451 to 475 of 1,181 Permanent Vulnerability Management Jobs

client is a management and technology consultancy. Our Cyber Security Consultants play a critical role in supporting Defence, national security, government and critical national infrastructure organisations and protecting some of the UK's most sensitive and mission-critical systems. Working across complex Defence and MOD programmes, you will help … objectives. Desirable Experience supporting UK Defence, MOD, national security, government or critical national infrastructure organisations. Knowledge of Defence security policies, assurance approaches and risk management methodologies. Experience contributing to security assurance and accreditation activities for secure systems. Familiarity with classified or sensitive environments and associated security controls. Understanding ...

objectives. Desirable Experience supporting UK Defence, MOD, national security, government or critical national infrastructure organisations. Knowledge of Defence security policies, assurance approaches and risk management methodologies. Experience contributing to security assurance and accreditation activities for secure systems. Familiarity with classified or sensitive environments and associated security controls. Understanding … procurement and capability delivery programmes. Beneficial Knowledge Government and industry security frameworks such as HMG Security Policy Framework (SPF), ISO 27001 and NIST. Risk management methodologies and security assurance frameworks. Enterprise and security architecture approaches including TOGAF and SABSA. Cloud security and secure digital transformation programmes. Security operations, vulnerability ...

objectives. Desirable Experience supporting UK Defence, MOD, national security, government or critical national infrastructure organisations. Knowledge of Defence security policies, assurance approaches and risk management methodologies. Experience contributing to security assurance and accreditation activities for secure systems. Familiarity with classified or sensitive environments and associated security controls. Understanding … procurement and capability delivery programmes. Beneficial Knowledge Government and industry security frameworks such as HMG Security Policy Framework (SPF), ISO 27001 and NIST. Risk management methodologies and security assurance frameworks. Enterprise and security architecture approaches including TOGAF and SABSA. Cloud security and secure digital transformation programmes. Security operations, vulnerability ...

/CD & Software Delivery:** Build and maintain delivery pipelines using platforms such as Azure DevOps and GitHub Actions. Automate build, testing, security scanning, artefact management and deployment activities, and help teams move towards smaller, repeatable and lower-risk releases.**Containers & Cloud-Native Platforms:** Support containerised workloads using technologies such … Platform Engineering & Developer Experience:** Treat the internal platform as a product. Create self-service capabilities, reusable infrastructure modules, standard hosting patterns, secrets and configuration management, standard CI/CD pipelines and “golden paths” so development teams can consume cloud services without needing to become infrastructure experts.**Observability, Reliability & Operations ...

Govern security controls across the full stack: Kafka, .NET/C#, Vue.js, Kong API Gateway, Auth0, and Salesforce. Lead threat modelling, penetration testing, and vulnerability management programmes. Own identity and access management strategy, including Entra ID, Auth0, and partner federation. Drive security engineering best practices within product … Partner with the DPO on data governance and breach notification obligations. Manage third-party and supply chain security risk, including critical outsourcing oversight. Incident management & operations: Own the security incident response plan; lead major incident management for cyber events. Operate and improve security monitoring, SIEM, and alerting across ...

Oceania, and East Asia.. The group has over 150,000 employees, offering services including commercial banking, trust banking, securities, credit cards, consumer finance, asset management, and leasing. As one of the top financial groups globally with a vison to be the world's most trusted, we want to attract … more information - mufgemea.com. IT Security department covers cyber security strategy maintenance and tactical planning and operations to provide IT Security protection, governance, risk management and reporting. This includes promoting Head Office Information Security Standards and Procedures (ISSP) requirements and local security requirements. The department supports and monitors security solutions ...

through to resolution within the team’s operating model.Maintain internal IT services including LAN, wireless, VOIP and mobile telephony, and support IT procurement, supplier management and hardware refresh.Automation, Monitoring & Continuous ImprovementDevelop and maintain automation and scripts for repeatable operational tasks.Maintain effective monitoring, alerting and dashboards across metrics … effective use of modern tooling including AI-assisted development and automation.Security, Documentation & CollaborationOperate infrastructure with a security-first approach, applying access controls, hardening and vulnerability remediation in line with company policies.Support logging, monitoring and security tooling, and assist with investigation and remediation of security alerts.Plan and deliver changes ...

consistency of security delivery. Key Responsibilities: Cloud Security Engineering Build and maintain reusable cloud security guardrails for identity, logging, encryption, network segmentation, secrets management, storage, workloads, containers, serverless services, and data protection. Translate security architecture standards into deployable cloud patterns, reference implementations, templates, and engineering‐ready requirements. Partner with … related cloud security tooling. Develop policy‐as‐code and control‐as‐code mechanisms to prevent, detect, and report common cloud misconfigurations. Support cloud‐native vulnerability and misconfiguration remediation by providing prioritization logic, remediation guidance, and reusable fix patterns. Establish cloud security metrics and dashboards covering control adoption, misconfiguration trends ...

consistency of security delivery. Key Responsibilities: Cloud Security Engineering Build and maintain reusable cloud security guardrails for identity, logging, encryption, network segmentation, secrets management, storage, workloads, containers, serverless services, and data protection. Translate security architecture standards into deployable cloud patterns, reference implementations, templates, and engineering-ready requirements. Partner with … related cloud security tooling. Develop policy-as-code and control-as-code mechanisms to prevent, detect, and report common cloud misconfigurations. Support cloud-native vulnerability and misconfiguration remediation by providing prioritization logic, remediation guidance, and reusable fix patterns. Establish cloud security metrics and dashboards covering control adoption, misconfiguration trends ...

Configuring, maintaining and supporting security technologies across on-premises, cloud and SaaS environments. Supporting firewalls, VPNs, endpoint protection, email security, identity and access controls, vulnerability management and security monitoring platforms. Coordinating vulnerability assessments and working with system owners to track remediation through to completion or formal acceptance. … services and applications. You'll also bring: Practical knowledge of TCP/IP, firewalls, VPNs, DNS, DHCP, certificates and SSL/TLS. Experience with vulnerability scanning, secure configuration assessments and remediation tracking. An understanding of common attack techniques, security monitoring and incident response. Knowledge of the OWASP ...

improve the organisation’s security posture across cloud and technology environments. This role has a strong focus on platform security assessments, cloud security posture management (CSPM), and the use of security tools to detect misconfigurations, vulnerabilities, and control gaps. The successful candidate will work closely with engineering, infrastructure … secure-by-design practices. Key Responsibilities: Conduct security assessments of platforms, applications, and cloud environments to identify risks, misconfigurations, and control weaknesses. Use CSPM, vulnerability management, and related security tools to continuously monitor cloud and platform security posture. Review configurations across cloud services, infrastructure, identity, networking, containers ...

align technical initiatives with business goals. Security Oversight: Ensure compliance with security standards and frameworks (e.g., Microsoft best practice, CIS, NIST). Oversee vulnerability management in terms of patching and incident response. Work closely with SOC teams to remediate and maintain a secure client environment. Automation & Tooling: Design … development of team members. Set clear objectives and performance expectations for the team members. Promote a culture of innovation, accountability and continuous improvement. Escalations Management: Offer escalation support and guidance to team members and other employees. Resolve escalated IT support issues promptly and effectively. o Make sure that Service ...

technical documentation, operational procedures, and knowledge articles. Contribute to service improvements, platform optimisation, and operational best practices. Support platform maintenance activities, upgrades, patching, and vulnerability remediation. Required Skills & Experience Strong hands-on experience supporting enterprise network security environments. Solid understanding of: TCP/IP DNS DHCP NAT HTTP/… diagnose network and application connectivity issues using logs, monitoring tools, and packet captures. Experience working within ITIL-based Incident, Problem, Change, and Request Management processes. Strong communication and stakeholder management skills. Preferred Experience Palo Alto Firewalls and Panorama. Fortinet Firewalls, FortiManager, and FortiAnalyzer. Secure Access Service Edge (SASE ...

technical documentation, operational procedures, and knowledge articles. Contribute to service improvements, platform optimisation, and operational best practices. Support platform maintenance activities, upgrades, patching, and vulnerability remediation. Required Skills & Experience Strong hands-on experience supporting enterprise network security environments. Solid understanding of: TCP/IP DNS DHCP NAT HTTP/… diagnose network and application connectivity issues using logs, monitoring tools, and packet captures. Experience working within ITIL-based Incident, Problem, Change, and Request Management processes. Strong communication and stakeholder management skills. Preferred Experience Palo Alto Firewalls and Panorama. Fortinet Firewalls, FortiManager, and FortiAnalyzer. Secure Access Service Edge (SASE ...

EMEA) to join our growing team. Reporting to the Global Security Manager, you will be responsible for supporting and enhancing information security, compliance, risk management, and business resilience activities across our UK and European operations. This is an excellent opportunity for a security professional who enjoys balancing technical security … Checks. Conduct internal audits, control reviews, and risk assessments. Maintain and monitor the organisational risk register. Support business continuity and resilience planning activities. Coordinate vulnerability scanning, penetration testing, and remediation programmes. Assist with the investigation and resolution of information security incidents. Deliver security awareness initiatives, user training, and phishing ...

adopting robust development practices, including software design, verification, validation, traceability, cybersecurity, and risk management. Partner with Software, Systems, Quality, Regulatory, Scientific, and Product Management teams throughout the product lifecycle. Contribute technical expertise to product planning, technology roadmaps, and architectural governance activities. Champion secure-by-design principles and help ensure … modern engineering practices. Experience working within regulated software development environments, including quality, safety, and cybersecurity considerations. Experience contributing to software verification, validation, requirements management, traceability, risk management, and software lifecycle activities. Ability to influence technical direction across multidisciplinary organisations through expertise, collaboration, and leadership. Strong communication skills with ...

Cyber Security Lead (Entra ID, Defender, Purview, SIEM, SOC, Cyber Essentials Plus, ISO 27001, NIST, CISSP, Hands-On, 3rd Party Management) Permanent Home Based Charles Simon Associates are currently recruiting for a Technical Cyber Security Lead for one of our key clients, a fast-growing UK business with sites … here on. The successful candidate will be the internal technical lead for security. The official title is Manager, but this isn't a people management role. They will manage the outsourced SOC and SIEM providers, choose the security tools the business uses going forward, lead Cyber Essentials Plus ...

Cyber Security Lead (Entra ID, Defender, Purview, SIEM, SOC, Cyber Essentials Plus, ISO 27001, NIST, CISSP, Hands-On, 3rd Party Management) Permanent Home Based Charles Simon Associates are currently recruiting for a Technical Cyber Security Lead for one of our key clients, a fast-growing UK business with sites … here on. The successful candidate will be the internal technical lead for security. The official title is Manager, but this isn't a people management role. They will manage the outsourced SOC and SIEM providers, choose the security tools the business uses going forward, lead Cyber Essentials Plus ...

Develop and maintain technical roadmaps aligned with business goals, collaborating with leadership to prioritize initiatives Design, implement, and continuously improve automated provisioning and systems management pipelines (CI/CD for IT tooling, endpoint management) Research and evaluate new technologies, tools, and vendors; lead proof-of-concept efforts … Assist with or own high-complexity onboarding and offboarding workflows, ensuring security and access policies are followed Perform and improve maintenance activities: backups, patch management, license audits, and monitoring Create and improve IT documentation and internal knowledge bases Respond to critical incidents and drive root cause analysis and permanent ...

implement coordinated security strategies, policies, and procedures, while educating employees on best practices Provide intelligence services to JPMorgan Chase acquisitions, including drafting and disseminating vulnerability and intelligence reports. Liaise regularly with acquisitions to maintain lines of communication, understand and document their cybersecurity posture and unique challenges, identifying uplift opportunities … analysts on the team Required qualifications, capabilities, and skills Minimum 3 years of experience in cybersecurity operations, including threat detection, incident response, or vulnerability management Proven experience in network trace analysis, log analysis, vulnerability assessment, exploitation techniques, and security investigations in response to security incidents Proficiency ...

Days Home) Type: Full-time, Permanent Overview A leading financial technology organisation is looking to appoint an Information Security Officer to support the management and continuous improvement of information and cyber security across the business. This is a broad security role covering governance, risk, compliance, third party assurance … security who wants broad responsibility rather than specialising solely in one area. Key Responsibilities Support the development and continual improvement of the Information Security Management System Identify, assess, treat and report information security, cyber, technology and third party risks Conduct security risk assessments, control reviews and assurance activities Support ...

manage lessons learned and continuous improvement activities. Produce clear reporting on remediation progress, cyber risks, and compliance outcomes. Key Skills & Experience: Proven delivery management experience within cyber security, infrastructure, or technology programmes. Strong background in remediation, patching, vulnerability management, or cyber risk reduction initiatives. Excellent stakeholder management skills with the ability to coordinate across technical and operational teams. Experience with governance, RAID management, delivery reporting, and assurance activities. Good understanding of cyber security, risk management, audit, and compliance requirements. Strong planning, organisational, and communication skills. #J-18808-Ljbffr ...

strong focus on cybersecurity, IT infrastructure, or platform security initiatives. Security & IT Domain Expertise: Deep understanding of cybersecurity frameworks, enterprise IT delivery, threat management, DevSecOps practices, and security architecture principles. Governance, Risk & Compliance (GRC): Strong experience in risk management, financial forecasting, regulatory compliance, and security governance frameworks within … enterprise tech environments. Executive Stakeholder Management: Demonstrated ability to influence, present to, and align priorities with senior and executive leadership (e.g., CISO, CTO, Head of IT). Leadership & Coaching: Proven track record in leading, coaching, and mentoring delivery professionals, fostering skills growth in technical delivery and security operations. Delivery ...

security frameworks. Lead the end-to-end delivery of complex consultancy engagements across SOC/SIEM/SOAR, XDR/EDR, identity, cloud security, vulnerability management and related services, ensuring delivery to agreed scope, quality and timelines. Serve as a senior technical authority and escalation point for high … consultancy engagements within an MSSP or managed services environment, covering SOC design and deployment, SIEM/SOAR, XDR/EDR, identity, cloud security and vulnerability management. Proven capability designing and implementing enterprise security architectures across Microsoft and mixed-vendor environments, including SaaS platforms and hybrid cloud estates. Deep hands ...

mentorship to engineering teams as an embedded security subject matter expert, influencing design decisions and raising overall DevSecOps maturity across the organization Lead vulnerability management and remediation across application, pipeline, and cloud environments while participating in threat modeling and architecture reviews to ensure security is embedded … platforms such as Snyk, Checkmarx, Veracode, or equivalent security testing solutions Cloud security expertise with experience using cloud security platforms (CSPM, CNAPP), secrets management solutions such as HashiCorp Vault or cloud-native services, and zero trust or identity-centric security architectures Financial services or regulated industry experience with knowledge ...