1 to 25 of 186 Permanent Vulnerability Management Jobs in London

asking that you attend the office a minimum of 1 day per week. About the Role We are seeking a highly motivated and experienced Vulnerability Management Engineer to join our Cyber Security team. As a Vulnerability Management Engineer, your primary responsibility will be to manage vulnerability management tooling, and have an active role in improving existing processes. You will achieve this by creating automated solutions through collaboration with technical teams across Starling. Responsibilities Design, build, and maintain robust vulnerability management tooling and technical solutions. Drive efficiency by implementing automated solutions that eliminate ...

Threat and Vulnerability Management Lead Barbican, London | Hybrid Working (One office day a week) | Technology | Fixed-Term Contract till end of 2026 | Full time Competitive Salary available, depending on experience 37.5 hours per week At Nuffield Health, our mission to build a healthier nation is powered by passionate … people who make a difference every day. We are seeking an experienced Threat and Vulnerability Management Lead to join our growing Cyber Security team and take ownership of our enterprise-wide Threat and Vulnerability Management function. This is an exciting opportunity to shape and mature ...

international defence programme. The new SOC will protect complex Microsoft Cloud and on-premises environments operating across multiple regions and classification levels. The Security Vulnerability Management Engineer will take a key role in designing, deploying and configuring the vulnerability management capability for the new SOC. This … position will focus on enterprise vulnerability management tooling, risk-based vulnerability assessment, integrations with wider SOC platforms and the development of effective workflows, reporting and operational processes. Whats on offer Salary: £72,000 £82,000 10% annual bonus Opportunity to help build a major ...

Join us to directly influence the future of technology at JPMorganChase. As a Senior Security Architect - SecOps and Vulnerability Management, you’ll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion for security and drive to make a real impact … dynamic environment designed for achievers. Help us build products that prioritize security from the start. Job Summary: As a Senior Security Architect - SecOps and Vulnerability Management in the Cybersecurity & Technology Controls team for International Consumer, you will proactively partner with technology and business colleagues to identify and address ...

Network Vulnerability Management Specialist Contract InsideIR35, 6 months, Hybrid London Overview We're looking for an experienced Network Vulnerability Management Specialist to lead the end-to-end vulnerability and compliance management lifecycle across enterprise network security platforms. The successful candidate will drive vulnerability remediation, improve compliance, increase automation and help strengthen the organisation's overall security posture. Key Responsibilities Lead vulnerability management across enterprise network infrastructure. Identify, assess, prioritise and coordinate remediation of security vulnerabilities. Ensure network platforms remain compliant with security standards and policies. Drive remediation activities across multiple ...

many areas of the wider Group to continually detect, respond and remediate application threats and weakness. Requirements Ability to lead the implementation and ongoing management of application security and vulnerability management capabilities, ensuring alignment with the NIST Cybersecurity Framework, internal policies, regulatory requirements, and industry best practice. … Team and penetration testing activities, including test planning, scheduling, execution oversight, and integration of findings into the wider security improvement programme. Experience of driving vulnerability management across applications and supporting infrastructure, ensuring vulnerabilities are identified, prioritised, remediated, tracked, and reported in line with risk appetite and agreed service ...

GitHub‐based CI/CD pipelines, AWS environments and infrastructure‐as‐code workflows. This includes improving SAST, software composition analysis, secret scanning, IaC scanning, vulnerability management and AWS misconfiguration management so that findings are actionable, low‐noise and owned by the right teams. … practical threat‐modelling sessions, review application and cloud designs, improve security playbooks, support vulnerability and misconfiguration remediation, and build automation that reduces toil. We’re looking for someone who has demonstrably improved security outcomes in real engineering environments, not just someone with theoretical knowledge of tools or frameworks. Depending ...

GitHub-based CI/CD pipelines, AWS environments and infrastructure-as-code workflows. This includes improving SAST, software composition analysis, secret scanning, IaC scanning, vulnerability management and AWS misconfiguration management so that findings are actionable, low-noise and owned by the right teams. … practical threat-modelling sessions, review application and cloud designs, improve security playbooks, support vulnerability and misconfiguration remediation, and build automation that reduces toil. We’re looking for someone who has demonstrably improved security outcomes in real engineering environments, not just someone with theoretical knowledge of tools or frameworks. Depending ...

improvement and drive remediation through to completion. You'll act as the technical authority for security assurance, providing oversight across identity and access management, vulnerability management, cloud security, endpoint protection, incident management, logging and monitoring, ensuring security controls are effective, measurable and continuously improving. This … Information Security, Security Assurance, IT Audit or Cyber Risk within a regulated finance environment You have a deep understanding of security control frameworks, risk management and governance You have experience managing internal and external security audits, client due diligence and regulatory assessments You have a good knowledge of cloud ...

Security Transformation Programme. This role will be responsible for the successful delivery of complex cyber security initiatives across multiple technology domains, including Identity & Access Management (IAM), Security Operations, Cloud Security, Vulnerability Management, Data Protection, and Regulatory Compliance. The successful candidate will act as the bridge between technical … regulatory requirements. Manage dependencies across multiple technology and business teams. Drive project governance and reporting activities. Cyber Security Delivery Deliver initiatives across: Identity & Access Management (IAM) Privileged Access Management (PAM) Security Operations (SOC) SIEM Platforms Cloud Security Vulnerability Management Data Protection and DLP Security Monitoring ...

Security Transformation Programme. This role will be responsible for the successful delivery of complex cyber security initiatives across multiple technology domains, including Identity & Access Management (IAM), Security Operations, Cloud Security, Vulnerability Management, Data Protection, and Regulatory Compliance. The successful candidate will act as the bridge between technical … regulatory requirements. Manage dependencies across multiple technology and business teams. Drive project governance and reporting activities. Cyber Security Delivery Deliver initiatives across: Identity & Access Management (IAM) Privileged Access Management (PAM) Security Operations (SOC) SIEM Platforms Cloud Security Vulnerability Management Data Protection and DLP Security Monitoring ...

protect critical business systems, data, and infrastructure. Leads security operations, threat detection, incident response, and cyber resilience initiatives while ensuring alignment with organisational risk management objectives. Key Responsibilities Lead and manage the Cyber Defence function, overseeing security operations, threat intelligence, vulnerability management, and incident response capabilities. Develop … programmes, identifying emerging risks and implementing proactive defensive measures. Lead cyber incident response activities, coordinating technical teams and business stakeholders during security events. Manage vulnerability assessment and remediation programmes across enterprise infrastructure and applications. Collaborate with technology, risk, compliance, and business teams to strengthen organisational cyber resilience. Provide strategic ...

Avanade is looking for an experienced Cloud Security & Vulnerability Management Architect to join our security practice. This is a client-facing role where you will be engaged in exciting, complex, and leading-edge projects. You will help clients improve their cloud security and exposure management maturity … presales and Architecture function supporting the development of proposals, solution options, and architecture inputs for enterprise clients, with a focus on cloud security, exposure management, and Microsoft Security-led transformation. This role will include partial delivery expectations for the year. Responsibilities Lead defined workstreams or small project teams within ...

shape, assure, and enable delivery of secure, cloud‐native services at scale. You will be comfortable helping Local Authorities identify, validate, prioritise and reduce vulnerability-related cyber exposure. This is a consultancy and remediation role: the consultant must connect vulnerability evidence to critical services and credible threats, coordinate … practical treatment and produce defensible evidence of closure. What you’ll do Key responsibilities Review and validate vulnerability scan results, penetration-test findings, vulnerability disclosures, exposed services, unsupported technology and configuration weaknesses. Assess CVE severity, exploitability, attack path, asset/service criticality, supplier dependency and evidence confidence ...

Cyber Security translates the IT and Cyber Security strategy into practical controls, measurable outcomes and clear reporting. This includes cyber governance, security operations, vulnerability management, incident readiness, third-party cyber risk, security awareness, policy ownership and cyber assurance across on-premises, cloud and supplier-hosted services. Responsibilities Cyber … priorities, regulatory expectations and risk appetite Security Operations & Threat Defence: Lead operational cyber defence across SIEM, endpoint protection, identity controls, email security, cloud security, vulnerability tooling and managed security service providers. Improve detection coverage, alert quality, escalation paths and response times Cyber Incident Response: Own cyber incident response playbooks ...

Since being founded in 2018, Copper has been building the standard for institutional digital asset infrastructure with a focus on custody, collateral management, and prime services. Led by Amar Kuchinad, Copper's Global CEO, the firm provides a comprehensive suite of custody, trading and settlement solutions that reduce counterparty … lead initiatives to protect Copper's systems, data, and digital assets. You will be responsible for enhancing our security capabilities across identity and access management, cloud platforms, endpoint security, vulnerability management, automation, and security monitoring, ensuring security controls remain effective, scalable, and aligned to business and regulatory ...

part in protecting British Land's information assets across both business technology and property technology. The primary focus is on the development, implementation, and management of British Land's information security governance, risk, and compliance programme — ensuring alignment with regulatory requirements, industry standards (e.g. Iso 27001, nist), and good … action plans. Conduct regular risk assessments and audits to ensure compliance with security policies and standards. Monitor and report on the status of risk management activities. Compliance Ensure compliance with relevant laws, regulations, and industry standards (e.g., GDPR, iso 27001). Coordinate and support internal and external audits ...

global investment banks. For more information, please visit www.cmgx.io The Role We are hiring a Senior Security Engineer to lead our security risk management and governance work. This is a senior individual‐contributor role for someone who thrives on owning large, ambiguous initiatives end‐to‐end and turning them … CISO, own cross‐program initiatives, and collaborate closely with senior leadership across the firm. The core of the role is hands‐on security risk management, threat modeling, security risk assessments, and security design and architecture reviews, paired with the governance and process work that scales the program. You will ...

ensure it is integrated into all CI/CD pipelines with minimal developer friction and calibrated thresholds to avoid noise. Establish and operate the vulnerability management lifecycle, including scanning orchestration, triage, prioritisation, SLA assignment, remediation tracking, and exception management. Chair the weekly Vulnerability Review Board, making prioritisation … product teams: threat model templates, security stories backlog, secure coding guides, and accessible tooling documentation. Produce security assurance reporting for the CISO, including vulnerability trends, SDLC integration metrics, champion programme health, and developer satisfaction with security. Collaborate with Security Architecture and Engineering on the “paved road” of secure defaults ...

Microsoft Azure cloud environments. As the Cyber Security Engineer, you will act as the technical cyber security subject matter expert, taking ownership of vulnerability remediation, threat response, security assessments, and the continuous improvement of security controls across a global estate. The role is ideal for someone with a strong … technical issues. Monitor, triage, and respond to threats through enterprise XDR platforms. Act as an escalation point for high-risk security events and incidents. Vulnerability Management: Lead the remediation of findings from penetration tests, vulnerability scans, and security assessments. Work closely with infrastructure, cloud, and regional ...

international technology and cyber security provider. This is far more than a traditional SOC role. You'll be involved in incident response, threat hunting, vulnerability management, detection engineering and proactive cyber defence activities across a modern Microsoft security environment. What You'll Be Doing Investigating and managing security … network environments Threat hunting and proactive security investigations Querying and analysing data using KQL within Microsoft Sentinel Working with Microsoft Defender XDR technologies Supporting vulnerability management and security posture improvements Detection engineering, alert tuning and security tooling optimisation Producing technical reports and recommendations Supporting governance and compliance requirements ...

intellectual property, regulated systems and corporate platforms. Own the cybersecurity risk register and act as IT Risk Champion within the company’s broader risk management framework, providing clear reporting, metrics and recommendations to IT leadership and senior stakeholders. Establish and maintain cybersecurity standards across Microsoft 365, Microsoft Entra … network, SaaS, collaboration, identity and cloud services. Lead the improvement of core security controls, including multi‐factor authentication, Conditional Access, privileged access, endpoint protection, vulnerability management, secure configuration, data loss prevention, encryption, logging and monitoring. Provide cybersecurity input into IT projects, infrastructure changes, new SaaS platforms, cloud services ...

reinsurance products. The Fidelis Partnership is one of the largest Managing General Underwriters globally and its operations also include outwards reinsurance, claims handling, exposure management and portfolio analytics. The Fidelis Partnership also sponsors and incubates specialist MGAs through its Pine Walk platform. The Fidelis Partnership is separately owned … managed from the ownership and management of Fidelis Insurance Group. Across product lines and geographies, we focus on three diversified pillars: reinsurance, specialty and bespoke solutions. We are truly diversified. Our long-standing partnerships with capital providers and quota share partners make us nimble. Our breadth of expertise ...

refinement and false positive tuning. Support the implementation and tuning of identity and access controls, including Conditional Access policies, break-glass procedures, privileged access management and identity hygiene remediation such as shared account rationalisation, credential rotation and dormant privileged account deactivation. Vulnerability Management and Remediation Execute … experience of security engineering, security operations and tactical security remediation delivery in live enterprise environments. Strong hands-on experience with CrowdStrike Falcon, including console management, detection rule creation and tuning, host investigation and response actions. Experience operationalising SIEM, EDR/XDR and vulnerability management platforms (for example ...

refinement and false positive tuning. Support the implementation and tuning of identity and access controls, including Conditional Access policies, break-glass procedures, privileged access management and identity hygiene remediation such as shared account rationalisation, credential rotation and dormant privileged account deactivation. Vulnerability Management and Remediation: Execute … experience of security engineering, security operations and tactical security remediation delivery in live enterprise environments. Strong hands-on experience with CrowdStrike Falcon, including console management, detection rule creation and tuning, host investigation and response actions. Experience operationalising SIEM, EDR/XDR and vulnerability management platforms (for example ...