1 to 25 of 38 Permanent Vulnerability Scanning Jobs in London

Vulnerability SME Location: London - Hybrid (3 days per week onsite) Rate: £300-345 per day - Inside IR35 Duration: 6 Months The Opportunity We are looking for an experienced Vulnerability SME to take ownership of end-to-end vulnerability remediation across a range of end-user computing environments. … activities, coordinating technical teams and ensuring vulnerabilities are resolved within agreed timescales. This is a hands-on coordination and stakeholder-facing role, requiring strong vulnerability management experience and the ability to track remediation through to successful closure. Key Responsibilities Own end-to-end vulnerability remediation across laptops, desktops ...

Robert Half are supporting a fast-paced global financial services organisation in the appointment of an experienced Vulnerability Analyst to join a growing security function on an initial 12-month day rate contract. This role will play a key part in identifying, assessing, prioritising, and coordinating the remediation … security vulnerabilities across a complex technology estate. You will act as the bridge between technical and non-technical stakeholders, translating vulnerability findings into actionable remediation plans and ensuring risks are effectively managed. Key Responsibilities: The Vulnerability Analyst will conduct threat and vulnerability assessments to identify security risks ...

automation opportunities, build out custom workflows, and develop utility tools to enhance productivity and efficiency across the organization. Building secure SDLC pipelines which perform Vulnerability scanning , ensuring an immutable artifact signed and testing evidence is validated. Working towards the long term aim of developing an Internal Developer Platform … emerging technologies in automation, CI/CD, DevOps, and DevSecOps Integrate services, tools, and components to enhance systems thinking Build secure SDLC pipelines with vulnerability scanning and artifact validation Collaborate with software development teams to identify automation opportunities Facilitate developer self-service through golden paths and custom solutions ...

with business goals and influencing engineering leadership to embed security into how we design, build and deploy products Establish and own the application security vulnerability management process, from triage and prioritisation through to remediation tracking, setting and reporting metrics such as mean time to remediate (MTTR) by severity … gateway controls and protection against abuse and automated attacks Implement, maintain and automate the security tools that support safe development and operations, from vulnerability scanning through to application security posture management (ASPM), and partner with engineering teams to fix vulnerabilities in ways that prevent them recurring Build secure ...

trying to get better in pretty much every way. And that’s where this job comes in. Most people never think about vulnerability management when it's working well. That's kind of the point. As innocent grows, so does the technology that helps us make, move and sell … drinks. We're looking for a Vulnerability Management Engineer to help us build the foundations that keep that technology secure, visible and well looked after. This is a hands-on contract role with a clear goal: implement Qualys across our technology estate and turn vulnerability management into ...

party SOC, monitoring and responding to security alerts using Microsoft Defender XDR and Microsoft Sentinel, and supporting incident triage, containment and root cause analysis. Vulnerability & Patch Management: Conduct regular vulnerability assessments, track remediation progress and support patch management across the estate. Compliance & Certification: Support Cyber Essentials (and Cyber … knowledge of M365 security technologies (Azure Information Protection, DLP, M365 Security Centre and Compliance Centre, retention policies). Understanding of core cyber security concepts: vulnerability management, phishing, endpoint protection and incident response. Experience with Cyber Essentials (and Cyber Essentials Plus), including implementing and recommending remediations to close identified gaps. ...

Senior/Security Operations & Vulnerability Management Consultant Salary: Competitive Location: UK Remote/Hybrid with quarterly client travel About the Role We are seeking an experienced Security Operations and Vulnerability Management Consultant to join a growing cyber consultancy team. This is a highly technical role requiring a hands … work closely with client Security Operations Centres and lead the delivery of critical security improvement programmes. You will act as the technical lead across vulnerability management and Identity and Access Management workstreams, providing subject matter expertise and ensuring the successful delivery of security initiatives. Working with stakeholders across security ...

Network+, or ITIL Foundation. Exposure to DevOps or automation tools (Terraform, Ansible, Jenkins) is a plus. Prior experience with cybersecurity basics (patching, endpoint protection, vulnerability scanning). Familiarity with GDPR/data‐privacy best practices. Demonstrated ability to coach, develop, and retain top technical talent. What We Offer ...

their team in London on a contract basis. The successful candidate will develop practical ServiceNow solutions that address security requirements, helping enterprise organizations strengthen vulnerability management, speed up remediation and build greater cyber resilience. Responsibilities Implement and configure ServiceNow Vulnerability Response and Security Incident Response, including VR groups … remediation rulesets and risk scoring informed by CMDB data. Connect vulnerability scanners, such as Tenable Nessus, and patching tools, including Tanium, Ansible and Microsoft Intune/MCM, with ServiceNow. Turn vulnerability management priorities into effective platform rules, automated workflows and clear remediation targets. Enable rapid patching of newly ...

integration of acquired businesses: identity and data migration, network consolidation and the controlled decommissioning of legacy platforms. Introduce tooling, infrastructure-as-code, automated topology scanning, runbook templates that makes documentation a by-product of engineering rather than an afterthought. Maintain a living infrastructure knowledge base, ensuring it remains accurate … access, and the integrity of the IAM boundary between on-premises and cloud. Own the cloud security posture: network segmentation, firewall governance, secrets management, vulnerability scanning and timely remediation within agreed SLAs. AI & DATA INFRASTRUCTURE PARTNERSHIP JTC’s AI programme is accelerating. You will be the primary infrastructure ...

using Terraform. Azure DevOps Pipelines and CI/CD implementation. Azure DevOps Repos/Git and branching strategies. Docker and Docker Compose. Security and vulnerability scanning using Trivy or similar. Bash and/or Python scripting and automation. Azure networking: VNets, NSGs, Private Endpoints and DNS. Monitoring ...

including managing drivers, credentials, and network access Experience with CI/CD pipelines (GitLab CI, Jenkins, GitHub Actions, or similar) Exposure to security tooling, vulnerability scanning, or compliance frameworks (e.g. CIS Benchmarks) Familiarity with secrets management tooling (Vault, CyberArk, or similar) Experience working in a regulated or enterprise ...

Least Privilege Access Controls. Threat Modelling. Prompt Injection Protection. Data Leakage Prevention. Secure Secrets Management. Operational Readiness Reviews. OWASP Security Standards. Container, Dependency and Vulnerability Scanning. Application Monitoring and Observability. Highly Desirable Public Sector experience. Central Government programme experience. Active SC Clearance. Agentic AI and Multi-Agent Systems. SharePoint ...

internet connectivity. Enforce Software Supply Chain Security: Implement cryptographic signing (e.g., Sigstore/Cosign, SLSA provenance), Software Bill of Materials (SBOM) generation, and automated vulnerability gating across all build pipelines. Automate Infrastructure-as-Code (IaC): Maintain release-side IaC and GitOps delivery frameworks (ArgoCD, Flux, Terraform) to ensure target … deployment environments (on-premise, edge, or air-gapped systems). Supply Chain Security Fluency: Solid understanding of build integrity concepts, artifact signing, provenance tracking, vulnerability scanning, and SBOM standards. CI/CD & GitOps Mastery: Proven experience designing enterprise pipelines (GitHub Actions, GitLab CI, Tekton, ArgoCD) with robust testing ...

vulnerabilities (CVEs), and threatactor tactics Requirements Required Skills Strongproficiency in penetration testing tools (e.g., Kali Linux, BurpSuite, Metasploit, Nmap, Wireshark) Experiencewith OWASP Top 10 , vulnerability scanning, and exploit development Familiaritywith MITRE ATT&CK framework and red team methodology Solidknowledge of TCP/IP, firewalls, DNS, HTTP/HTTPS ...

necessary. Recommend and drive process improvements to enhance the overall efficiency and effectiveness of both quality and experience managementOwn and govern the patch and vulnerability management lifecycle, including patch strategy, scheduled patching activities, testing, deployment, and minimising business disruptionAccountable for identification, assessment and prioritisation of security risks through vulnerability scanning, risk-based analysis, and validation of patch effectiveness across the IT estate. Maintain security compliance and best practice controls, ensuring timely remediation of vulnerabilities, robust security hygiene (access reviews, key rotation, assessments), and adherence to regulatory and organisational requirementsLead and govern the audit and compliance programme, including ...

Recommend and drive process improvements to enhance the overall efficiency and effectiveness of both quality and experience management Own and govern the patch and vulnerability management lifecycle, including patch strategy, scheduled patching activities, testing, deployment, and minimising business disruption Accountable for identification, assessment and prioritisation of security risks through … vulnerability scanning, risk-based analysis, and validation of patch effectiveness across the IT estate. Maintain security compliance and best practice controls, ensuring timely remediation of vulnerabilities, robust security hygiene (access reviews, key rotation, assessments), and adherence to regulatory and organisational requirements Lead and govern the audit and compliance ...

across our Kubernetes and cloud environments Help implement security guardrails and policy-as-code controls to enforce secure configuration at scale Assess and track vulnerability findings across Kubernetes clusters and workloads, providing context to help teams prioritise remediation Contribute to software supply chain security practices such as container image … scanning, trusted registries, and dependency analysis Embed security guardrails into infrastructure-as-code and automated delivery pipelines so that policy is applied consistently and is easy to audit Use enterprise-authorised AI coding assist tools to improve code quality, delivery speed, and productivity, validating outputs through peer review, automated ...

cloud infrastructure and software development.Implement automated security controls, guardrails and testing across pipelines.Secure Azure, Kubernetes, containers and Infrastructure-as-Code environments.Integrate SAST, DAST, SCA, vulnerability scanning and secrets management.Partner with developers and platform engineers to identify and remediate vulnerabilities.Develop DevSecOps standards, tooling and automation.Key RequirementsStrong experience in DevSecOps ...

engineering team. Integrated Security and Compliance: You will have transitioned the platform to a "security-first" architecture, successfully embedding automated AppSec controls and vulnerability scanning directly into the CI/CD pipelines. Cross-Departmental Influence: Your success will be reflected in your ability to influence stakeholders across engineering ...

ability to debug large and complex systems and solve large problems that affect a wide user base in a simple way. Experience with image vulnerability scanning and patching strategies for large systems. Experience/Familiarity with AWS Multi Accounts system designs tools like Crossplane and Control Tower. Familiarity ...

ability to debug large and complex systems and solve large problems that affect a wide user base in a simple way. Experience with image vulnerability scanning and patching strategies for large systems. Experience/Familiarity with AWS Multi Accounts system designs, tools like Crossplane and Control Tower. Familiarity ...

business operations Conduct security-focused code reviews, identify vulnerabilities, and work directly with engineers to implement fixes Perform hands-on penetration testing and vulnerability assessments across web applications, APIs, networks, and infrastructure Secure internal and external APIs through proper authentication, authorization, access controls, and credential management Own identity … testing, and security training Identify risks in everyday employee workflows and implement technical or procedural safeguards to reduce exposure Implement and maintain security monitoring, vulnerability scanning, threat detection, and incident response processes Build automated security checks into development workflows, including code scanning, dependency auditing, and CI/ ...

ThreatAware Protect, is agentless by design: it pulls data from the security and IT tools our customers already run (EDR, MDM, RMM, identity, and vulnerability scanners) and correlates it into a single source of truth. The result is straightforward: customers stop assuming their security controls are working and start … onboarding for new enterprise accounts: configure the ThreatAware Protect environment, connect and validate integrations across EDR, MDM, RMM, identity and vulnerability-scanning tools, set up Vitals thresholds and tagging logic, and orient stakeholders on the Dashboard, Device Explorer and Coverage Explorer. Identify coverage and integration gaps through estate ...

/CD management for program delivery, partner with engineering to define and maintain pipelines from code commit through build, test, security scanning, deployment, and post-deploy validation; ensure release automation, environment promotion controls, rollback procedures, and deployment metrics are in place. Uses enterprise-authorized AI capabilities within the work … SDLC/change management, and operational resilience expectations. Familiarity with CI/CD practices for data/platform delivery (policy-as-code, automated testing, vulnerability scanning, artifact management, environment promotion). Experience enabling analytics/ML ecosystems (e.g., curated datasets, feature pipelines) and partnering with data science/ ...