326 to 350 of 676 Vulnerability Management Jobs in England

risks, supporting requirements and effectiveness evidence. Maintain alignment between controls, regulatory obligations, contractual requirements and recognised cyber security frameworks. Establish robust governance and change management processes to support the continual improvement of the control’s framework. Work closely with the Cyber Risk Manager to ensure controls are identified, assessed … emerging threats, incidents, audits and lessons learned. Provide leadership and direction to the Cyber Controls Specialist, ensuring the effective delivery of cyber controls management activities. Controls Monitoring & Assurance Support compliance and regulatory activities by providing control evidence and demonstrating control effectiveness. Collaborate with assurance teams to align control monitoring ...

objectives. Desirable Experience supporting UK Defence, MOD, national security, government or critical national infrastructure organisations. Knowledge of Defence security policies, assurance approaches and risk management methodologies. Experience contributing to security assurance and accreditation activities for secure systems. Familiarity with classified or sensitive environments and associated security controls. Understanding … procurement and capability delivery programmes. Beneficial Knowledge Government and industry security frameworks such as HMG Security Policy Framework (SPF), ISO 27001 and NIST. Risk management methodologies and security assurance frameworks. Enterprise and security architecture approaches including TOGAF and SABSA. Cloud security and secure digital transformation programmes. Security operations, vulnerability ...

objectives. Desirable Experience supporting UK Defence, MOD, national security, government or critical national infrastructure organisations. Knowledge of Defence security policies, assurance approaches and risk management methodologies. Experience contributing to security assurance and accreditation activities for secure systems. Familiarity with classified or sensitive environments and associated security controls. Understanding … procurement and capability delivery programmes. Beneficial Knowledge Government and industry security frameworks such as HMG Security Policy Framework (SPF), ISO 27001 and NIST. Risk management methodologies and security assurance frameworks. Enterprise and security architecture approaches including TOGAF and SABSA. Cloud security and secure digital transformation programmes. Security operations, vulnerability ...

project requirements, responsibilities may also include: Proactive threat hunting Detection engineering and use-case development Incident response playbook creation Threat intelligence collection and analysis Vulnerability assessment and reporting Security change approval activities Security capability enhancement initiatives Essential Skills & Experience Demonstrable experience working within a Security Operations Centre (SOC) environment. … following areas would be advantageous: Detection Engineering and Alert Development Threat Hunting Threat Intelligence Analysis Security Automation and Orchestration Incident Response Playbook Development Vulnerability Management Cloud Security (AWS, Azure, GCP) Digital Forensics On-Call Requirement This role includes participation in an on-call rota, averaging approximately one week ...

Govern security controls across the full stack: Kafka, .NET/C#, Vue.js, Kong API Gateway, Auth0, and Salesforce. Lead threat modelling, penetration testing, and vulnerability management programmes. Own identity and access management strategy, including Entra ID, Auth0, and partner federation. Drive security engineering best practices within product … Partner with the DPO on data governance and breach notification obligations. Manage third-party and supply chain security risk, including critical outsourcing oversight. Incident management & operations: Own the security incident response plan; lead major incident management for cyber events. Operate and improve security monitoring, SIEM, and alerting across ...

schema creation, and operational workflows across cloud and on-premises platforms; Support production systems with a focus on high availability, disaster recovery, incident response, vulnerability management, patching, and change management; Containerize applications and support deployments using container orchestration platforms; Partner with development teams to understand application codebases … architecture, improving deployment, monitoring, and operational readiness; Use infrastructure as code and configuration management tools such as Terraform, Chef, or Ansible to drive consistency and repeatability; Troubleshoot complex deployment, performance, networking, and infrastructure issues, preventing recurring manual fixes through automation; Use AI-assisted engineering tools to accelerate development, automation ...

through to resolution within the team’s operating model.Maintain internal IT services including LAN, wireless, VOIP and mobile telephony, and support IT procurement, supplier management and hardware refresh.Automation, Monitoring & Continuous ImprovementDevelop and maintain automation and scripts for repeatable operational tasks.Maintain effective monitoring, alerting and dashboards across metrics … effective use of modern tooling including AI-assisted development and automation.Security, Documentation & CollaborationOperate infrastructure with a security-first approach, applying access controls, hardening and vulnerability remediation in line with company policies.Support logging, monitoring and security tooling, and assist with investigation and remediation of security alerts.Plan and deliver changes ...

consistency of security delivery. Key Responsibilities: Cloud Security Engineering Build and maintain reusable cloud security guardrails for identity, logging, encryption, network segmentation, secrets management, storage, workloads, containers, serverless services, and data protection. Translate security architecture standards into deployable cloud patterns, reference implementations, templates, and engineering‐ready requirements. Partner with … related cloud security tooling. Develop policy‐as‐code and control‐as‐code mechanisms to prevent, detect, and report common cloud misconfigurations. Support cloud‐native vulnerability and misconfiguration remediation by providing prioritization logic, remediation guidance, and reusable fix patterns. Establish cloud security metrics and dashboards covering control adoption, misconfiguration trends ...

consistency of security delivery. Key Responsibilities: Cloud Security Engineering Build and maintain reusable cloud security guardrails for identity, logging, encryption, network segmentation, secrets management, storage, workloads, containers, serverless services, and data protection. Translate security architecture standards into deployable cloud patterns, reference implementations, templates, and engineering-ready requirements. Partner with … related cloud security tooling. Develop policy-as-code and control-as-code mechanisms to prevent, detect, and report common cloud misconfigurations. Support cloud-native vulnerability and misconfiguration remediation by providing prioritization logic, remediation guidance, and reusable fix patterns. Establish cloud security metrics and dashboards covering control adoption, misconfiguration trends ...

Configuring, maintaining and supporting security technologies across on-premises, cloud and SaaS environments. Supporting firewalls, VPNs, endpoint protection, email security, identity and access controls, vulnerability management and security monitoring platforms. Coordinating vulnerability assessments and working with system owners to track remediation through to completion or formal acceptance. … services and applications. You'll also bring: Practical knowledge of TCP/IP, firewalls, VPNs, DNS, DHCP, certificates and SSL/TLS. Experience with vulnerability scanning, secure configuration assessments and remediation tracking. An understanding of common attack techniques, security monitoring and incident response. Knowledge of the OWASP ...

improve the organisation’s security posture across cloud and technology environments. This role has a strong focus on platform security assessments, cloud security posture management (CSPM), and the use of security tools to detect misconfigurations, vulnerabilities, and control gaps. The successful candidate will work closely with engineering, infrastructure … secure-by-design practices. Key Responsibilities: Conduct security assessments of platforms, applications, and cloud environments to identify risks, misconfigurations, and control weaknesses. Use CSPM, vulnerability management, and related security tools to continuously monitor cloud and platform security posture. Review configurations across cloud services, infrastructure, identity, networking, containers ...

align technical initiatives with business goals. Security Oversight: Ensure compliance with security standards and frameworks (e.g., Microsoft best practice, CIS, NIST). Oversee vulnerability management in terms of patching and incident response. Work closely with SOC teams to remediate and maintain a secure client environment. Automation & Tooling: Design … development of team members. Set clear objectives and performance expectations for the team members. Promote a culture of innovation, accountability and continuous improvement. Escalations Management: Offer escalation support and guidance to team members and other employees. Resolve escalated IT support issues promptly and effectively. o Make sure that Service ...

EMEA) to join our growing team. Reporting to the Global Security Manager, you will be responsible for supporting and enhancing information security, compliance, risk management, and business resilience activities across our UK and European operations. This is an excellent opportunity for a security professional who enjoys balancing technical security … Checks. Conduct internal audits, control reviews, and risk assessments. Maintain and monitor the organisational risk register. Support business continuity and resilience planning activities. Coordinate vulnerability scanning, penetration testing, and remediation programmes. Assist with the investigation and resolution of information security incidents. Deliver security awareness initiatives, user training, and phishing ...

adopting robust development practices, including software design, verification, validation, traceability, cybersecurity, and risk management. Partner with Software, Systems, Quality, Regulatory, Scientific, and Product Management teams throughout the product lifecycle. Contribute technical expertise to product planning, technology roadmaps, and architectural governance activities. Champion secure-by-design principles and help ensure … modern engineering practices. Experience working within regulated software development environments, including quality, safety, and cybersecurity considerations. Experience contributing to software verification, validation, requirements management, traceability, risk management, and software lifecycle activities. Ability to influence technical direction across multidisciplinary organisations through expertise, collaboration, and leadership. Strong communication skills with ...

Develop and maintain technical roadmaps aligned with business goals, collaborating with leadership to prioritize initiatives Design, implement, and continuously improve automated provisioning and systems management pipelines (CI/CD for IT tooling, endpoint management) Research and evaluate new technologies, tools, and vendors; lead proof-of-concept efforts … Assist with or own high-complexity onboarding and offboarding workflows, ensuring security and access policies are followed Perform and improve maintenance activities: backups, patch management, license audits, and monitoring Create and improve IT documentation and internal knowledge bases Respond to critical incidents and drive root cause analysis and permanent ...

implement coordinated security strategies, policies, and procedures, while educating employees on best practices Provide intelligence services to JPMorgan Chase acquisitions, including drafting and disseminating vulnerability and intelligence reports. Liaise regularly with acquisitions to maintain lines of communication, understand and document their cybersecurity posture and unique challenges, identifying uplift opportunities … analysts on the team Required qualifications, capabilities, and skills Minimum 3 years of experience in cybersecurity operations, including threat detection, incident response, or vulnerability management Proven experience in network trace analysis, log analysis, vulnerability assessment, exploitation techniques, and security investigations in response to security incidents Proficiency ...

Days Home) Type: Full-time, Permanent Overview A leading financial technology organisation is looking to appoint an Information Security Officer to support the management and continuous improvement of information and cyber security across the business. This is a broad security role covering governance, risk, compliance, third party assurance … security who wants broad responsibility rather than specialising solely in one area. Key Responsibilities Support the development and continual improvement of the Information Security Management System Identify, assess, treat and report information security, cyber, technology and third party risks Conduct security risk assessments, control reviews and assurance activities Support ...

Engineer (Identity & Cloud) to support and enhance security across a Microsoft-focused technology environment. The role will have a particular focus on Identity & Access Management (IAM), Microsoft Entra ID, Privileged Identity Management (PIM), Azure, Microsoft 365 security and Power Platform governance. You will work closely with Cyber Security … securely. Key Responsibilities Administer and maintain Microsoft Entra ID, including Conditional Access, Identity Protection and Access Governance. Implement, operate and continuously improve Privileged Identity Management (PIM) controls and privileged access reviews. Support the secure configuration and operation of Microsoft Azure and Microsoft 365. Implement and maintain Microsoft Defender security ...

organisation's cyber security strategy and roadmap Manage cyber security operations, incident response and investigations Drive improvements across security monitoring, threat detection and vulnerability management Develop and implement security policies, standards and governance frameworks Ensure compliance with relevant regulations, security frameworks and industry best practices Provide cyber security … Proven experience in a Cyber Security Manager, Information Security Manager, Security Operations Manager or similar leadership role Strong understanding of cyber security governance, risk management and compliance Experience managing security incidents and cyber response activities Experience leading or developing Security Operations Centre (SOC) capabilities Excellent stakeholder management ...

manage lessons learned and continuous improvement activities. Produce clear reporting on remediation progress, cyber risks, and compliance outcomes. Key Skills & Experience: Proven delivery management experience within cyber security, infrastructure, or technology programmes. Strong background in remediation, patching, vulnerability management, or cyber risk reduction initiatives. Excellent stakeholder management skills with the ability to coordinate across technical and operational teams. Experience with governance, RAID management, delivery reporting, and assurance activities. Good understanding of cyber security, risk management, audit, and compliance requirements. Strong planning, organisational, and communication skills. #J-18808-Ljbffr ...

manage lessons learned and continuous improvement activities. Produce clear reporting on remediation progress, cyber risks, and compliance outcomes. Key Skills & Experience: Proven delivery management experience within cyber security, infrastructure, or technology programmes. Strong background in remediation, patching, vulnerability management, or cyber risk reduction initiatives. Excellent stakeholder management skills with the ability to coordinate across technical and operational teams. Experience with governance, RAID management, delivery reporting, and assurance activities. Good understanding of cyber security, risk management, audit, and compliance requirements. Strong planning, organisational, and communication skills. This is an excellent opportunity for a delivery-focused ...

strong focus on cybersecurity, IT infrastructure, or platform security initiatives. Security & IT Domain Expertise: Deep understanding of cybersecurity frameworks, enterprise IT delivery, threat management, DevSecOps practices, and security architecture principles. Governance, Risk & Compliance (GRC): Strong experience in risk management, financial forecasting, regulatory compliance, and security governance frameworks within … enterprise tech environments. Executive Stakeholder Management: Demonstrated ability to influence, present to, and align priorities with senior and executive leadership (e.g., CISO, CTO, Head of IT). Leadership & Coaching: Proven track record in leading, coaching, and mentoring delivery professionals, fostering skills growth in technical delivery and security operations. Delivery ...

alerts for urgency and impact Deliver weekly and monthly reporting to clients and stakeholders Communicate security findings and trends directly to clients Support vulnerability management analysis and remediation efforts Lead false‐positive reduction and SIEM tuning activities Mentor and support development of Tier 1 and junior analysts Contribute ...

Information Security Vulnerability Engineer , Staffordshire ( Qualys, Rapid7, Nessus, Tanium, CrowdStrike) Our well-established client is seeking an Information Security Vulnerability Engineer to join their growing team in Staffordshire. In this role, you will play a key part in identifying, assessing, and mitigating security vulnerabilities across IT, OT, cloud … interested in candidates who have built strong technical foundations within Technical Support, Service Desk, or Infrastructure environments and have gained hands-on experience in vulnerability management, patching, and remediation activities. Experience managing and resolving security vulnerabilities through patch management, tooling and automation, system hardening, and working collaboratively ...

ongoing operation of cloud infrastructure Designing, developing and maintaining Infrastructure as Code (IaC) Improving infrastructure monitoring and alerting Managing and improving Identity and Access Management (IAM) Strengthening vulnerability management and reducing remediation times Providing technical support and guidance across infrastructure-related issues Working with third-party cloud ...