17 of 17 Permanent Vulnerability Management Jobs in Farnborough

Cyber Threat Intelligence (CTI) Analyst with Vulnerability Assessment and Vulnerability Management Responsibility Location: Farnborough Clearance - SC to start, DV for role Everything we do is built on a commitment to do the right thing for our customers, our people and our community. Our mission and our values … Your role and responsibilities: This is a pivotal Cyber Threat Intelligence role within a 24x7x365 CSOC. You will deliver targeted, customer-relevant threats and vulnerability intelligence that enables timely defensive decisions and strengthens cyber resilience. You will convert customer, sector, adversary, and vulnerability intelligence into clear priorities ...

expectations and recognised standards (e.g., NIST, CIS benchmarks), and you will support teams by sharing knowledge and guiding good practice. Key functions/outputs Vulnerability Management, Reporting & Risk Prioritisation Endpoint, Identity & Cloud Security Engineering (AWS) Incident Response Leadership & Operational Security Secure Configuration, Hardening & Compliance Assurance Security Design Review … Change Impact Assessment & ST&V Stakeholder Engagement, Governance & Decision Support Documentation, Mentoring & Continuous Improvement Main Objectives Vulnerability Management, Reporting & Risk Prioritisation Perform regular vulnerability assessments and generate actionable reporting using approved toolsets (or equivalent). The process should focus on ensuring scanners and signatures are current, coverage ...

recognised standards (e.g., NIST, CIS benchmarks), and you will support teams by sharing knowledge and guiding good practice. Key functions/outputs: 1. Vulnerability Management, Reporting & Risk Prioritisation 2. Endpoint, Identity & Cloud Security Engineering (AWS) 3. Incident Response Leadership & Operational Security 4. Secure Configuration, Hardening & Compliance Assurance 5. … Security Design Review, Change Impact Assessment & ST&V 6. Stakeholder Engagement, Governance & Decision Support 7. Documentation, Mentoring & Continuous Improvement Main Objectives: Vulnerability Management, Reporting & Risk Prioritisation Perform regular vulnerability assessments and generate actionable reporting using approved toolsets (or equivalent). The process should focus on ensuring scanners ...

expectations and recognised standards (e.g., NIST, CIS benchmarks), and you will support teams by sharing knowledge and guiding good practice.Key functions/outputs:1. Vulnerability Management, Reporting & Risk Prioritisation2. Endpoint, Identity & Cloud Security Engineering (AWS)3. Incident Response Leadership & Operational Security4. Secure Configuration, Hardening & Compliance Assurance5. Security Design … Review, Change Impact Assessment & ST&V6. Stakeholder Engagement, Governance & Decision Support7. Documentation, Mentoring & Continuous ImprovementMain Objectives:Vulnerability Management, Reporting & Risk PrioritisationPerform regular vulnerability assessments and generate actionable reporting using approved toolsets (or equivalent). The process should focus on ensuring scanners and signatures are current, coverage ...

integrity, complex troubleshooting, performance optimisation and architectural improvements for mission-critical workloads. They design, validate and maintain secure OS baselines and oversee patching and vulnerability management to ensure stability, security, performance and audit readiness in regulated environments. They own major Linux incidents and root-cause analysis, advising … junior engineers to build capability and consistency. Bridging operations and engineering, they support lifecycle planning, platform modernisation and integration with automation, monitoring and configuration management tools. They partner with security and compliance teams to enforce enterprise hardening standards and maintain audit-ready documentation and evidence. The role demands deep ...

necessary to meet UK Government or contractual security obligations. Key Responsibilities Security Architecture: Lead the design and implementation of robust security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures. DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery … pipelines. Risk & Governance: Collaborate with accreditors, Risk Owners, and project leadership to navigate security case approvals and risk management frameworks. Technical Guidance: Provide hands-on direction to engineers on vulnerability remediation, secure coding standards, and incident response preparedness. Deep knowledge of secure networking, encryption standards, IAM, and zero ...

VMware vSphere and Microsoft Hyper-V across DXC-managed customer environments, maintaining performance, availability and security through OS patching, hardening, capacity monitoring, VM lifecycle management and incident resolution within agreed SLAs. Required experience spans design, implementation and day-to-day support of:Windows Server OS versions 2016–2025WSUS … pointsWorking within ITIL-aligned processes, the engineer implements approved changes, maintains accurate CMDB records and runbooks, validates backup and failover readiness, and supports vulnerability remediation. Complex or architectural issues are escalated to senior engineers with clear diagnostics and recommended next steps.Due to the nature of the work ...

remediation plans. Partner with engineering and product teams to embed Cyber Resilience Act (CRA) requirements into the product lifecycle, including secure-by-design principles, vulnerability management, SBOMs, and incident reporting processes. Drive implementation of cybersecurity and risk management controls, ensuring compliance with regulatory requirements related to governance … communicate compliance status to leadership. What You Will Need: 7+ years of experience in cybersecurity compliance, governance, risk & compliance (GRC), IT/cyber risk management, or a related regulatory compliance function. Strong knowledge of EU cybersecurity regulations, including NIS2 and the Cyber Resilience Act (CRA), or experience with frameworks ...

customer services by identifying, investigating and helping to contain cyber threats across a 24x7x365 multi-customer CSOC.The role converts security telemetry, threat intelligence and vulnerability information into timely, evidence-led decisions. Success is demonstrated through accurate alert disposition, complete incident records, decisive escalation, effective handovers and practical improvements … evidence-based rationale and escalate material risk without delay.• Create and maintain complete, accurate cyber security incident records in the relevant IT service management (ITSM) tool, ensuring that evidence, timestamps, affected assets, indicators, actions, ownership and escalation decisions support effective response, handover and audit.• Correlate logs and events across ...

evidence-based rationale and escalation material risk without delay. Create and maintain complete, accurate cyber security incident records in the relevant IT service management (ITSM) tool, ensuring that evidence, timestamps, affected assets, indicators, actions, ownership and escalation decisions support effective response, handover and audit. Correlate logs and events across … CSOC or comparable environment, or demonstrable transferable skills and the ability to develop rapidly. Working knowledge of Microsoft Sentinel, Microsoft Defender XDR, Microsoft Defender Vulnerability Management, Microsoft Azure and Amazon Web Services (AWS). Experience of proactive threat hunting and of using validated investigation outcomes to improve detection ...

across product , application , cloud , infrastructure, network , endpoint , and third-party environments. Working knowledge of EU cybersecurity regulatory requirements, particularly the incident and actively exploited vulnerability notification requirements of the EU Cyber Resilience Act. Strong understanding of threat and vulnerability analysis, digital forensics, evidence preservation, chain of custody … technologies such as SIEM, endpoint security, threat intelligence, and vulnerability management platforms. Ability to translate complex technical findings into clear incident assessments, escalation decisions, executive communications, and regulatory notifications. Strong leadership, stakeholder management, communication, and decision-making skills, with the ability to manage high-pressure incidents ...

detection by tuning alerts, analysing false positives and recommending monitoring use cases across endpoint, identity, email, network and cloud services. Strengthen resilience by supporting vulnerability management, security hardening, playbooks and automation across on-premises and cloud environments. Support European compliance by gathering evidence, maintaining records and contributing … risk assessments, audits and regulatory activities, including EASA Part-IS. Translate security into action by communicating findings, risks and recommendations clearly to technical teams, management and operational stakeholders. DUTIES & RESPONSIBILITIES Serve as the primary escalation point for incidents raised by our SOC requiring deeper investigation and analysis Recommend improvement ...

select security technologies, define integration patterns, and guide implementation teams through delivery. The role requires deep technical expertise across cloud security, identity and access management, boundary and perimeter security, secure platform architectures, and security tooling ecosystems. Key Responsibilities Design and deliver security architectures across cloud, on-premise, hybrid … HLDs, LLDs, architecture patterns and data-flow diagrams. Lead the refresh and evergreening of security technologies, including IAM, PAM, firewalls, EDR/XDR, SIEM, vulnerability management and cloud security. Evaluate new technologies through PoCs/PoVs and make clear, evidence-based recommendations. Design and review cloud, identity, network ...

self-service models. Security, Risk & Compliance Ensure secure-by-design principles are embedded in all platform architectures. Guide platform-level security controls, identity management, and compliance requirements. Oversee vulnerability management strategies and platform hardening approaches. Align platform design with regulatory and organisational compliance standards. What ...

cloud environments, applying recognised standards (NIST, CIS) and security as code practices. A DV clearance is required for this UK role. The role involves vulnerability management, incident response leadership and collaboration with engineering teams to maintain security postures and #J-18808-Ljbffr ...

services, and lead incident response efforts. You will apply recognised standards (NIST, CIS, STIG) and security frameworks, mentor colleagues, and drive continuous improvements in vulnerability management, configuration and governance across the #J-18808-Ljbffr ...

access controls and encryption. Ensure infrastructure compliance with security policy, ITAR regulations and industry standards. Work with security teams to implement infrastructure hardening and vulnerability management. Optimise infrastructure costs, energy efficiency and environmental impact. Support operational readiness, performance monitoring and incident response planning. Customer & Stakeholder Engagement Serve as technical ...