3 of 3 Permanent Vulnerability Scanning Jobs in the East of England

GitLab CI and TeamCity) that build, test, scan, package and release CRFS software across our embedded Linux, Windows desktop, web and firmware products. Security Scanning: Implement and operate automated security testing within those pipelines, including static analysis (SAST), dependency analysis (SCA), secret detection, dynamic testing (DAST), vulnerability scanning and SBOM generation, with quality gates and clear, consolidated reporting. Vulnerability Management: Triage scanner findings and newly published CVEs with the development teams, assess their real impact on our products, track remediation through to release, and support regular security patch releases. Compliance & Hardening: Help CRFS meet customer ...

Security & Compliance Enforce security-by-design principles, including identity access management (IAM) least-privilege policies, network security groups, and encryption-at-rest. Perform regular vulnerability scanning and manage automated patching cycles to maintain a secure cloud posture. Provide technical onboarding and standards guidance for partner teams. Cost Optimization ...

Infrastructure-as-Code (Terraform) and configuration management (Ansible) to make environment provisioning repeatable, auditable, and version-controlled. Define and enforce security baselines: patching cadence, vulnerability scanning, network hardening, audit logging. Partner with the application development lead to define clean interfaces between infrastructure concerns (deployment, secrets, networking) and application ...