301 to 325 of 676 Vulnerability Management Jobs in England

networks, or applications. Ability to leverage AI tools to accelerate triage, remediation recommendations, and incident response, with appropriate human review and judgement. Knowledge of vulnerability management, common attack patterns, and mitigation techniques. (e.g., OWASP Top 10, MITRE ATT&CK.) Preferred technical and professional experience Experience in security engineering ...

Azure DevOps CI/CD pipelines, including static analysis, dependency scanning, and IaC scanning. Ensure Kubernetes workloads follow best practices: RBAC, network policies, secrets management, image security, and ingress protections. Support secure configuration of Azure VMs hosting legacy or specialised products. Vulnerability Management Operate and enhance container … vulnerability scanning. Monitor CVEs relevant to Centellic’s stack and coordinate remediation activities with engineering teams. Perform regular reviews of Terraform modules, container images, Helm charts, and AKS configurations to identify misconfigurations and risks. Monitoring, Detection & Incident Response Work with monitoring tooling (e.g., Datadog or Azure Monitor) to detect ...

services align with key cyber security and regulatory frameworks. This is a unique opportunity to work at the intersection of cyber security, governance, risk management, and operational engineering. You'll help translate complex compliance requirements into practical technical controls that protect critical systems and services. What … Benchmarks, and IEC 62443 Experience implementing or governing technical compliance programmes within operational environments Strong understanding of risk assessment methodologies and compliance management practices Excellent stakeholder management, communication, and technical documentation skills Experience working with technologies such as networking, firewalls, virtualisation, endpoint security, vulnerability management, SIEM ...

bring You'll have experience in several of the following areas: Security Operations, Security Incident Response or Security Engineering. Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR) technologies. Identity and Access Management, including MFA, Conditional Access and Privileged Access. Data Loss Prevention (DLP) technologies … policy management. Vulnerability Management and security hardening. Security architecture reviews and technical assurance. Threat detection, investigation and root cause analysis. Security automation, scripting or workflow improvement. You'll also be comfortable working with recognised security frameworks such as NIST CSF, ISO 27001, CIS Controls or the NCSC Cyber ...

internal teams.* Analyze and validate potential security incidents, ensuring accurate classification, documentation, and escalation.* Perform daily operational information security tasks, including the management and resolution of ServiceNow incidents assigned to the Information Security team.* Support incident response efforts through investigation, coordination, and detailed documentation of findings.* Participate occasionally … appropriate logging, monitoring, and alerting capabilities are in place across systems.* Work closely with the IT Service Desk, Operations, and development teams to support vulnerability identification and ensure remediation is prioritised and delivered within agreed SLAs.* Work closely with global and regional stakeholders to support consistent security operations ...

stakes customer procurement reviews, vendor risk assessments (DDQs), and defense customer evaluations. Oversee Security Operations: Build and manage internal incident response capabilities, continuous monitoring, vulnerability management, and employee security awareness programs. What we are looking for Progressive Experience: 6–10 years in cybersecurity (e.g., Lead Security Architect, SecOps … Track Record: Proven experience taking a high‐growth technology company through SOC 2 Type II or ISO 27001 certifications from start to finish. Stakeholder Management: Exceptional ability to bridge technical security requirements with business strategy for executives, developers, and defense customers alike. Certifications/Credentials: CISSP, CISM, CCSP ...

influential skills to make gradual steps toward a future Head of IT position. The successful candidate will combine strong technical capability with excellent stakeholder management skills, bringing structure, security discipline, and strategic direction to an IT environment that is already functional but continuing to mature. The role will inherit … broader operational standards such as ISO9001. Implement and maintain security controls aligned with recognised frameworks (e.g. ISO27001, Cyber Essentials Plus, NIST). Lead vulnerability management, patching, endpoint protection, SIEM, and threat monitoring activities. Manage identity and access controls, MFA, privileged access, and conditional access policies. Lead incident response ...

automation, orchestration and use of technology. Supporting the implementation and adoption of SOAR and other automation capabilities. Working alongside other MSSP services such as Vulnerability Assessment, Vulnerability Management, MDR, SIEM and incident response . Improving processes, procedures, playbooks and operational standards. Developing and mentoring the existing ...

automation, orchestration and use of technology. Supporting the implementation and adoption of SOAR and other automation capabilities. Working alongside other MSSP services such as Vulnerability Assessment, Vulnerability Management, MDR, SIEM and incident response . Improving processes, procedures, playbooks and operational standards. Developing and mentoring the existing ...

activities Conduct forensic investigations and contribute to threat detection and intelligence activities Develop and refine security monitoring, detection rules and use cases Carry out vulnerability scanning and support remediation and patch management Contribute to penetration testing and application security testing Secure and maintain Microsoft Azure cloud environments Implement … maintain Identity and Access Management (IAM) solutions Support the security of Microsoft 365, Exchange Online and Intune environments Ensure infrastructure and applications align with appropriate security standards and best practice Work with frameworks and standards including Cyber Essentials, ISO 27001, SOC 2, GDPR and NCSC guidance Apply security principles ...

technology used by people across international markets. We are seeking an experienced Information & Cybersecurity Manager to lead information security, product cybersecurity and cyber risk management across a growing, highly regulated technology environment. This is a unique opportunity to become the organisation's security subject matter expert, taking ownership … approach, helping strengthen existing security practices while embedding cybersecurity throughout the software and product development lifecycle. Key Responsibilities Maintain and improve the Information Security Management System (ISMS), policies, procedures and controls. Lead cybersecurity risk assessments, threat modelling and security reviews. Oversee penetration testing, vulnerability management and remediation ...

Senior IT Operations Manager A leading financial services organisation is seeking an experienced IT Operations Manager to lead the delivery, resilience and operational management of enterprise infrastructure platforms across cloud and on-premise environments. Experience Required Proven leadership of Infrastructure, Platform Operations or IT Operations teams. Experience managing large … scale hybrid cloud and on-prem infrastructure environments. Strong background in automation, operational excellence and infrastructure transformation. Expertise in incident management, disaster recovery, resilience testing and business continuity. Vendor, supplier and budget management experience. Experience supporting highly available, business-critical environments. Prior experience in Trading, Asset Management ...

licensing, governance and Modern Workplace solutions. Lead adoption of new Microsoft technologies, collaboration tools, productivity solutions and M365 security best practice. Microsoft Intune & Endpoint Management Own Microsoft Intune, Windows Autopilot, endpoint security, device compliance and configuration management. Manage application deployment, MDM/MAM, device lifecycle, patching and operational compliance. … environments, including virtual machines, storage, networking, backup and recovery. Support hybrid cloud, migration, automation, resilience, disaster recovery, performance, security and cost optimisation. Identity & Access Management Administer Microsoft Entra ID, including Conditional Access, MFA, Identity Governance, PIM, RBAC and SSO. Manage user lifecycle processes, access controls and secure identity services ...

hunting to identify emerging threats and vulnerabilities. Analysing security alerts, logs and telemetry data to detect malicious activity. Collaborating with Threat Intelligence, Security Assurance, Vulnerability Management and IT Operations teams to strengthen cyber resilience. Driving continuous improvement of detection capabilities, response processes and cyber defence strategies. This role … Security Operations, Incident Response or Threat Detection environments. Demonstrable experience investigating and managing complex cyber security incidents. Strong knowledge of Security Information and Event Management platforms, Endpoint Detection and Response technologies, and Threat Detection and Response solutions. Experience analysing logs, alerts, security telemetry and security incident data. Strong understanding ...

digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose … server OS configuration, TCP/IP networking hardware, protocols, LAN and WAN technologies & configurations, and network design) and/or IS (ideally PKI, firewall management, IDS & IPS, vulnerability management, and network scanners), in engineering, administration or support roles Familiarity with cryptographic principles, digital certificates, and PKI concepts. ...

undertake occasional travel across the UK, including London and customer sites, as required. Essential Skills and Experience Proven experience delivering Information Assurance, risk management, and security assurance within Defence, Government, Intelligence, or other highly regulated environments. Strong understanding of NIST RMF/CSF, ISO 27001, and Government security frameworks … artefacts such as SyOPs, RMADs, Security Impact Assessments, risk assessments, and accreditation evidence. Experience leading assurance initiatives, audits, control assessments, incident response activity, and vulnerability management using tools such as Nessus, Trivy, Tenable, or similar platforms. Ability to brief and influence senior stakeholders, mentor assurance practitioners, prioritise competing ...

undertake occasional travel across the UK, including London and customer sites, as required. Essential Skills and Experience Proven experience delivering Information Assurance, risk management, and security assurance within Defence, Government, Intelligence, or other highly regulated environments. Strong understanding of NIST RMF/CSF, ISO 27001, and Government security frameworks … artefacts such as SyOPs, RMADs, Security Impact Assessments, risk assessments, and accreditation evidence. Experience leading assurance initiatives, audits, control assessments, incident response activity, and vulnerability management using tools such as Nessus, Trivy, Tenable, or similar platforms. Ability to brief and influence senior stakeholders, mentor assurance practitioners, prioritise competing ...

continuously improve DevSecOps practices across the delivery teams, including:Secure, automated CI/CD pipelinesSecurity scanning integrated into build, test and deployment workflowsVulnerability lifecycle management, including allowlist processes and risk acceptance where required and secrets management and identity/access management;Policy enforcement for workloads, container images … leading others):CI/CD and GitOps (e.g. GitHub Actions, Argo CD, Argo Rollouts)Security and compliance tooling (e.g. Trivy scanning and vulnerability management, HashiCorp Vault, cert-manager)Containers and orchestration (e.g. Docker, AWS EKS) ; Infrastructure as Code (e.g. Terraform)Observability (e.g. Grafana, Loki) ;Scripting and automation (e.g. ...

services including EC2, ECS, Fargate, S3, and RDS. Progressing and establishing our foundational AWS Control Tower and Landing Zones architecture. Executing Cloud Security Posture Management (CSPM) and vulnerability management using tools like Snyk and various AWS security services. Owning infrastructure projects end-to-end, from the initial ...

services including EC2, ECS, Fargate, S3, and RDS. Progressing and establishing our foundational AWS Control Tower and Landing Zones architecture. Executing Cloud Security Posture Management (CSPM) and vulnerability management using tools like Snyk and various AWS security services. Owning infrastructure projects end-to-end, from the initial ...

grade or similarly secure environments such as defence. Hybrid London based Service Owner - Service Experience Proven experience as a Service Owner, Head of Service Management, Service Delivery Manager or equivalent senior role.Lead end-to-end service management, service desk, portals, self-service, NOC/APM monitoring and continual … improvement. implementing service automation, self-service platforms, service catalogues or knowledge management services SIAM and multi-supplier environments. NOC, APM, automation, self-service, service catalogue or knowledge-management implementation. GDS Service Standard and government service management experience. ITIL 4 Managing Professional, Strategic Leader or equivalent. Service Owner ...

Intact Insurance is seeking a Cyber Defence Transformation Analyst to drive continuous improvement, automation, and data-driven security capabilities. You will focus on vulnerability management, exposure management, and SOC operations to align with evolving threats and business priorities. Responsibilities include delivering a roadmap for tooling improvements, embedding ...

Engineer and Analyst while remaining technically active, coordinating complex security projects across a range of departments. You are the bridge between high-level risk management and technical execution, ensuring that security enables - rather than hinders - our global growth. Job Responsibilities Direct Management: Lead, mentor, and set the roadmap … Information Security Engineer and Analyst. Focus on career development and technical cross-skilling. Workflow Management: Act as the "Traffic Controller" for the team, using Kanban to prioritise high-value tasks and ensuring the team stays focused on meaningful risk reduction rather than just "noise." Cross-Functional Liaison: Partner with ...

Assurance Officer is responsible for ensuring that GSA implements and maintains all mandatory information and cyber‐security controls required under the client Information Security Management Plan (ISMP), associated security documentation and governance agreements with parent companies. The role provides assurance across corporate and project systems, oversees integration with client … security operations, ensures subcontractor compliance, and leads the development and operation of a robust Information Security Management System (ISMS) aligned to ISO/IEC 27001. You will act as the central authority for information security governance, incident management and continuous improvement across the organisation. What ...

Developing the information security plans and policies for NSSLGlobal and Customers working with Security Management and Compliance functions to embed security management plans into operational practice Implementing protections and solutions to ensure and enforce the information security plans and policies Monitoring and collating information from monitoring tools … testing for vulnerabilities and recommending improvements. To participate and support all internal IT & Engineering teams including providing advice and expertise on the design and management of internal, customer and global networks from a cybersecurity perspective. Creating documentation around policies, procedures and events. Who we are: NSSLGlobal Group ...