reviews and keep security documentation, control evidence and CAB records up to date. Be the go-to person when security is blocking a delivery team, cover for the senior engineers when priorities shift ...

Application Firewall (WAF), API Security and bot protection capabilities. Strong hands on experience with Web Application Firewalls (WAF), including policy design, rule tuning, exception management and application onboarding. Good understanding of OWASP Top 10 and OWASP API Security Top 10. Knowledge of HTTP/S, REST APIs and application … layer attack mitigation. Experience with vulnerability management, Qualys and attack surface monitoring tools. Understanding of patch management and vulnerability remediation. Strong stakeholder engagement and communication skills. Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community ...

grade or similarly secure environments such as defence. Hybrid London based Service Owner - Service Experience Proven experience as a Service Owner, Head of Service Management, Service Delivery Manager or equivalent senior role.Lead end-to-end service management, service desk, portals, self-service, NOC/APM monitoring and continual … improvement. implementing service automation, self-service platforms, service catalogues or knowledge management services SIAM and multi-supplier environments. NOC, APM, automation, self-service, service catalogue or knowledge-management implementation. GDS Service Standard and government service management experience. ITIL 4 Managing Professional, Strategic Leader or equivalent. Service Owner ...

Architecture Experience Experience in a Solution Architect role delivering projects and technical solutions Experience with enterprise strategies covering capacity planning, performance optimisation, data lifecycle management, tiering and storage governance. Experience operating within mature architecture governance functions. Experience working within global and highly regulated organisations. Financial Services experience is desirable … essential. Technical Expertise Technical expertise in Nutanix technologies including AHV, Prism Central, lifecycle management, automation, resilience and disaster recovery. Technical expertise in Dell enterprise storage platforms, including PowerStore, PowerScale, PowerMax, ECS and associated storage networking technologies. Strong knowledge of enterprise compute platforms including x86 server infrastructure, hyperconverged infrastructure, virtualisation ...

Lead and embed DevSecOps engineering practices across multiple MOD digital products Design and govern secure CI/CD and GitOps pipelines Integrate security scanning, vulnerability management and compliance controls Drive Infrastructure as Code using Terraform Work across Kubernetes/Docker/AWS EKS Implement secrets, identity and access … management using technologies such as HashiCorp Vault Establish observability, monitoring, logging and audit controls Develop secure-by-design engineering practices aligned to MOD security requirements Coordinate DevSecOps engineers, developers, testers and infrastructure teams Create and maintain security processes, technical standards and operational runbooks Support incident response, patching, risk management ...

Lead and embed DevSecOps engineering practices across multiple MOD digital products Design and govern secure CI/CD and GitOps pipelines Integrate security scanning, vulnerability management and compliance controls Drive Infrastructure as Code using Terraform Work across Kubernetes/Docker/AWS EKS Implement secrets, identity and access … management using technologies such as HashiCorp Vault Establish observability, monitoring, logging and audit controls Develop secure-by-design engineering practices aligned to MOD security requirements Coordinate DevSecOps engineers, developers, testers and infrastructure teams Create and maintain security processes, technical standards and operational runbooks Support incident response, patching, risk management ...

applying analytical skills to undertake problem resolution and address technical issues. Administer and maintain Linux and Windows virtual machines, with a strong focus on vulnerability management and system hardening Leverage automation tools to provision, configure, and manage virtual infrastructure Deploy, configure, and support shared production services, including identity ...

lifecycles across .NET (NuGet), Maven and Python ecosystems Extending the integration between JFrog and ServiceNow, so security findings and controls flow into change and vulnerability processes Making sure every application follows the right security rules in the pipeline - scanning, policies, approved sources and remediation with development teams Working directly … hands-on experience with JFrog Artifactory and JFrog Xray within a CI/CD environment - this is essential Experience with binary repository and package management for at least one of .NET/NuGet, Maven or Python, ideally more GitHub and GitHub Actions experience (TeamCity is used too, but Jenkins ...

across multiple domains. Key Responsibilities Define target and transitional architectures for enterprise DevSecOps and engineering platforms. Design secure software supply-chain approaches covering SCA, vulnerability scanning, secrets detection, licence controls, SBOMs, signing and provenance. Establish architectural patterns across CI/CD, artefact repositories, containerised environments and runtime provisioning. Design … DevSecOps architecture and/or platform architecture. Secure software supply chains and modern software-delivery practices. CI/CD architecture and engineering tooling. SCA, vulnerability management/scanning and secrets detection. SBOMs, software signing and provenance. Artefact repositories and container platforms. Identity, SSO and RBAC. Logging, auditability ...

identity-driven segmentation models. . Practical experience working with Cisco ACI, including security frameworks, policy enforcement, and network automation models. Strong track record in vulnerability management, remediation programmes, and coordinating security incidents and risk mitigation efforts across multiple teams. Strong expertise in network routing protocols, secure network architecture ...

that takes software from source code to production. GitHub Enterprise, TeamCity, JFrog Artifactory and Xray, and Octopus Deploy, all integrated with ServiceNow change and vulnerability management. In a regulated banking environment, every build and deployment has to be secure, repeatable, traceable and auditable - and making that happen is your … Curation) Managing software supply-chain controls: approved repositories, open-source governance, package lifecycle, traceability and SBOM Integrating deployment automation with change and release management, including segregation of duties and audit evidence Working with Cyber Security, Risk and Control and development teams to onboard applications and remediate vulnerabilities Supporting platform ...