1 to 25 of 30 Remote/Hybrid Vulnerability Assessment Jobs in England

international defence programme. The new SOC will protect complex Microsoft Cloud and on-premises environments operating across multiple regions and classification levels. The Security Vulnerability Management Engineer will take a key role in designing, deploying and configuring the vulnerability management capability for the new SOC. This position will … focus on enterprise vulnerability management tooling, risk-based vulnerability assessment, integrations with wider SOC platforms and the development of effective workflows, reporting and operational processes. Whats on offer Salary: £72,000 £82,000 10% annual bonus Opportunity to help build a major new SOC and vulnerability ...

Cyber Security Engineering Lead. Key Responsibilities COTS Application Updates: Support the update process for Commercial Off-The-Shelf (COTS) applications, ensuring compatibility and security. Vulnerability Scanning: Conduct regular assessments of environments to identify vulnerabilities. Security Definition Updates: Manage and update security definitions across our platforms to protect against emerging … threats. Vulnerability Analysis: Analyse vulnerability assessment reports and implement necessary changes. Security Daily Checks: Perform thorough daily checks of security components to ensure operational integrity. System Health Checks: Conduct daily system health checks to ensure servers are functioning optimally. Capacity Checks & Reporting: Monitor and report on local ...

with security, infrastructure, risk, and compliance teams, you'll deliver practical solutions that enhance both security posture and operational efficiency. Day to day : Analyse vulnerability assessment and penetration testing findings to identify security and infrastructure risks. Apply patches, upgrades, configuration changes, and other remediation activities to address vulnerabilities … progress, challenges, and outcomes. Monitor, track, and manage remediation activities to ensure timely completion and resolution. Maintain accurate documentation of remediation actions and update vulnerability management platforms and tracking tools. Produce reports and dashboards that demonstrate remediation effectiveness, risk reduction, and outstanding actions. Support cyber incident response activities ...

cloud, identity, endpoint and security operations capabilities.This is not a pure SOC role. The successful candidate will work across Microsoft cloud security, endpoint management, vulnerability management, infrastructure support and compliance activities, helping to strengthen the organisation's security posture while ensuring core services remain secure, reliable and well managed.This … activities.* Contribute to improvements in monitoring, alert handling, endpoint protection and security control effectiveness.* Maintain clear documentation for operational processes and security procedures.### ## Vulnerability Management* Support vulnerability scanning, triage, prioritisation and remediation tracking.* Work with infrastructure, application and business stakeholders to drive timely remediation of security weaknesses. ...

architecture baseline across the Anti‐Piracy estate, reviewing on‐premises and cloud platforms to identify security gaps, risks, and improvement opportunities. Own and drive vulnerability management across infrastructure and applications, including vulnerability analysis, penetration testing, exploit research, and remediation tracking. Conduct security assessments across IPTV ecosystems, applications … trust, least privilege, and risk‐based security approaches, with awareness of standards such as ISO 27001 and NIST CSF. Experience of, or exposure to, vulnerability management processes, including vulnerability assessment, remediation tracking, risk prioritisation, and security testing activities. Understanding of security operations concepts, including security monitoring, incident ...

response. Conduct proactive threat hunting activities using advanced search techniques and security telemetry to identify malicious activity that may have evaded automated detection. Support vulnerability assessment activities and contribute to security testing initiatives, including exposure to penetration testing and web application security assessments. Develop and maintain cyber security … environments. Strong analytical, troubleshooting, communication, and stakeholder management skills with the ability to work independently and manage multiple priorities. Desirable Experience performing vulnerability assessments using recognised vulnerability management tools. Exposure to penetration testing and web application security testing. Experience creating and maintaining cyber security policies, standards, and governance ...

response. Conduct proactive threat hunting activities using advanced search techniques and security telemetry to identify malicious activity that may have evaded automated detection. Support vulnerability assessment activities and contribute to security testing initiatives, including exposure to penetration testing and web application security assessments. Develop and maintain cyber security … environments. Strong analytical, troubleshooting, communication, and stakeholder management skills with the ability to work independently and manage multiple priorities. Desirable Experience performing vulnerability assessments using recognised vulnerability management tools. Exposure to penetration testing and web application security testing. Experience creating and maintaining cyber security policies, standards, and governance ...

Develop and implement security policies, standards, and best practices Provide expert advice to senior leadership on cyber risk and resilience Lead cyber risk identification, assessment, and mitigation activities Oversee security architecture to ensure alignment with wider technology strategy Drive continuous improvement through security assessments, testing, and reporting Ensure effective … incident detection, response, and recovery capabilities Lead vulnerability management and remediation across all technology environments Oversee third‐party security testing, including penetration testing and phishing simulations Promote a strong cyber‐security culture through training and awareness initiatives Monitor and report on threat intelligence trends and emerging risks About ...

Certifications: Professional certifications such as CISSP, GCIH, GCFA, Splunk Certified Architect, or Microsoft Sentinel Ninja. Extended Security Stack: Experience with EDR, UBA, CASB, CSPM, vulnerability assessment tools, and threat intelligence platforms. Infrastructure as Code: Experience with Chef, Ansible, Jenkins, GitLab CI/CD for automated security tool deployment ...

Responsibilities Monitor security alerts and investigate potential threats using SIEM tooling Support incident response activities, from initial triage through to resolution and reporting Conduct vulnerability assessments and coordinate remediation with technical teams Assist with security control reviews and audits against frameworks such as ISO 27001, NIST CSF, and Cyber ...

Certifications: Professional certifications such as CISSP, GCIH, GCFA, Splunk Certified Architect, or Microsoft Sentinel Ninja. Extended Security Stack: Experience with EDR, UBA, CASB, CSPM, vulnerability assessment tools, and threat intelligence platforms. Infrastructure as Code: Experience with Chef, Ansible, Jenkins, GitLab CI/CD for automated security tool deployment ...

security assessments, design security architectures, and help clients build security programs that meet regulatory requirements without creating operational friction. Responsibilities Lead penetration testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct incident response … Advise C-level executives on security strategy and risk management Requirements 8+ years in information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security (AWS Security Hub, Azure Defender ...

Conduct compliance assessments across systems and processes to evaluate cyber and information assurance posture. Assess technical security controls across networks, systems, and infrastructure - including vulnerability management, security architecture reviews, and technical risk assessments - to inform wider assurance judgements. Develop, refine, or review security policies and procedures to align with … within Defence or UK Government environments. Strong understanding of risk management frameworks Working technical knowledge across areas such as network security, secure system architecture, vulnerability assessment/penetration testing concepts, and cloud or infrastructure security controls. Familiarity with government and defence security standards such as: HMG/NCSC ...

Conduct compliance assessments across systems and processes to evaluate cyber and information assurance posture. Assess technical security controls across networks, systems, and infrastructure - including vulnerability management, security architecture reviews, and technical risk assessments - to inform wider assurance judgements. Develop, refine, or review security policies and procedures to align with … within Defence or UK Government environments. Strong understanding of risk management frameworks Working technical knowledge across areas such as network security, secure system architecture, vulnerability assessment/penetration testing concepts, and cloud or infrastructure security controls. Familiarity with government and defence security standards such as: HMG/NCSC ...

Design approach Selecting, understanding and adapting/adopting appropriate security control frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security … authentication, least privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails ...

Design approach Selecting, understanding and adapting/adopting appropriate security control frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security … authentication, least privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails ...

Testing Guide, PTES, and OSSTMM. Experience working within Red Team, Blue Team, and Purple Team environments. Strong knowledge of common attack techniques, threat emulation, vulnerability assessment, and exploitation methodologies. Hands-on experience with industry-standard security testing tools such as Burp Suite, Nmap, Metasploit, Nessus, Qualys, and Kali ...

control assessments for new products or initiatives. Working with third party InfoSec auditors (penetration testing, PCI compliance etc.). Conduct regular risk assessments and vulnerability assessments to identify security gaps and develop appropriate mitigation plans. Conducting regulatory gap analysis for regulations and local laws. Answering regulatory requests related ...

itsSupport clients in achieving and maintaining compliance (e.g. ISO 27001, NIST, GD PR)Develop and review security policies, procedures, and documentat ionPerform vulnerability assessments and coordinate remediation effo rtsDeliver threat modelling workshops and support secure solution design activit iesDeliver security awareness training and worksh opsAssist in incident response planning ...

style documentation. Work with technical teams, delivery teams, suppliers and customer stakeholders to ensure security requirements are properly understood and implemented. Review outputs from vulnerability assessments, penetration tests and supplier assurance activity, then advise on remediation and risk acceptance. Help clients align with relevant frameworks and standards, including ...

remediation alongside feature delivery and other technical work. Help improve secure software development and delivery practices, including CI/CD and related controls. Support vulnerability remediation, including root cause analysis and long-term fixes. Contribute to security standards, metrics and ways of working that improve product security maturity over … product and development teams operate, including how security considerations are balanced alongside product delivery. Strong experience of threat modelling, secure design review, vulnerability assessment and remediation prioritisation. The judgement to assess exploitability and business impact pragmatically Practical experience applying security across the software development lifecycle, including areas such ...

remediation alongside feature delivery and other technical work. Help improve secure software development and delivery practices, including CI/CD and related controls. Support vulnerability remediation, including root cause analysis and long-term fixes. Contribute to security standards, metrics and ways of working that improve product security maturity over … product and development teams operate, including how security considerations are balanced alongside product delivery. Strong experience of threat modelling, secure design review, vulnerability assessment and remediation prioritisation. The judgement to assess exploitability and business impact pragmatically Practical experience applying security across the software development lifecycle, including areas such ...

business objectives and regulatory requirements, establishing and enforcing cyber security policies, standards, and guidelines to protect assets and data. Conduct regular risk assessments and vulnerability analyses to identify potential threats and weaknesses in the organisation's infrastructure, implementing and overseeing risk management processes, ensuring that appropriate controls and countermeasures … higher education or similarly complex organisation, including management of staff and resources. Experience of gathering operational evidence on the performance of cyber security using vulnerability assessment tools. An awareness and understanding of networking and communication related concepts and cloud virtualisation techniques. If you have the relevant experience ...

primary contact for external auditors. ● Maintain the information security risk register and ensure agreed actions are completed. ● Commission annual penetration testing and vulnerability assessments, working with Engineering to ensure identified issues are addressed appropriately. ● Support the ongoing development of information security awareness across the business. External relationships ● Work with ...

securing complex enterprise networks across cloud and on-prem environments, including: Configuring and optimising security tooling such as segmentation platforms, Sophos, Mimecast, XDR solutions, vulnerability scanners and hardening baselines. Managing firewalls, VPNs, secure remote access and segmentation controls. Improving detection and response by working closely with SIEM/… teams. Ensuring critical logging, monitoring and compliance standards are always met. Automating deployments and controls using PowerShell, Python, Terraform or similar tools. Supporting vulnerability assessments and driving remediation across the estate. Contributing to secure design reviews across applications, infrastructure, and cloud services. Incident response experience is desirable ...