10 of 10 Permanent Vulnerability Management Jobs in Cambridgeshire

security function during a critical growth phase. This is a hands‐on leadership role requiring a pragmatic security professional who can balance risk management, regulatory compliance, technology innovation, and business enablement. You will work closely with senior leadership to develop and execute a group-wide security strategy whilst ensuring … maintain a robust security framework incorporating industry best practices and a defence-in-depth approach. Drive organisation-wide security awareness, training, and human risk management initiatives. Lead identity and access management, endpoint security, and device governance programmes. Oversee application security, secure software development practices, vulnerability management ...

software development processes, helping the organisation meet the requirements of the European Union Cyber Resilience Act (CRA). This includes strengthening security-by-design, vulnerability management, software assurance, and the engineering evidence needed to demonstrate effective security controls. The role requires close collaboration with software engineering, product security … quality, reliability, and security. The following skills and attributes are a plus: Experience applying secure software development lifecycle practices, including threat modelling, secure design, vulnerability management, and release governance. Experience with vulnerability disclosure, severity assessment, remediation planning, and security updates. Experience leading technical initiatives and influencing teams ...

products. Security Scanning: Implement and operate automated security testing within those pipelines, including static analysis (SAST), dependency analysis (SCA), secret detection, dynamic testing (DAST), vulnerability scanning and SBOM generation, with quality gates and clear, consolidated reporting. Vulnerability Management: Triage scanner findings and newly published CVEs with … Security: Protect the integrity of what we ship through dependency pinning and vetting, trusted internal mirrors, artifact and release signing, access reviews, and careful management of secrets, keys and tokens. Code Review: Review pipeline, infrastructure and application changes written by other engineers, providing constructive feedback and ensuring alignment with ...

response, from initial investigation through to containment and recovery. Helping review phishing reports, unusual account activity and potential security issues. Supporting the review of vulnerability scan results and following up on fixes with technical teams. Keeping accurate incident records and helping produce clear reports on findings and recommended actions. … This is an excellent opportunity to launch your career in cyber security. You'll receive hands-on training across threat detection, incident response and vulnerability management, with support to develop your skills and work towards industry certifications, all while contributing to meaningful security work. Interested? Apply with your ...

teams to strengthen our security posture while enabling innovation and operational excellence What you'll be doing: Lead and manage our third‐party risk management (TPRM) programme, ensuring suppliers and partners meet security requirements. Drive governance, risk and compliance (GRC) activities, helping the business identify, assess and mitigate information … risks. Own and deliver security improvement projects that strengthen our overall security posture across global operations. Act as the primary lead for security incident management, coordinating responses and driving lessons learned activities. Collaborate with business and technology stakeholders to assess compliance against security controls and identify remediation priorities. Develop ...

with internal security policies and ISO 27001 certification requirements. Monitoring security tooling and supporting investigation or escalation of security events where required. Assisting with vulnerability assessments, penetration testing activities and technical security reviews. The invaluable experience you'll bring to help us achieve more Essential Minimum of 3 years … conduct robust reviews of technical and documentary evidence, translating findings into clear, defensible assessment reports. Working knowledge of: IT infrastructure Networking Security technologies Vulnerability management concepts Current ISO 27001 Lead Auditor qualification or ability to achieve this certification within one year of employment Commitment to maintaining and developing ...

with internal security policies and ISO 27001 certification requirements. Monitoring security tooling and supporting investigation or escalation of security events where required. Assisting with vulnerability assessments, penetration testing activities and technical security reviews. Identifying opportunities to improve assurance processes, procedures and service delivery. Maintaining awareness of emerging threats, industry … conduct robust reviews of technical and documentary evidence, translating findings into clear, defensible assessment reports. Working knowledge of: IT infrastructure Networking Security technologies Vulnerability management concepts Current ISO 27001 Lead Auditor qualification or ability to achieve this certification within one year of employment Commitment to maintaining and developing ...

essential: Semiconductor IP, GPU architecture, graphics technologies, RTL/VLSI design or hardware/software integration. Software development, verification, defect and vulnerability management, or cybersecurity. Engineering standards, quality management systems, Functional Safety or Automotive Quality. Quality metrics, data analytics, AI or automation tools. You don't need ...

software engineering, product security or software security. Experience securing software within physical products, connected devices or embedded systems. Knowledge of secure architecture, threat modelling, vulnerability management and secure development practices. Experience establishing security standards and working with engineering teams to implement them. Familiarity with Embedded Linux, Android ...

security best practices across IAM, encryption, and workload isolation. Align projects with relevant industry standards (e.g., ISO/SAE 21434, IEC 62443). Risk Management Lead product TARA activities and maintain risk tracking through the security case and register. Secure Development & DevSecOps Integrate security into CI/CD pipelines … track record in secure architecture design, threat modelling, and risk assessment across multi-domain products. Hands-on experience with secure boot, TPM, cryptographic key management, and secure OTA updates, security on the cloud Familiarity with DevSecOps pipelines, CI/CD security tooling, and vulnerability management. Hands-on experience ...