1 to 25 of 27 Vulnerability Management Jobs in Central London

Month Contract Hybrid (2/3 days a week in Canary Wharf, London) We're looking for an experienced Vulnerability Management Lead with deep expertise in Microsoft Defender Vulnerability Management (TVM) to help shape and mature an enterprise vulnerability management capability within a well … established financial services organisation. This isn't a traditional vulnerability management role focused purely on remediation governance. Instead, you'll take ownership of the existing Microsoft Defender tooling, develop the vulnerability management strategy around it, enhance reporting for executive stakeholders, and help build a mature, data ...

Technical Vulnerability Management Engineer (Offensive Security/Penetration Testing) London (3 days onsite/2 days remote) Up-to 450 per day PAYE equivalent (Inside IR35) Initial 3 months with strong expectation of long-term extension To start ASAP About the role We're supporting … understand technical impact and exploitability. Assess the potential impact of vulnerabilities across enterprise infrastructure and systems. Identify affected assets using internal tooling and vulnerability data sources. Work closely with engineering and system owners to prioritise and coordinate remediation activities. Write Python, Bash or similar scripts to automate repetitive analysis ...

Technical Vulnerability Management Engineer (Offensive Security/Penetration Testing) London (3 days onsite/2 days remote) Up-to £450 per day PAYE equivalent (Inside IR35) Initial 3 months with strong expectation of long-term extension To start ASAP About the role We're supporting … understand technical impact and exploitability. Assess the potential impact of vulnerabilities across enterprise infrastructure and systems. Identify affected assets using internal tooling and vulnerability data sources. Work closely with engineering and system owners to prioritise and coordinate remediation activities. Write Python, Bash or similar scripts to automate repetitive analysis ...

Month Contract Hybrid (2/3 days a week in Canary Wharf, London) We're looking for an experienced Vulnerability Management Lead with deep expertise in Microsoft Defender Vulnerability Management (TVM) to help shape and mature an enterprise vulnerability management capability within a well ...

Security Transformation Programme. This role will be responsible for the successful delivery of complex cyber security initiatives across multiple technology domains, including Identity & Access Management (IAM), Security Operations, Cloud Security, Vulnerability Management, Data Protection, and Regulatory Compliance. The successful candidate will act as the bridge between technical … regulatory requirements. Manage dependencies across multiple technology and business teams. Drive project governance and reporting activities. Cyber Security Delivery Deliver initiatives across: Identity & Access Management (IAM) Privileged Access Management (PAM) Security Operations (SOC) SIEM Platforms Cloud Security Vulnerability Management Data Protection and DLP Security Monitoring ...

part in protecting British Land's information assets across both business technology and property technology. The primary focus is on the development, implementation, and management of British Land's information security governance, risk, and compliance programme — ensuring alignment with regulatory requirements, industry standards (e.g. Iso 27001, nist), and good … action plans. Conduct regular risk assessments and audits to ensure compliance with security policies and standards. Monitor and report on the status of risk management activities. Compliance Ensure compliance with relevant laws, regulations, and industry standards (e.g., GDPR, iso 27001). Coordinate and support internal and external audits ...

refinement and false positive tuning. Support the implementation and tuning of identity and access controls, including Conditional Access policies, break-glass procedures, privileged access management and identity hygiene remediation such as shared account rationalisation, credential rotation and dormant privileged account deactivation. Vulnerability Management and Remediation: Execute … experience of security engineering, security operations and tactical security remediation delivery in live enterprise environments. Strong hands-on experience with CrowdStrike Falcon, including console management, detection rule creation and tuning, host investigation and response actions. Experience operationalising SIEM, EDR/XDR and vulnerability management platforms (for example ...

development and implementation of a forward‐thinking cyber security strategy, ensuring systems, data, and services are protected through robust controls, governance, and risk management practices. Working closely with senior stakeholders, you will act as the organisation’s subject matter expert on cyber security, providing clear, actionable advice on risks … ensure alignment with wider technology strategy Drive continuous improvement through security assessments, testing, and reporting Ensure effective incident detection, response, and recovery capabilities Lead vulnerability management and remediation across all technology environments Oversee third‐party security testing, including penetration testing and phishing simulations Promote a strong cyber‐security ...

firewalls, EDR/XDR, SIEM, IAM/PAM platforms, DLP) Configure and harden cloud environments (AWS/Azure) in line with security baselines Support vulnerability management - scanning, patching coordination, remediation tracking Build and maintain detection rules, alerts, and automation (SOAR) in partnership with the SOC Support incident response … Azure) Scripting/automation ability (Python, PowerShell, or similar) Working knowledge of networking, IAM, and endpoint security Familiarity with SIEM/EDR tooling and vulnerability management platforms Desirable Security+, CySA+, or GIAC certifications (e.g. GCIH, GSEC) Cloud security certification (AWS Security Specialty/Azure Security Engineer) Exposure ...

Doing Security Leadership & Programme Ownership Define and execute the enterprise‐wide security strategy Own capabilities across PAM, SIEM, EDR/XDR, DLP, vulnerability management, identity governance Translate regulatory obligations ( FCA , PRA , ISO 27001 , Lloyd’s ) into practical, measurable controls Hands‐On Security Engineering Implement and optimise controls across … portfolio of insurance clients Deliver security reviews, maturity assessments, and improvement plans Act as a trusted advisor on risk, controls, and security architecture Vulnerability & Risk Management Own scanning, assessment, and remediation across platforms Partner with engineering teams to prioritise and reduce risk exposure Drive continuous improvement in security ...

stakeholders to help ensure that IT and cyber activities are aligned with regulatory expectations, internal policies and good practice. Key Responsibilities Compliance and Risk Management: Support compliance with applicable regulatory, IT, cyber and control frameworks, which may include DORA, ISO 27001, NIST CSF, SOX and Cyber Essentials. Support … evaluation and management of IT, cyber, compliance and security risks across systems, processes and operations. Monitor emerging technology, cyber and operational resilience risks to support proactive risk management and timely escalation. Assist in preparing for and supporting regulatory inspections and internal, external and third-party audits. Support ...

days in Office THE ROLE Own day-to-day Azure infrastructure operations for a leading alternative investments firm. You'll manage subscriptions, patch management, security posture, and identity infrastructure balancing operational efficiency with a security-first approach in a regulated environment. WHAT YOU'LL DO Administer Azure environment (compute … networking, storage, IAM) Manage patch and vulnerability remediation; maintain emergency CVE runbook Automate infrastructure using PowerShell/Terraform/Bicep Support cloud security posture management (Wiz, GitHub Advanced Security) Maintain AVD environment and session host management Configure Entra ID, conditional access, and identity governance Maintain and test ...

range of industries. Manage multiple client projects, ensuring high-quality delivery, commercial success and client satisfaction. Advise organisations on cyber security strategy, governance, risk management and compliance. Deliver security maturity assessments, gap analyses and cyber risk reviews. Develop practical security roadmaps and recommendations that help clients improve their security … technical deliverables. Facilitate workshops, executive briefings and stakeholder meetings, translating complex technical topics into clear business outcomes. Provide guidance on security architecture, cloud security, vulnerability management and supplier assurance. Contribute to cyber resilience initiatives, incident preparedness and risk reduction programmes. Support business development through client meetings, proposals, tender ...

technology decisions at an enterprise level, including cloud strategy and zero trust adoption Oversee penetration testing, DLP, and advanced threat detection programmes Own the vulnerability management programme Implement enterprise frameworks including IAM, SIEM, and data classification Anticipate emerging threats, leverage AI/ML for predictive security … threat and regulatory environment shifts Own execution of GRC strategy across the organisation; ensure frameworks are scalable and adaptable Own the Third Party Risk Management (TRPM) programme, including vendor assessments and ongoing oversight IT operations Define and own the IT Operations programme, setting strategy and standards for the function ...

overall Global Data Centers Office of Information Security (GDC-OIS) team. This role is critical in improving, developing and maintaining IT/OT vulnerability management programs and processes. This role performs and leads important tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security …/OT environments with required expertise in ICS and SCADA systems. Leads the administration and optimization of enterprise security platforms, overseeing lifecycle management including break-fix, patching, version upgrades, and integration with broader security ecosystems. Directs complex security incident response efforts across multiple vectorsendpoint protection, EDR, malware analysis, network ...

major incidents. Manage, operate, and tune key security platforms, including SIEM, EDR/XDR, Network Anomaly Detection (NAD), and cloud security technologies. Oversee vulnerability management and coordinate remediation efforts across global systems. Design and operate SOAR workflows to automate response playbooks and improve operational efficiency. Support the operational … management of Secure Email Gateways (SEG), Secure Web Gateways (SWG), Firewalls, and CASB. Monitor third-party vendor SLAs and participate in service performance reviews. Maintain accurate operational documentation, security playbooks, and incident reports. What We Are Looking For Essential Experience & Skills: 4–6 years of experience within cyber security ...

cloud PaaS provider (e.g. Azure or AWS) Strong working knowledge of information security standards and good practice (e.g. ISO 27001) Understanding of designing security management systems Experience with threat and vulnerability management systems Ability to assess security control designs and configurations for effectiveness in risk mitigation … collaborative, consultative approach with a genuine desire to help your team succeed Service delivery/project management experience; Agile and DevOps exposure is a plus Nice to have: A track record of building trusted relationships with security stakeholders Experience drafting, implementing and maintaining security processes Experience managing the delivery ...

incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical roadmaps with … gaps and align solutions/services to mitigate risk Strong communication and storytelling skills , adapting for technical and non-technical audiences Familiarity with service management practices (e.g. ITIL, ticketing systems) Relevant certifications (e.g. CISSP, CISM, Security+, cloud security ) – desirable Proactive, accountable, and customer-focused mindset with strong ownership ...

based on findings and stack specifics. Security Architecture and Design Advise on architecture choices for key product feature developments, including authorisation, secrets and key management, data protection, and zero-trust-aligned designs. Guide secure API and microservice patterns, including input validation, rate limiting, secure session handling, and token-based … healthcare. Assess risks from third‐party AI integrations, AI‐assisted development tooling, and agentic workflows, and implement appropriate mitigations. Security Operations and Threat Management Monitor, investigate, and respond to security alerts, incidents, and anomalous behaviour across Semble's environment. Develop and mature threat intelligence capabilities, including vulnerability management ...

administration of Mimecast email filtering system including email review and release. * Day-to-day administration of CyberArk identity and privileged access management tooling. * Microsoft Purview administration including DLP policy monitoring, sensitivity labels, Discovery Searches and compliance alerts. * Maintain and respond to security-related DDQs, keeping the security evidence library … success in the role. * Hands-on experience with Netskope - web filtering, CASB and cloud security and/or CyberArk - identity and privileged access management would be highly desirable skills. * Experience with Rapid7, InsightVM or InsightIDR for vulnerability management and SIEM would also be highly desirable. * Experience ...

closely with development teams to identify and remediate security vulnerabilities Develop monitoring, logging and compliance controls across cloud platforms Support security incident response and vulnerability remediation activities Promote DevSecOps best practices and contribute to a strong security culture Skills & Experience Commercial experience in a DevSecOps or Cloud Security Engineering … pipelines using Azure DevOps, GitHub Actions, GitLab CI or Jenkins Infrastructure as Code experience using Terraform, CloudFormation or similar Knowledge of container security, vulnerability management and secure coding practices Familiarity with security tooling such as Checkov, Trivy, SonarQube, Prisma Cloud, Wiz or Snyk Scripting experience using Python, Bash ...

governance Partnering with engineering, data and technology teams to embed effective security controls into products and platforms Driving improvements in security event monitoring, exposure management and alerting capabilities Conducting security reviews of new products, services and technology initiatives Building meaningful security metrics and reporting that support informed decision-making … security, governance, risk or compliance Experience building security controls and automated security solutions within modern cloud environments Knowledge of security technologies such as SIEM, vulnerability management, data protection, endpoint security or exposure management platforms Experience working with APIs, automation, scripting and infrastructure-as-code technologies Familiarity with ...

organisation's cyber security framework. Create and maintain security policies, standards and procedures. Monitor, investigate and respond to cyber security threats and incidents. Manage vulnerability management, patching and remediation activities. Ensure compliance with relevant security frameworks and data protection legislation. Manage identity and access management controls. Provide … security guidance for cloud services and technology projects. Lead cyber-related change management activities. Stay current with emerging threats, vulnerabilities and security technologies, making recommendations to strengthen the organisation's security posture. Minimum five years' experience in a Cyber Security or Information Security role. Experience working with Microsoft security ...

/or AWS environments. Experience creating and implementing security policies, standards and governance processes. Understanding of broader cyber security domains such as Security Architecture, Vulnerability Management, Security Operations or Identity & Access Management. [ Strong stakeholder engagement skills, with the ability to communicate cyber risks and recommendations to both technical ...

physical security policies and controls. Governance, Risk, and Compliance maintain said policies, ensure controls are operating effectively via assessment and attestation, and own the vulnerability management program to identify and correct any problems within. Responsibilities Security Metrics – Uses automated and manual processes to produce regular reports communicating … with Regulatory Compliance Experience in an exchange, trading facility, or financial services a plus Experience in Customer communication and Vendor evaluation Experience with senior management and board metrics generation and communication Advanced certifications (for example, the CISSP) Advanced technical writing and/or communication education and experience University degree ...