26 to 50 of 56 Contract Vulnerability Management Jobs

OWASP Top 10 and OWASP API Security Top 10. Knowledge of HTTP/S, REST APIs and application layer attack mitigation. Experience with vulnerability management, Qualys and attack surface monitoring tools. Understanding of patch management and vulnerability remediation. Strong stakeholder engagement and communication skills. Reasonable Adjustments ...

senior technical escalation point for complex and high-priority cyber security incidents, utilising Endpoint Detection and Response (EDR) and Security Information and Event Management (SIEM) technologies to support rapid investigation, containment, and remediation. Design, develop, and improve Security Orchestration, Automation and Response (SOAR) workflows to reduce manual effort, improve … response. Conduct proactive threat hunting activities using advanced search techniques and security telemetry to identify malicious activity that may have evaded automated detection. Support vulnerability assessment activities and contribute to security testing initiatives, including exposure to penetration testing and web application security assessments. Develop and maintain cyber security policies ...

senior technical escalation point for complex and high-priority cyber security incidents, utilising Endpoint Detection and Response (EDR) and Security Information and Event Management (SIEM) technologies to support rapid investigation, containment, and remediation. Design, develop, and improve Security Orchestration, Automation and Response (SOAR) workflows to reduce manual effort, improve … response. Conduct proactive threat hunting activities using advanced search techniques and security telemetry to identify malicious activity that may have evaded automated detection. Support vulnerability assessment activities and contribute to security testing initiatives, including exposure to penetration testing and web application security assessments. Develop and maintain cyber security policies ...

days in Office THE ROLE Own day-to-day Azure infrastructure operations for a leading alternative investments firm. You'll manage subscriptions, patch management, security posture, and identity infrastructure balancing operational efficiency with a security-first approach in a regulated environment. WHAT YOU'LL DO Administer Azure environment (compute … networking, storage, IAM) Manage patch and vulnerability remediation; maintain emergency CVE runbook Automate infrastructure using PowerShell/Terraform/Bicep Support cloud security posture management (Wiz, GitHub Advanced Security) Maintain AVD environment and session host management Configure Entra ID, conditional access, and identity governance Maintain and test ...

Work with technical and non-technical stakeholders to communicate cyber risks and security recommendations. Contribute to continuous improvement initiatives across security operations and threat management functions. Essential Skills & Experience Proven experience as a Security Operations Analyst, Cyber Security Analyst, SOC Analyst, or similar cybersecurity role. Strong understanding of cybersecurity … Experience Security Operations Centre (SOC) experience. Experience with SIEM platforms and security monitoring tools. Knowledge of cloud security and hybrid infrastructure environments. Exposure to vulnerability management and threat hunting activities. Experience supporting government, defence, or public sector programmes. Familiarity with security frameworks such as NIST ...

Engineer (Identity & Cloud) to support and enhance security across a Microsoft-focused technology environment. The role will have a particular focus on Identity & Access Management (IAM), Microsoft Entra ID, Privileged Identity Management (PIM), Azure, Microsoft 365 security and Power Platform governance. You will work closely with Cyber Security … securely. Key Responsibilities: Administer and maintain Microsoft Entra ID, including Conditional Access, Identity Protection and Access Governance. Implement, operate and continuously improve Privileged Identity Management (PIM) controls and privileged access reviews. Support the secure configuration and operation of Microsoft Azure and Microsoft 365. Implement and maintain Microsoft Defender security ...

Cloud Vulnerability Lead Rate - £600 - £650 Inside IR35 Duration - 6 months initial Location - London (3 days a week on site) We're looking for a Cloud Vulnerability Lead to own and mature our cloud vulnerability management and CSPM capability across AWS and GCP click apply ...

controls into CI/CD pipelines Develop secure Infrastructure as Code (Terraform, Bicep, ARM, Ansible) Design secure Azure, AWS and hybrid cloud environments Implement vulnerability management, security monitoring and automated compliance Support threat modelling, security architecture reviews and risk assessments Drive adoption of Secure Software Development Lifecycle (SSDLC … Code experience (Terraform, Bicep, ARM Templates or Ansible) Experience securing Kubernetes and containerised environments Knowledge of Zero Trust Architecture, IAM, RBAC and Privileged Access Management (PAM) Experience implementing SAST, DAST, SCA, container scanning and secrets management Strong scripting skills with PowerShell, Python or Bash Experience with SIEM, SOAR ...

Responsibilities Define and lead the CSOC strategy, operations, and governance. Take command of major incident response, managing remediation and stakeholder communication. Oversee threat intelligence, vulnerability management, and security monitoring capabilities. Manage relationships with external agencies, Managed Security Service Providers (MSSPs), and technology partners. What We Need From … Proven experience as a SOC Manager (previous leadership experience is essential; this is not an entry-level management role). Deep expertise in incident management processes and live crisis response. Strong background in managing third-party vendors (MSSPs). Strategic mindset to plan security investments, tooling, and resourcing. ...

Responsibilities Define and lead the CSOC strategy, operations, and governance. Take command of major incident response, managing remediation and stakeholder communication. Oversee threat intelligence, vulnerability management, and security monitoring capabilities. Manage relationships with external agencies, Managed Security Service Providers (MSSPs), and technology partners. What We Need From … Proven experience as a SOC Manager (previous leadership experience is essential; this is not an entry-level management role). Deep expertise in incident management processes and live crisis response. Strong background in managing third-party vendors (MSSPs). Strategic mindset to plan security investments, tooling, and resourcing. ...

pipeline design, integration of security scanning tools, and automation of security controls. Strong knowledge and understanding of service mesh, cryptography, network security, application security, vulnerability management, and risk management. Demonstrable ability to conduct threat modelling, platform security assessments, and gap analysis. Experience building and implementing maturity models, frameworks … roadmaps in complex enterprise environments. Strong stakeholder management skills, with the ability to influence senior leadership and drive change across federated technology teams. Excellent communication skills, with the ability to translate technical risk into business impact. Professional certifications such as CISSP, CISM, CCSK, CCSP, or equivalent. Hands-on knowledge ...

system performance, availability, and security posture across environments. Automate operational and security controls using Infrastructure as Code and CI/CD pipelines. Support incident management, root cause analysis, and continuous improvement activities. Collaborate with stakeholders to implement security controls and compliance requirements. Drive improvements in observability, monitoring, logging … alerting. Conduct vulnerability remediation and support security reviews and audits. Essential Skills & Experience Active SC Clearance (mandatory). Proven experience in an SRE, DevSecOps, Platform Security, or Security Engineering role. Strong understanding of cloud platforms (AWS, Azure, or GCP). Experience with Infrastructure as Code tools such as Terraform. ...

system performance, availability, and security posture across environments. Automate operational and security controls using Infrastructure as Code and CI/CD pipelines. Support incident management, root cause analysis, and continuous improvement activities. Collaborate with stakeholders to implement security controls and compliance requirements. Drive improvements in observability, monitoring, logging … alerting. Conduct vulnerability remediation and support security reviews and audits. Essential Skills & Experience Active SC Clearance (mandatory). Proven experience in an SRE, DevSecOps, Platform Security, or Security Engineering role. Strong understanding of cloud platforms (AWS, Azure, or GCP). Experience with Infrastructure as Code tools such as Terraform. ...

recommend improvements. Support the Infrastructure Team with threat and risk intelligence from the Managed SOC. Investigate and respond to security alerts and incidents. Support vulnerability management and security remediation activities. Assist with Microsoft Defender and Microsoft Sentinel security operations. Promote and enhance the organisation's cyber security culture. … programmes. Experience managing phishing simulation campaigns. Security awareness compliance reporting experience. Microsoft Defender Suite. Microsoft Sentinel. Security Operations (SOC). Incident Response. Threat Intelligence. Vulnerability Management. Excellent communication and stakeholder engagement skills. Desirable Experience ISO 27001. Cyber Essentials. Microsoft Intune. Security awareness programme development. Working with Managed Security Service ...

cases, analytics, and playbooks. Experience conducting security event triage and rapid incident response. Log analysis experience (Wireshark, NPCap, etc.). Experience with (ITSM) Service Management Systems (Remedy, Service Now). Strong understanding of information security principles, threat detection, and remediation processes. Knowledge of Microsoft and Linux technologies, networking, anti … virus, vulnerability management, and encryption. Familiarity with GDPR, Data Protection legislation, and security governance frameworks. Ability to think critically under pressure and respond effectively to fast-moving security incidents. Scripting or query experience is highly desirable (SPL, KQL, etc.). Good communication skills from previous roles. ...

/CD pipelines and DevSecOps processes. Review and analyse SAST, DAST and Software Composition Analysis (SCA) findings. Work closely with development teams to prioritise vulnerability remediation. Define security testing requirements and support penetration testing activities. Produce security standards, technical guidance and best practice documentation. Act as the Application Security … Architecture Risk Assessments DevSecOps CI/CD Security GitHub Actions GitLab Jenkins Azure DevOps Security Automation Shift Left Security Security Testing SAST DAST SCA Vulnerability Management Penetration Testing Cloud Security AWS, Azure or GCP Kubernetes Docker Container Security Cloud Security Best Practices Security Tooling Experience with ...

from policy-as-code and IaC guardrails (Terraform, OPA/Conftest) to custom scripts and integrations that scale good security practice across teams. Support vulnerability management by triaging findings from scanning and pentest engagements, prioritising by exploitability and impact, and applying mitigation and remediations. Support incident response readiness … specialty certifications, Experience with infrastructure-as-code (Terraform, CloudFormation, Pulumi) and policy-as-code enforcement (OPA, Sentinel, Checkov). Experience supporting penetration testing and vulnerability scanning, and working closely with teaming team members to mitigate or remediate findings. Working knowledge of container and Kubernetes security, image hardening, admission controls ...

them on a 6 month contract in Solihull. Key Skills: XDR, Cortex XDR, Illumio, Sentinel, Purview, Azure Responsibilities Implement and manage security controls, XDR, vulnerability management and PAM. Support threat hunting, security monitoring and incident response. Deliver cyber security projects and implement new security technologies. Support InfoSec compliance … risk management and security frameworks. Identify and respond to cyber threats and vulnerabilities. Experience Strong hands-on cyber security experience and knowledge of NIST, CIS and PCI-DSS. Experience with Cortex XDR, Illumio Core/CloudSecure and Microsoft Security. Knowledge of Defender, Azure AD, Purview and Sentinel. Experience with ...

platforms and automation capabilities. Drive the adoption of DevSecOps practices across the software delivery lifecycle. Implement and support security controls, governance processes, and access management solutions. Integrate security scanning, compliance validation, and vulnerability management into engineering workflows. Develop automation solutions that improve efficiency and reduce manual intervention. … understanding of DevSecOps principles and security-focused engineering practices. Experience working with modern cloud and infrastructure technologies. Knowledge of Infrastructure-as-Code and configuration management approaches. Experience operating within large, complex, and highly governed environments. Strong stakeholder management and cross-functional collaboration skills. Reasonable Adjustments: Respect and equality ...

structured, high-quality security requirements and designs. Broad technical knowledge across infrastructure, networks, systems, databases and applications. A strong understanding of identity and access management, cryptography, endpoint security, network security and application security. Knowledge of security logging and monitoring, vulnerability management and wider security operations. Excellent knowledge … technical stakeholders. Excellent written, presentation and communication skills. Highly Desirable It would be beneficial if you also have: Experience working within a complex release-management model as part of a technical delivery team. Familiarity with Agile delivery tools such as Jira and Confluence. Experience within gaming, gambling, iGaming ...

infrastructure technologies, including hardware platforms, hypervisors, Linux operating systems, system configuration tooling, critical infrastructure services, automation platforms, load balancing, high availability solutions, and virtualization management technologies. The team plays a key role in enabling DevOps practices by delivering real time APIs and automation capabilities that support infrastructure as code … join the Platform Engineering team. This role will focus on integrating, testing, securing, and improving multiple infrastructure codebases, with a particular emphasis on vulnerability remediation, code hardening, automated validation, and safe production rollouts. This is not a role focused solely on implementing predefined fixes. We are looking ...

major government programme, helping to improve the security, reliability, and resilience of critical platforms and services. Key Skills: Splunk Security Engineering Platform & Infrastructure Security Vulnerability Management Cloud & Enterprise Environments Security Architecture Principles Responsibilities: Enhance the security posture of business-critical systems. Identify and remediate security risks and vulnerabilities. ...

just project delivery Working knowledge of Entra ID, Intune, Defender and security best practice Experience securing cloud and infrastructure platforms: firewalls, WAF, network security, vulnerability management, Zero Trust Comfortable working hands-on and autonomously in a small team Nice to have: Business Central SaaS, Nessus Tenable, Azure DevOps ...

secure-by-design practices. IAM (RBAC/ABAC), privileged access concepts, and service-to-service authentication. Encryption in transit/at rest, key management, secrets management. Secure logging/telemetry, auditability, and evidence-driven control assurance. Secure SDLC, vulnerability management, and dependency/supply-chain risk controls. ...

segmentation and micro-segmentation strategies. Practical experience working with Cisco ACI , including security frameworks, policy enforcement, and network automation models. Strong track record in vulnerability management, remediation programmes, and coordinating security incidents and risk mitigation efforts across multiple teams. Experience operating within highly regulated industries, such as financial ...