1 to 25 of 49 Contract Vulnerability Management Jobs

Role Title: Vulnerability Management Consultant (x2 seats) Location: Inverness or Preston, 5 days onsite Duration: 23/04/2027 Rate - £475 - £525 (Inside IR35) About the role you're considering The Vulnerability Management Consultant operates within the Operational Integrator (OI) function in a multi-supplier … SIAM) environment, supporting the governance and coordination of vulnerability management activities across suppliers. The role assists in ensuring vulnerabilities are identified, tracked, prioritised, and reported in accordance with client policies and agreed remediation timelines. Working with suppliers, service teams and security stakeholders, the consultant provides visibility of vulnerability ...

Senior Vulnerability Management specialist/Cyber Security Analyst or Cyber Security Engineer £600-£650 per day Inside IR35 6 Months initally Remote (1-2 times onsite a month in central Southampton) My client is looking for an experienced Senior Vulnerability Analyst to join their Cyber Security team … active SC clearance will be prioritised. Key Responsibilities: Lead the identification, assessment and prioritisation of vulnerabilities across infrastructure, applications, endpoints and cloud environments. Analyse vulnerability scan results, distinguishing genuine risks from false positives and low-impact findings. Assess vulnerabilities using CVSS, exploitability, asset criticality, exposure and business impact. Monitor ...

enablement role, focused on ensuring new suppliers can successfully operate within an established security operating model. You'll work closely with security, service management, and transition teams to align suppliers to existing processes, controls, governance requirements, and operational standards. This role is ideal for someone with a strong background … security governance, GRC, supplier management, and security process integration. Key Responsibilities Supplier Onboarding & Process Integration Develop structured onboarding packs covering security processes, policies, governance requirements, and reporting obligations. Define supplier roles, responsibilities, and interaction models. Act as the central point for integrating suppliers into an established security framework. Ensure ...

experienced Security Architect and Subject Matter Expert (SME) is required to support the design, build, and assurance of Backend Platform and endpoint protection and vulnerability management capabilities within secure, offline (air-gapped) environments . The Architect must apply the NIST Cybersecurity Framework and MoD security policies … implementing security controls across the infrastructure and end-user endpoints. The role will provide specialist expertise in the delivery of Security controls, AntiVirus and Vulnerability Management platforms in support of a UK Government secure account . The successful candidate will operate within high-assurance environments , ensuring compliance with ...

looking for a Vulnerability Management Analyst to support the management of vulnerability exceptions and strengthen governance across a large enterprise environment. Inside of IR35, daily rate of £500 - £600 Hybrid to Havant 6 month contract Key responsibilities will include reviewing, challenging and approving vulnerability exception … active exceptions, tracking risk exposure, ageing, and business ownership while providing governance and reporting to support informed risk decisions. Key Requirements Strong understanding of vulnerability management, cyber risk, exposure assessment, and risk management principles. Experience assessing, prioritising, and managing vulnerability remediation activities. Ability to review ...

role in the operation, and continuous improvement of a critical Security Operations Centre (SOC) supporting MOD programme. You will be hands on responsible for Vulnerability Management, incident management, and SOC services meet agreed quality and assurance standards within a highly regulated environment. Key Responsibilities … escalation point for all security incidents Conduct Vulnerability Management and incident response activities Prepare report incidents and SOC performance metrics to SOC Leadership Work hands on with SIEM detection tooling and prepare reporting used for the use-case development Contribute to reporting and configuration changes, enhancements, and operational ...

hands-on technical security position. Key Responsibilities: Develop supplier onboarding packs covering security processes, policies, governance and reporting. Align incoming suppliers with established Incident Management, Vulnerability Management and Security Assurance processes. Define supplier roles, responsibilities and interaction models across the SIAM/OI environment. Identify and manage … gaps between supplier capabilities and existing security requirements. Support Security Management Plans, compliance reporting, audit and assurance activities. Support Operational Readiness Reviews (ORR) and Service Commencement activities. Produce clear, reusable security and service management documentation. Coordinate with incoming and incumbent suppliers, transition teams and client stakeholders. Support operational ...

operation and continuous improvement of EMBL-EBIs cybersecurity capabilities. Working alongside infrastructure, platform and service teams, you will be responsible for vulnerability management, incident response, security monitoring, operational security processes and the implementation of technical security controls. This is a hands-on technical role focused on protecting EMBL … EBIs IT environment while continually improving security operations through automation, process optimisation and collaboration across the organisation. Key Responsibilities Lead the EMBL-EBI vulnerability management programme, including identification, prioritisation, remediation tracking and reporting activities over all technology assets. Work with IT Operations, Infrastructure and Service Delivery teams ...

falls inside IR35 so you will be required to work through an umbrella company for the duration of the contract. Strong experience of Patch Management and Vulnerability Management are essential for this role. You will be responsible for overseeing the end-to-end patch management lifecycle … across infrastructure, endpoints, servers, and applications, ensuring compliance with security policies, regulatory requirements and organisational standards. You must have a strong understanding of Patch Management and Vulnerability Management processes with a broad understanding of infrastructure technologies and patching processes. You will have a broad technical understanding ...

suited to a security professional who can operate at both architectural and hands-on levels, with strong experience across endpoint protection, Antivirus/EDR, vulnerability management, platform security and secure environments. You will work closely with Infrastructure, Platform and Security teams, applying NIST Cybersecurity Framework principles … implementation of endpoint and platform security solutions. Design security controls aligned with MOD policies, NIST Cybersecurity Framework and NCSC guidance. Design and deliver vulnerability management capabilities, including scanning, risk prioritisation, remediation and reporting. Develop security solutions for offline and air-gapped environments, including controlled update, patch and signature ...

integration and enablement position focused on aligning suppliers to established security processes rather than redesigning them. You will work closely with Security Assurance, Incident Management and Vulnerability Management teams to ensure suppliers understand their obligations and can demonstrate readiness from day one. Key responsibilities Develop structured supplier … onboarding documentation. Identify and manage gaps between supplier capabilities, client expectations and existing SI/OI processes. Support supplier assessments relating to Security Management Plans, compliance reporting and assurance activities. Ensure suppliers understand audit expectations, governance requirements and evidence obligations. Coordinate onboarding across multiple service commencement dates and transition ...

Cyber Security Hashicorp Architect Identity & Access Management (IAM) Location: Manchester or Sheffield Type: Contract Day Rate: Inside IR35 Join a Major Cyber Security Transformation Programme Are you an experienced Design Engineer, Security Architect, or IAM Specialist looking to make a significant impact within a large-scale cyber security … identity transformation initiative? We are seeking a talented Cyber Security Architect to lead the design of enterprise Identity & Access Management (IAM) and Secrets Management solutions across a complex, highly regulated environment. This role offers the opportunity to influence strategic security direction, shape architecture standards, and deliver innovative solutions ...

ingestion, optimisation, data onboarding, and security analytics. Collaborate with SOC and Threat Intelligence teams to improve monitoring and response capabilities. Security Assessments & Risk Management Conduct security assessments, reviews, and audits to identify vulnerabilities and weaknesses. Assess risks and recommend appropriate mitigation strategies. Support vulnerability management and remediation … cloud, infrastructure, and application environments. Strong understanding of security architecture and secure design principles. Experience conducting security assessments, audits, and risk reviews. Knowledge of vulnerability management and remediation processes. Excellent analytical and problem-solving capabilities. Ability to work independently and provide technical leadership. Active SC Clearance. Technical Experience ...

wider technology environments. This is a hands-on role combining penetration testing expertise with the coordination and oversight of testing engagements, third-party suppliers, vulnerability remediation and security findings. You will be responsible for ensuring tests are appropriately scoped, executed to a high standard, and that resulting vulnerabilities … Work closely with engineering, DevOps, product and delivery teams to prioritise and drive vulnerabilities through to resolution within agreed SLAs. Own the tracking and management of penetration testing findings in Jira, ensuring actions are assigned, monitored and closed. Lead regular remediation discussions with internal stakeholders and third parties, escalating ...

Network) and support cloud, containerized, and On-Premises VM environments. Network & Security Configuration: Design network security devices, routers, switches, VLANs, DNS, and identity management capabilities. Deployment & Testing: Oversee implementation activities, ensure entry/exit criteria are met, and develop test procedures for functional and non-functional requirements. Documentation & Governance … deployment for previous clients. Strong hands-on experience designing, building, and operating SOC technology, including at least two of: SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence . Proven delivery record in SIEM onboarding and configuring applications for high data-ingest rates (Cloud and/or On-Prem ...

senior stakeholders and government systems. Technical & Architectural Competencies SOC Technologies: Design, build, and deployment experience using at least two core technologies: SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence. Architectural Frameworks: Familiarity with architectural frameworks (e.g., TOGAF, Zachmann) and system modeling. Environments: Proficiency in both On-Premises … Cloud security architectures, designing scalable, resilient systems. Cyber Fundamentals: Strong grasp of common threats, mitigation techniques, risk assessment, vulnerability management, and enterprise ICT services. ...

deployment, or security infrastructure. Proven experience designing, building, and deploying SOC solutions for previous clients. Experience with at least two of SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence. Strong experience deploying and configuring applications in cloud and/or on-premises environments, particularly for high data ingest … VLANs. Experience with compute, storage, OS administration, secure system hardening, endpoint security, and Active Directory/LDAP. Knowledge of cyber threats, risk assessment, vulnerability management, and security best practices. Good understanding of enterprise ICT services, Security Operations processes, and threat intelligence, threat actors, and TTPs. Current ...

libraries and templates that all three teams can reuse. Review code, infrastructure-as-code and configuration changes for security issues. Handle day-to-day vulnerability management, including pen test findings: prioritise what's genuinely exploitable, track fixes and check they've worked. Help run threat modelling sessions … IriusRisk and turn the results into backlog tickets. Look after secrets management, certificates and access reviews and keep security documentation, control evidence and CAB records up to date. Be the go-to person when security is blocking a delivery team, cover for the senior engineers when priorities shift ...

Principal Preferred Requirements Cybersecurity Expertise: Significant experience and proven technical depth within one of the following domains of cybersecurity; security operations & incident response, threat & vulnerability management, identity & access management, cryptography, infrastructure, network, application, data, cloud Broad background across information technology with the ability to communicate clearly with … security technical SMEs at a comfortable level Excellent command of cybersecurity organisation practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies Keen understanding of national and international laws, regulations, policies and ethics related to financial industry cybersecurity Experience and understanding of both ...

Control Coordinator, you will act as the central hub for overseeing and coordinating Project HELM activities. Your role will involve extensive stakeholder engagement, risk management, and planning to ensure that significant technology initiatives are executed with minimal impact on production stability. Key Responsibilities: Coordinate Project HELM activities across … MAPS Lines of Business. Facilitate application readiness reviews and impact assessments. Maintain visibility of significant migrations, vulnerability remediation, and infrastructure patching activities. Represent MAPS in programme and governance forums, ensuring stakeholder alignment. Identify and escalate risks, dependencies, and scheduling concerns. Support maintenance window planning and governance activities. Produce executive ...

exciting opportunity for an ambitious cyber security professional looking to progress into Security Architecture while gaining hands-on experience across secure software delivery, risk management, security assurance, governance, and Defence accreditation activities. Working within a Through Life Support (TLS) environment, you will be responsible for maintaining the security posture … teams. Ensure products maintain a live security case supported by appropriate assurance evidence. Promote security best practices throughout the software development lifecycle. Security Risk Management Conduct and maintain security risk assessments using recognised risk management methodologies. Manage product-level security risk registers and track remediation activities. Assess vulnerabilities ...

Application Firewall (WAF), API Security and bot protection capabilities. Strong hands on experience with Web Application Firewalls (WAF), including policy design, rule tuning, exception management and application onboarding. Good understanding of OWASP Top 10 and OWASP API Security Top 10. Knowledge of HTTP/S, REST APIs and application … layer attack mitigation. Experience with vulnerability management, Qualys and attack surface monitoring tools. Understanding of patch management and vulnerability remediation. Strong stakeholder engagement and communication skills. Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community ...

Analytics (CSA) is a ~$50m and ~150 headcount function, bringing together expertise across cybersecurity, data science, AI, software and cloud engineering, governance, and programme management to: Deliver cyber analytics capabilities that measurably improve cyber prevention, control effectiveness, and the resilience of operations across the cyber lifecycle Engineer, automate … secure-by-design practices IAM (RBAC/ABAC), privileged access concepts, and service-to-service authentication Encryption in transit/at rest, key management, secrets management Secure logging/telemetry, auditability, and evidence-driven control assurance Secure SDLC, vulnerability management, and dependency/supply-chain risk ...

grade or similarly secure environments such as defence. Hybrid London based Service Owner - Service Experience Proven experience as a Service Owner, Head of Service Management, Service Delivery Manager or equivalent senior role.Lead end-to-end service management, service desk, portals, self-service, NOC/APM monitoring and continual … improvement. implementing service automation, self-service platforms, service catalogues or knowledge management services SIAM and multi-supplier environments. NOC, APM, automation, self-service, service catalogue or knowledge-management implementation. GDS Service Standard and government service management experience. ITIL 4 Managing Professional, Strategic Leader or equivalent. Service Owner ...

Architecture Experience Experience in a Solution Architect role delivering projects and technical solutions Experience with enterprise strategies covering capacity planning, performance optimisation, data lifecycle management, tiering and storage governance. Experience operating within mature architecture governance functions. Experience working within global and highly regulated organisations. Financial Services experience is desirable … essential. Technical Expertise Technical expertise in Nutanix technologies including AHV, Prism Central, lifecycle management, automation, resilience and disaster recovery. Technical expertise in Dell enterprise storage platforms, including PowerStore, PowerScale, PowerMax, ECS and associated storage networking technologies. Strong knowledge of enterprise compute platforms including x86 server infrastructure, hyperconverged infrastructure, virtualisation ...