1 to 25 of 120 Permanent Vulnerability Scanning Jobs

tools that empower you to own your career.Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.The Threat and Vulnerability Management Team Lead is responsible for defining, developing, and leading the strategic direction for safeguarding the organisation’s infrastructure and applications. This is achieved … Management across EMEA Bank, International Securities, and the 15+ countries in which these entities operate. The position is responsible for leading the Threat and Vulnerability Management function, including oversight of an outsourced offshore third-party service.This function integrates secure practices into the development lifecycle and aligns with service transition ...

Cyber Security Engineering Lead. Key Responsibilities COTS Application Updates: Support the update process for Commercial Off-The-Shelf (COTS) applications, ensuring compatibility and security. Vulnerability Scanning: Conduct regular assessments of environments to identify vulnerabilities. Security Definition Updates: Manage and update security definitions across our platforms to protect against … emerging threats. Vulnerability Analysis: Analyse vulnerability assessment reports and implement necessary changes. Security Daily Checks: Perform thorough daily checks of security components to ensure operational integrity. System Health Checks: Conduct daily system health checks to ensure servers are functioning optimally. Capacity Checks & Reporting: Monitor and report on local ...

asking that you attend the office a minimum of 1 day per week. About the Role We are seeking a highly motivated and experienced Vulnerability Management Engineer to join our Cyber Security team. As a Vulnerability Management Engineer, your primary responsibility will be to manage vulnerability management … improving existing processes. You will achieve this by creating automated solutions through collaboration with technical teams across Starling. Responsibilities Design, build, and maintain robust vulnerability management tooling and technical solutions. Drive efficiency by implementing automated solutions that eliminate manual overhead and streamline operations. Partner with internal engineering teams ...

asking that you attend the office a minimum of 1 day per week. About the Role We are seeking a highly motivated and experienced Vulnerability Management Engineer to join our Cyber Security team. As a Vulnerability Management Engineer, your primary responsibility will be to manage vulnerability management … improving existing processes. You will achieve this by creating automated solutions through collaboration with technical teams across Starling. Responsibilities Design, build, and maintain robust vulnerability management tooling and technical solutions. Drive efficiency by implementing automated solutions that eliminate manual overhead and streamline operations. Partner with internal engineering teams ...

Role Title: Vulnerability Management Lead Duration: contract to run until 31/03/2027 Location: Inverness or Preston. Hybrid Rate: up to £644 p/d Umbrella inside IR35 Clearance required: Sole UK Nationality with Active SC Clearance. Role purpose/summary he Senior Vulnerability Management Consultant … operates within the Operational Integrator (OI) function and provides governance, leadership, assurance, and strategic oversight of vulnerability management across a complex multi-supplier environment. The role is responsible for ensuring suppliers manage vulnerabilities consistently, effectively, and in accordance with client policy, regulatory requirements, and risk appetite. Working across security ...

major cyber security programme. This is a hands-on engineering role where you'll play a key part in expanding and optimising enterprise vulnerability management across a large, complex technology estate. You'll work closely with Network, Infrastructure and Security teams to onboard assets, manage vulnerability scanning … technical challenges in enterprise environments. The Role Administer and optimise the enterprise Qualys platform. Onboard new assets and environments into Qualys. Configure and manage vulnerability scanning. Support remediation activities and vulnerability reporting. Work extensively within Fortinet FortiProxy and enterprise proxy environments. Troubleshoot scanning, connectivity and network issues. ...

with Next Ltd to connect them with exceptional professionals for this role. The Role Working in the Information Security team you will focus on Vulnerability and Threat Management across the Next technology estate, with a particular focus on our Warehouse environment and the technology utilised within it to help … emerging security threats and trends. You will be responsible for identifying, assessing, validating and communicating new vulnerabilities across the other technical teams, ensuring the vulnerability management process is followed. Where required you will work with other IT teams to provide guidance and recommend mitigation strategies for vulnerabilities. ...

passionate about cyber security and protecting critical digital services that make a real difference to people's lives? We are looking for a Cyber Vulnerability Manager to lead and develop our vulnerability management function, helping to identify, assess and reduce cyber risks across NHS Wales. In this highly … influential role, you will oversee vulnerability scanning, assessment and remediation activities, ensuring systems and applications remain secure against existing and emerging threats. Working with a wide range of stakeholders, you will provide expert advice, develop improvement initiatives and support the delivery of a strong cyber security culture across ...

requirements Administer and optimize Group Policy Objects (GPOs) across enterprise domains to enforce security policies, user configurations, and system settings Conduct comprehensive security and vulnerability scanning using industry-standard tools, and remediate identified vulnerabilities in accordance with compliance requirements Manage Windows Update deployment strategies, including WSUS administration, patch … Desktop deployment, management, and optimization Demonstrated proficiency in Group Policy creation, management, and troubleshooting across complex Active Directory environments Strong experience with security and vulnerability scanning tools (e.g., Nessus, Qualys, Rapid7) and remediation workflows Proven track record managing Windows Server Update Services (WSUS) or equivalent patch management solutions ...

code (Terraform and/or CloudFormation) for security services, guardrails, IAM, networking, and encryption. Integrate security into GitLab CI/CD pipelines — SAST, IaC scanning, secrets detection, dependency/container scanning, and policy-as-code gates. Assess the security posture of workloads before, during, and after migration; identify … least-privilege roles, policies, permission boundaries, federation AWS KMS & ACM – encryption key management and certificates AWS WAF & Shield – application and DDoS protection Amazon Inspector – vulnerability scanning for EC2/ECR/Lambda AWS CloudTrail – audit logging and monitoring AWS Organizations & Service Control Policies (SCPs) – multi-account guardrails ...

code (Terraform and/or CloudFormation) for security services, guardrails, IAM, networking, and encryption. Integrate security into GitLab CI/CD pipelines — SAST, IaC scanning, secrets detection, dependency/container scanning, and policy-as-code gates. Assess the security posture of workloads before, during, and after migration; identify … least-privilege roles, policies, permission boundaries, federation AWS KMS & ACM – encryption key management and certificates AWS WAF & Shield – application and DDoS protection Amazon Inspector – vulnerability scanning for EC2/ECR/Lambda AWS CloudTrail – audit logging and monitoring AWS Organizations & Service Control Policies (SCPs) – multi-account guardrails ...

code (Terraform and/or CloudFormation) for security services, guardrails, IAM, networking, and encryption. Integrate security into GitLab CI/CD pipelines — SAST, IaC scanning, secrets detection, dependency/container scanning, and policy-as-code gates. Assess the security posture of workloads before, during, and after migration; identify … least-privilege roles, policies, permission boundaries, federation AWS KMS & ACM – encryption key management and certificates AWS WAF & Shield – application and DDoS protection Amazon Inspector – vulnerability scanning for EC2/ECR/Lambda AWS CloudTrail – audit logging and monitoring AWS Organizations & Service Control Policies (SCPs) – multi-account guardrails ...

code (Terraform and/or CloudFormation) for security services, guardrails, IAM, networking, and encryption. Integrate security into GitLab CI/CD pipelines — SAST, IaC scanning, secrets detection, dependency/container scanning, and policy-as-code gates. Assess the security posture of workloads before, during, and after migration; identify … least-privilege roles, policies, permission boundaries, federation AWS KMS & ACM – encryption key management and certificates AWS WAF & Shield – application and DDoS protection Amazon Inspector – vulnerability scanning for EC2/ECR/Lambda AWS CloudTrail – audit logging and monitoring AWS Organizations & Service Control Policies (SCPs) – multi-account guardrails ...

code (Terraform and/or CloudFormation) for security services, guardrails, IAM, networking, and encryption. Integrate security into GitLab CI/CD pipelines — SAST, IaC scanning, secrets detection, dependency/container scanning, and policy-as-code gates. Assess the security posture of workloads before, during, and after migration; identify … least-privilege roles, policies, permission boundaries, federation AWS KMS & ACM – encryption key management and certificates AWS WAF & Shield – application and DDoS protection Amazon Inspector – vulnerability scanning for EC2/ECR/Lambda AWS CloudTrail – audit logging and monitoring AWS Organizations & Service Control Policies (SCPs) – multi-account guardrails ...

code (Terraform and/or CloudFormation) for security services, guardrails, IAM, networking, and encryption. Integrate security into GitLab CI/CD pipelines — SAST, IaC scanning, secrets detection, dependency/container scanning, and policy-as-code gates. Assess the security posture of workloads before, during, and after migration; identify … least-privilege roles, policies, permission boundaries, federation AWS KMS & ACM – encryption key management and certificates AWS WAF & Shield – application and DDoS protection Amazon Inspector – vulnerability scanning for EC2/ECR/Lambda AWS CloudTrail – audit logging and monitoring AWS Organizations & Service Control Policies (SCPs) – multi-account guardrails ...

Vulnerability Analyst 45,000 - 50,000 + bonus and extensive benefits Full Time/Permanent West Midlands/Hybrid - 1 day a week in the office ideally The Role and Company: I am looking for a driven Vulnerability Analyst to join a large nationally recognised brand head quartered … West Midlands. As a Vulnerability Analyst you will play a key role in proactively testing, assessing and challenging the resilience of technology and operational environments. The Vulnerability Analyst helps to deliver a comprehensive programme of security testing, including vulnerability scanning and security configuration reviews, ensuring weaknesses ...

Vulnerability Analyst £45,000 - £50,000 + bonus and extensive benefits Full Time/Permanent West Midlands/Hybrid - 1 day a week in the office ideally The Role and Company: I am looking for a driven Vulnerability Analyst to join a large nationally recognised brand head quartered … West Midlands. As a Vulnerability Analyst you will play a key role in proactively testing, assessing and challenging the resilience of technology and operational environments. The Vulnerability Analyst helps to deliver a comprehensive programme of security testing, including vulnerability scanning and security configuration reviews, ensuring weaknesses ...

monitoring team.Day-to-day, you’ll develop in a role where you will be monitoring platforms, infrastructures & applications, general infrastructure maintenance, cloud monitoring, patching & vulnerability scanning and user experience monitoring across an enterprise IT environment with a supportive team.Your responsibilities will include:Assisting with the setup and basic … cloud monitoring activities under supervisionUsing basic scripting to automate simple monitoring tasks and learning and applying automation techniques to improve efficiencyParticipating in patching and vulnerability scanning activities under supervision using tools such as Qualys, Nessus, or Microsoft Defender with guidance from senior analystsEssential experience of the Associate Monitoring ...

Cyber Essentials recertification process. Strong reporting skills with the ability to present effectively to C-Suite leaders Strong understanding of the end-to-end vulnerability-scanning lifecycle and the effective management of penetration testing activities. Excellent security awareness with a proactive approach to continuous improvement Eligible and willing … SaaS platforms, maintaining Conditional Access, MFA, PIM and Identity Protection Implement and maintain Microsoft Sentinel, Purview and the Defender suite Manage the vulnerability-scanning lifecycle and coordinate penetration-testing activities Maintain security and sharing controls across email, SharePoint, OneDrive and Teams, including DLP, sensitivity labels, encryption and removable ...

building secure CI/CD pipelines, integrating the latest security technologies and checks.Designing and building a range of security tooling, across endpoint protection, vulnerability scanning, network security, cloud security posture management, and security information event management (SIEM).Operating Secure by Design (SbD) procedures and producing required artefacts such … solution designs.Designing security controls and suggesting improvements on configurations of critical control such as WAF, firewalls, compliance monitoring, and alerting.Conducting risk assessments and scoping vulnerability assessments to identify potential security threats and vulnerabilities.Helping clients create security technology roadmaps, which provide realistic efforts estimates for engineering tasks.Staying up to date ...

building secure CI/CD pipelines, integrating the latest security technologies and checks.Designing and building a range of security tooling, across endpoint protection, vulnerability scanning, network security, cloud security posture management, and security information event management (SIEM).Operating Secure by Design (SbD) procedures and producing required artefacts such … solution designs.Designing security controls and suggesting improvements on configurations of critical control such as WAF, firewalls, compliance monitoring, and alerting.Conducting risk assessments and scoping vulnerability assessments to identify potential security threats and vulnerabilities.Helping clients create security technology roadmaps, which provide realistic efforts estimates for engineering tasks.Staying up to date ...

building secure CI/CD pipelines, integrating the latest security technologies and checks.Designing and building a range of security tooling, across endpoint protection, vulnerability scanning, network security, cloud security posture management, and security information event management (SIEM).Operating Secure by Design (SbD) procedures and producing required artefacts such … solution designs.Designing security controls and suggesting improvements on configurations of critical control such as WAF, firewalls, compliance monitoring, and alerting.Conducting risk assessments and scoping vulnerability assessments to identify potential security threats and vulnerabilities.Helping clients create security technology roadmaps, which provide realistic efforts estimates for engineering tasks.Staying up to date ...

building secure CI/CD pipelines, integrating the latest security technologies and checks.Designing and building a range of security tooling, across endpoint protection, vulnerability scanning, network security, cloud security posture management, and security information event management (SIEM).Operating Secure by Design (SbD) procedures and producing required artefacts such … solution designs.Designing security controls and suggesting improvements on configurations of critical control such as WAF, firewalls, compliance monitoring, and alerting.Conducting risk assessments and scoping vulnerability assessments to identify potential security threats and vulnerabilities.Helping clients create security technology roadmaps, which provide realistic efforts estimates for engineering tasks.Staying up to date ...

tools, services, and expertise, only Black Duck helps organizations maximize security and quality in DevSecOps and throughout the software development life cycle. The Senior Vulnerability Management Engineer owns the enterprise vulnerability management program across cloud, endpoint, and application surfaces, driving risk-based identification, prioritization, automated remediation, and verified … with IT, Cloud, and Product teams. Operating with minimal guidance, this role combines hands‐on technical engineering depth with program ownership—designing and implementing scanning architectures, automated patching workflows, and data pipelines alongside governing the policies, SLAs, and metrics that drive measurable risk reduction. The role leads others ...

detect, mitigate, and analyze threats. Works closely with other teams to develop controls such as firewalls, business systems, data leakage protection systems, patching, encryption, vulnerability scanning, application code scanning, remediation as well as defining configuration for a variety of security tools. Prior experience in an international enterprise … delivery is on-time, within budget, and adopted to meet the company's information protection requirements. Performs or coordinates internal security assessments, penetration tests, vulnerability scans, and assess organization cybersecurity maturity Complying with frameworks and regulations such as COBIT, NIST (800-53, cybersecurity), ISO, ITIL, PCI, GLBA, GDPR, HIPAA ...