1 to 25 of 90 Permanent Vulnerability Assessment Jobs

secure code reviews, static and dynamic application security testing, open source component analysis, API and mobile application security assessments, threat modeling, security architecture reviews, vulnerability validation, and remediation guidance. The ideal candidate has advanced software development and application security experience using Java, Python, JavaScript, .NET, Swift, or similar technologies. …/suggest remediation plans; and recommending application security training paths. This also includes responsibility for protecting applications in production by enrolling them for continuous assessment of existing and emerging threats, evaluating web application firewalls; tuning WAF rules; reviewing alerts; and identifying issues as appropriate. Essential Responsibilities: Completes work assignments ...

international defence programme. The new SOC will protect complex Microsoft Cloud and on-premises environments operating across multiple regions and classification levels. The Security Vulnerability Management Engineer will take a key role in designing, deploying and configuring the vulnerability management capability for the new SOC. This position will … focus on enterprise vulnerability management tooling, risk-based vulnerability assessment, integrations with wider SOC platforms and the development of effective workflows, reporting and operational processes. Whats on offer Salary: £72,000 £82,000 10% annual bonus Opportunity to help build a major new SOC and vulnerability ...

Cyber Security Engineering Lead. Key Responsibilities COTS Application Updates: Support the update process for Commercial Off-The-Shelf (COTS) applications, ensuring compatibility and security. Vulnerability Scanning: Conduct regular assessments of environments to identify vulnerabilities. Security Definition Updates: Manage and update security definitions across our platforms to protect against emerging … threats. Vulnerability Analysis: Analyse vulnerability assessment reports and implement necessary changes. Security Daily Checks: Perform thorough daily checks of security components to ensure operational integrity. System Health Checks: Conduct daily system health checks to ensure servers are functioning optimally. Capacity Checks & Reporting: Monitor and report on local ...

supporting systems. Provide security input into formal engineering design reviews, including SRR, PDR, CDR and equivalent programme governance gates. Conduct threat modelling and risk assessment activity across ship systems, platform services, navigation, propulsion, communications, IT, OT and associated support environments. Define and assure network zoning, segregation, trust boundaries, secure … acceptance criteria. Review and assess supplier security deliverables, including security claims, compliance evidence, technical designs, assurance artefacts and software bills of materials. Support the assessment of third‐party and supply chain security risks across products, systems, components and supporting services. Scope and support vulnerability assessment, penetration testing ...

supporting systems. Provide security input into formal engineering design reviews, including SRR, PDR, CDR and equivalent programme governance gates. Conduct threat modelling and risk assessment activity across ship systems, platform services, navigation, propulsion, communications, IT, OT and associated support environments. Define and assure network zoning, segregation, trust boundaries, secure … acceptance criteria. Review and assess supplier security deliverables, including security claims, compliance evidence, technical designs, assurance artefacts and software bills of materials. Support the assessment of third-party and supply chain security risks across products, systems, components and supporting services. Scope and support vulnerability assessment, penetration testing ...

seeking an experienced and motivated Cyber Security Lead – Vulnerability Management to join the Digital Risk & Security branch within Digital Delivery & Change. This role is responsible for leading the delivery and continuous improvement of Vulnerability Management services, helping to protect Social Security Scotland’s digital services, systems, and sensitive … within the Security Operations function, you will lead a small team of specialist security professionals and provide leadership and expertise across the organisation’s vulnerability and exposure management capabilities. Working closely with infrastructure, application, cloud, and security teams, you will drive the identification, assessment, prioritisation, and remediation ...

working with a well-established and highly regarded cyber security consultancy, known for delivering high-end penetration testing, vulnerability assessment and red teaming services to clients across critical sectors including telecoms, finance, defence, rail and aerospace. Their team has a strong track record of working on complex, high … sites. What you'll be doing: Planning and delivering penetration tests across networks, systems and applications, identifying vulnerabilities and security weaknesses Carrying out detailed vulnerability assessments, security audits and risk analysis, producing clear reports with practical remediation guidance Working alongside the red team to run realistic attack simulations ...

automate detection, response, and security operations processes. Conduct proactive threat hunting using SIEM/EDR data and MITRE ATT&CK‐aligned techniques. Support vulnerability assessment and security scanning activities using relevant tools. Provide input into penetration testing activities and interpret findings for remediation. Deliver training, coaching, and knowledge … experience with endpoint security and SIEM platforms in enterprise environments. Experience supporting or working alongside managed SOC providers. At least 2 years’ experience in vulnerability assessment tools (desirable). Exposure to penetration testing and web application security testing (desirable). Expert‐level experience with CrowdStrike Falcon (Prevent, Insight ...

with security, infrastructure, risk, and compliance teams, you'll deliver practical solutions that enhance both security posture and operational efficiency. Day to day : Analyse vulnerability assessment and penetration testing findings to identify security and infrastructure risks. Apply patches, upgrades, configuration changes, and other remediation activities to address vulnerabilities … progress, challenges, and outcomes. Monitor, track, and manage remediation activities to ensure timely completion and resolution. Maintain accurate documentation of remediation actions and update vulnerability management platforms and tracking tools. Produce reports and dashboards that demonstrate remediation effectiveness, risk reduction, and outstanding actions. Support cyber incident response activities ...

cloud, identity, endpoint and security operations capabilities.This is not a pure SOC role. The successful candidate will work across Microsoft cloud security, endpoint management, vulnerability management, infrastructure support and compliance activities, helping to strengthen the organisation's security posture while ensuring core services remain secure, reliable and well managed.This … activities.* Contribute to improvements in monitoring, alert handling, endpoint protection and security control effectiveness.* Maintain clear documentation for operational processes and security procedures.### ## Vulnerability Management* Support vulnerability scanning, triage, prioritisation and remediation tracking.* Work with infrastructure, application and business stakeholders to drive timely remediation of security weaknesses. ...

promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world.We are currently seeking a highly skilled vulnerability engineer to join our Vulnerability Management program. They will drive resolution of all identified IT vulnerabilities in a global enterprise to ensure the smooth … cultural and technical backgrounds in a global business environment.**Job Functions:*** Demonstrate ability to anticipate security issues, identify emerging risks, and take initiative in vulnerability remediation without constant supervision. A track record of proactively addressing vulnerabilities and improving security processes is essential.* Prioritize and classify vulnerabilities based on risk ...

resilient across the estate. This includes remote data centre and on-premise hardware management, security operations (SecOps) by liaison with the Threat and Vulnerability Management team, vulnerability assessment and remediation planning, and patch management governance through overseeing the scheduling and execution of patch management activities. ...

Vulnerability Analyst Walton Park | £53.8k - £64.6k per annum (dependent on skills and qualifications) Full-time | Hybrid Joint-contribution pension from 6% (12% total) – Enhanced maternity & family leave – Life assurance – HolidayPlus – Virtual GP & Employee Assistance Programme plus retail and leisure discounts & many more. REQ5914 We are looking for an experienced … Vulnerability Analyst to ensure that OT vulnerabilities are identified by cyber tools, assessments and audits are assessed, prioritized, and risk managed appropriately and in line with policies. You will also be responsible for providing relevant technical/nontechnical security and providing reports to the vulnerability manager. We deliver ...

this position will regularly exercise discretionary and substantial decision-making authority.RESPONSIBILITIESEssential Job Duties and ResponsibilitiesPerform as the recognized Subject Matter Expert on Security Risk Assessment methodology, policy, strategy and processes.Facilitate all security audit operations, including scheduling, vendor coordination, program, and stakeholder coordination.Responsible for coordination with the Internal/External … infrastructure security (Applications and APIs), Network security tools (IDS/IPS, firewalls, etc.), Encryption technology and implementation, Database security, Operating system security and hardening, vulnerability assessment tools and writing risk mitigation plans according to the assessment, and SIEM and FIM solutions.‎ Worker Type:Employee‎ We are committed ...

Responsibilities Monitor security alerts and investigate potential threats using SIEM tooling Support incident response activities, from initial triage through to resolution and reporting Conduct vulnerability assessments and coordinate remediation with technical teams Assist with security control reviews and audits against frameworks such as ISO 27001, NIST CSF, and Cyber ...

cyber security domains end-to-end and driving practical improvements to reduce cyber risk. The role combines analyst and engineering responsibilities across security tools, vulnerability and exposure management, web and email security, incident response, and threat-informed remediation. The role works closely with infrastructure, cloud, application, identity and business … deliver measurable improvements to the organisation cyber defence posture. Owned or materially contributed to one or more cyber security domains, such as endpoint security, vulnerability management, identity security, network security, incident response or Microsoft 365/Azure security. Used CrowdStrike or equivalent EDR tooling to investigate detections, support incident ...

security assessments, design security architectures, and help clients build security programs that meet regulatory requirements without creating operational friction. Responsibilities Lead penetration testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct incident response … Advise C-level executives on security strategy and risk management Requirements 8+ years in information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security (AWS Security Hub, Azure Defender ...

cyber security domains end-to-end and driving practical improvements to reduce cyber risk. The role combines analyst and engineering responsibilities across security tools, vulnerability and exposure management, web and email security, incident response, and threat-informed remediation. The role works closely with infrastructure, cloud, application, identity and business … deliver measurable improvements to the organisation cyber defence posture. Owned or materially contributed to one or more cyber security domains, such as endpoint security, vulnerability management, identity security, network security, incident response or Microsoft 365/Azure security. Used CrowdStrike or equivalent EDR tooling to investigate detections, support incident ...

Conduct compliance assessments across systems and processes to evaluate cyber and information assurance posture. Assess technical security controls across networks, systems, and infrastructure - including vulnerability management, security architecture reviews, and technical risk assessments - to inform wider assurance judgements. Develop, refine, or review security policies and procedures to align with … within Defence or UK Government environments. Strong understanding of risk management frameworks Working technical knowledge across areas such as network security, secure system architecture, vulnerability assessment/penetration testing concepts, and cloud or infrastructure security controls. Familiarity with government and defence security standards such as: HMG/NCSC ...

Conduct compliance assessments across systems and processes to evaluate cyber and information assurance posture. Assess technical security controls across networks, systems, and infrastructure - including vulnerability management, security architecture reviews, and technical risk assessments - to inform wider assurance judgements. Develop, refine, or review security policies and procedures to align with … within Defence or UK Government environments. Strong understanding of risk management frameworks Working technical knowledge across areas such as network security, secure system architecture, vulnerability assessment/penetration testing concepts, and cloud or infrastructure security controls. Familiarity with government and defence security standards such as: HMG/NCSC ...

Design approach Selecting, understanding and adapting/adopting appropriate security control frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security … authentication, least privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails ...

Design approach Selecting, understanding and adapting/adopting appropriate security control frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security … authentication, least privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails ...

frameworks including ISO 27001, NIST, CIS Controls, and Cyber Essentials/Cyber Essentials Plus Support clients with governance, risk, and compliance (GRC) initiatives Review vulnerability assessment and penetration testing findings, providing remediation guidance Advise clients on security strategy, governance, policies, and best practices Assist organisations in improving their … with SME and mid-market organisations Strong consultative approach with excellent problem-solving abilities Technical Knowledge Strong understanding of: Risk Assessments Security Maturity Reviews Vulnerability Management Governance, Risk & Compliance (GRC) Cyber Essentials & Cyber Essentials Plus ISO 27001 NIST Framework CIS Controls Cloud Security Security Improvement Programmes Penetration Testing Remediation ...

solutions aligned with MOD security requirements and defence standards Design boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant boundary configurations and security baselines Incident Management & Threat Response Lead boundary security incident detection, investigation and response Manage security alerts … architecture and boundary security design Proficiency in security incident investigation and threat analysis Knowledge of security event management, SIEM and log analysis Understanding of vulnerability assessment and remediation processes Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge of managed service delivery models and SLA management ...

solutions aligned with MOD security requirements and defence standards Design boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant boundary configurations and security baselines Incident Management & Threat Response Lead boundary security incident detection, investigation and response Manage security alerts … architecture and boundary security design Proficiency in security incident investigation and threat analysis Knowledge of security event management, SIEM and log analysis Understanding of vulnerability assessment and remediation processes Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge of managed service delivery models and SLA management ...