1 to 25 of 75 Remote/Hybrid Vulnerability Management Jobs in London

asking that you attend the office a minimum of 1 day per week. About the Role We are seeking a highly motivated and experienced Vulnerability Management Engineer to join our Cyber Security team. As a Vulnerability Management Engineer, your primary responsibility will be to manage vulnerability management tooling, and have an active role in improving existing processes. You will achieve this by creating automated solutions through collaboration with technical teams across Starling. Responsibilities Design, build, and maintain robust vulnerability management tooling and technical solutions. Drive efficiency by implementing automated solutions that eliminate ...

Threat and Vulnerability Management Lead Barbican, London | Hybrid Working (One office day a week) | Technology | Fixed-Term Contract till end of 2026 | Full time Competitive Salary available, depending on experience 37.5 hours per week At Nuffield Health, our mission to build a healthier nation is powered by passionate … people who make a difference every day. We are seeking an experienced Threat and Vulnerability Management Lead to join our growing Cyber Security team and take ownership of our enterprise-wide Threat and Vulnerability Management function. This is an exciting opportunity to shape and mature ...

international defence programme. The new SOC will protect complex Microsoft Cloud and on-premises environments operating across multiple regions and classification levels. The Security Vulnerability Management Engineer will take a key role in designing, deploying and configuring the vulnerability management capability for the new SOC. This … position will focus on enterprise vulnerability management tooling, risk-based vulnerability assessment, integrations with wider SOC platforms and the development of effective workflows, reporting and operational processes. Whats on offer Salary: £72,000 £82,000 10% annual bonus Opportunity to help build a major ...

improvement and drive remediation through to completion. You'll act as the technical authority for security assurance, providing oversight across identity and access management, vulnerability management, cloud security, endpoint protection, incident management, logging and monitoring, ensuring security controls are effective, measurable and continuously improving. This … Information Security, Security Assurance, IT Audit or Cyber Risk within a regulated finance environment You have a deep understanding of security control frameworks, risk management and governance You have experience managing internal and external security audits, client due diligence and regulatory assessments You have a good knowledge of cloud ...

Security Transformation Programme. This role will be responsible for the successful delivery of complex cyber security initiatives across multiple technology domains, including Identity & Access Management (IAM), Security Operations, Cloud Security, Vulnerability Management, Data Protection, and Regulatory Compliance. The successful candidate will act as the bridge between technical … regulatory requirements. Manage dependencies across multiple technology and business teams. Drive project governance and reporting activities. Cyber Security Delivery Deliver initiatives across: Identity & Access Management (IAM) Privileged Access Management (PAM) Security Operations (SOC) SIEM Platforms Cloud Security Vulnerability Management Data Protection and DLP Security Monitoring ...

shape, assure, and enable delivery of secure, cloud‐native services at scale. You will be comfortable helping Local Authorities identify, validate, prioritise and reduce vulnerability-related cyber exposure. This is a consultancy and remediation role: the consultant must connect vulnerability evidence to critical services and credible threats, coordinate … practical treatment and produce defensible evidence of closure. What you’ll do Key responsibilities Review and validate vulnerability scan results, penetration-test findings, vulnerability disclosures, exposed services, unsupported technology and configuration weaknesses. Assess CVE severity, exploitability, attack path, asset/service criticality, supplier dependency and evidence confidence ...

Since being founded in 2018, Copper has been building the standard for institutional digital asset infrastructure with a focus on custody, collateral management, and prime services. Led by Amar Kuchinad, Copper's Global CEO, the firm provides a comprehensive suite of custody, trading and settlement solutions that reduce counterparty … lead initiatives to protect Copper's systems, data, and digital assets. You will be responsible for enhancing our security capabilities across identity and access management, cloud platforms, endpoint security, vulnerability management, automation, and security monitoring, ensuring security controls remain effective, scalable, and aligned to business and regulatory ...

global investment banks. For more information, please visit www.cmgx.io The Role We are hiring a Senior Security Engineer to lead our security risk management and governance work. This is a senior individual‐contributor role for someone who thrives on owning large, ambiguous initiatives end‐to‐end and turning them … CISO, own cross‐program initiatives, and collaborate closely with senior leadership across the firm. The core of the role is hands‐on security risk management, threat modeling, security risk assessments, and security design and architecture reviews, paired with the governance and process work that scales the program. You will ...

international technology and cyber security provider. This is far more than a traditional SOC role. You'll be involved in incident response, threat hunting, vulnerability management, detection engineering and proactive cyber defence activities across a modern Microsoft security environment. What You'll Be Doing Investigating and managing security … network environments Threat hunting and proactive security investigations Querying and analysing data using KQL within Microsoft Sentinel Working with Microsoft Defender XDR technologies Supporting vulnerability management and security posture improvements Detection engineering, alert tuning and security tooling optimisation Producing technical reports and recommendations Supporting governance and compliance requirements ...

sources into a SIEM Ability to define and develop threat-led detection use cases, playbooks and automation content Experience integrating SIEM platforms with identity management, vulnerability management, asset management, threat intelligence and case management systems Strong knowledge of Azure and/or AWS security controls ...

architecture baseline across the Anti‐Piracy estate, reviewing on‐premises and cloud platforms to identify security gaps, risks, and improvement opportunities. Own and drive vulnerability management across infrastructure and applications, including vulnerability analysis, penetration testing, exploit research, and remediation tracking. Conduct security assessments across IPTV ecosystems, applications … trust, least privilege, and risk‐based security approaches, with awareness of standards such as ISO 27001 and NIST CSF. Experience of, or exposure to, vulnerability management processes, including vulnerability assessment, remediation tracking, risk prioritisation, and security testing activities. Understanding of security operations concepts, including security monitoring, incident ...

about the money, it's about the means to more - more freedom, opportunities, possibilities, and peace of mind. Moneybox is an award-winning wealth management platform, helping over one and a half million people build wealth throughout their lives, whether they’re saving and investing, buying their first home … information security strategy, roadmap and operating model. Leading the ongoing development of Moneybox’s Information Security Programme, using NIST CSF as the practical risk‐management framework while aligning with ISO 27001 for governance, control maturity and assurance. Reducing real security risk across Moneybox’s technology estate, people processes, suppliers ...

about the money, it's about the means to more - more freedom, opportunities, possibilities, and peace of mind. Moneybox is an award‐winning wealth management platform, helping over one and a half million people build wealth throughout their lives, whether they're saving and investing, buying their first home … information security strategy, roadmap and operating model. Leading the ongoing development of Moneybox’s Information Security Programme, using NIST CSF as the practical risk‐management framework while aligning with ISO 27001 for governance, control maturity and assurance. Reducing real security risk across Moneybox’s technology estate, people processes, suppliers ...

sector. Through its various business units, it builds and operates renewable projects (such as solar, wind, and batteries), manages investment funds, and provides asset management services across the energy lifecycle. Overall, its mission is to accelerate the transition to sustainable energy while delivering strong financial returns for investors … clients. About the role: Working within our Technology & Digital Services (TDS) team, you'll gain hands-on experience across cyber security operations, risk management, governance, and security assurance while helping to protect critical systems and data. You'll work alongside experienced technology professionals and external partners, supporting real-world ...

implementation, and continuous improvement of information security policies, procedures, and controls across networks and systems. Day‐to‐day responsibilities include managing the Information Security Management System (ISMS), monitoring cybersecurity and network security events, coordinating incident response, and ensuring compliance with relevant standards and regulations. The person in this role … Additional tasks include producing security documentation, leading security awareness initiatives, and providing guidance on secure network engineering practices. Qualifications Strong skills in Information Security Management and Information Security, with experience defining and enforcing security policies and governance. Hands‐on expertise with Information Security Management Systems (ISMS), including implementation ...

implementation, and continuous improvement of information security policies, procedures, and controls across networks and systems. Day-to-day responsibilities include managing the Information Security Management System (ISMS), monitoring cybersecurity and network security events, coordinating incident response, and ensuring compliance with relevant standards and regulations. The person in this role … Additional tasks include producing security documentation, leading security awareness initiatives, and providing guidance on secure network engineering practices. Qualifications Strong skills in Information Security Management and Information Security, with experience defining and enforcing security policies and governance. Hands-on expertise with Information Security Management Systems (ISMS), including implementation ...

development and implementation of a forward‐thinking cyber security strategy, ensuring systems, data, and services are protected through robust controls, governance, and risk management practices. Working closely with senior stakeholders, you will act as the organisation’s subject matter expert on cyber security, providing clear, actionable advice on risks … ensure alignment with wider technology strategy Drive continuous improvement through security assessments, testing, and reporting Ensure effective incident detection, response, and recovery capabilities Lead vulnerability management and remediation across all technology environments Oversee third‐party security testing, including penetration testing and phishing simulations Promote a strong cyber‐security ...

responsibilities include: Driving application and product security initiatives across multiple engineering teams Conducting security reviews, threat modelling and risk assessments Implementing and improving vulnerability management processes Embedding security tooling into CI/CD pipelines and development workflows Partnering with developers to promote secure coding practices Reviewing cloud infrastructure … secure software development practices Experience working closely with software engineering teams Hands‐on experience securing cloud environments (AWS, GCP or Azure) Experience with vulnerability management, threat modelling and security reviews Knowledge of CI/CD security and modern development practices Excellent stakeholder management and communication skills Eligibility ...

responsibilities include: Driving application and product security initiatives across multiple engineering teams Conducting security reviews, threat modelling and risk assessments Implementing and improving vulnerability management processes Embedding security tooling into CI/CD pipelines and development workflows Partnering with developers to promote secure coding practices Reviewing cloud infrastructure … secure software development practices Experience working closely with software engineering teams Hands‐on experience securing cloud environments (AWS, GCP or Azure) Experience with vulnerability management, threat modelling and security reviews Knowledge of CI/CD security and modern development practices Excellent stakeholder management and communication skills Eligibility ...

firewalls, EDR/XDR, SIEM, IAM/PAM platforms, DLP) Configure and harden cloud environments (AWS/Azure) in line with security baselines Support vulnerability management - scanning, patching coordination, remediation tracking Build and maintain detection rules, alerts, and automation (SOAR) in partnership with the SOC Support incident response … Azure) Scripting/automation ability (Python, PowerShell, or similar) Working knowledge of networking, IAM, and endpoint security Familiarity with SIEM/EDR tooling and vulnerability management platforms Desirable Security+, CySA+, or GIAC certifications (e.g. GCIH, GSEC) Cloud security certification (AWS Security Specialty/Azure Security Engineer) Exposure ...

Access, identity protection, device compliance, and endpoint hardening strategies. Act as the technical lead for cyber incidents, supporting investigation, containment, and recovery activities. Oversee vulnerability management, ensuring prioritisation and remediation aligned to business risk. Manage and enhance security baselines, configuration standards, and policy enforcement across the estate. Lead … Security Operations Lead, Technical Security Manager, Security Engineering Lead, Microsoft Security, Defender, Intune, Entra, Azure, Sentinel, Endpoint Security, Cloud Security, Identity Security, Zero Trust, Vulnerability Management, Incident Response, Operational Excellence, Security Strategy. ...

models, agents, and supporting platforms across their full lifecycle. Second, leveraging AI and automation to transform and scale the security function, through risk‐based vulnerability management, alert enrichment, workflow orchestration, and CI/CD checks. Whether your background is in security engineering with AI experience … risks into actionable controls and standards. Leading design reviews, threat modelling and targeted implementation for critical AI initiatives Nice to have skills Experience with vulnerability management or risk‐based threat prioritisation. Knowledge of securing AI agents or agentic workflows, including scoped permissions and approval processes. Able to identify ...

organisation’s systems, data, and services. Reporting into the Head of Cyber Security, you will oversee security operations, incident response, security engineering, vulnerability management, and the performance of outsourced security partners. Working closely with internal Technology teams and third-party providers, you will drive continuous improvement across security … cyber incidents and drive operational improvements. Strong knowledge of cloud, identity, endpoint, email, and data security controls is essential, as is experience with vulnerability management and security monitoring. The successful candidate will be a confident leader who can build strong relationships across technical and non-technical teams, communicate ...

continuously improve DevSecOps practices across the delivery teams, including: Secure, automated CI/CD pipelines Security scanning integrated into build, test and deployment workflows Vulnerability lifecycle management, including allowlist processes and risk acceptance where required Secrets management and identity/access management Policy enforcement for workloads … leading others): CI/CD and GitOps (e.g. GitHub Actions, Argo CD, Argo Rollouts) Security and compliance tooling (e.g. Trivy scanning and vulnerability management, HashiCorp Vault, cert-manager) Containers and orchestration (e.g. Docker, AWS EKS) Infrastructure as Code (e.g. Terraform) Observability (e.g. Grafana, Loki) Scripting and automation (e.g. ...

Strong understanding of information security standards and frameworks, including ISO standards Experience working with cloud technologies such as AWS or Azure Knowledge of security management systems and risk management methodologies Experience assessing security controls and their effectiveness Understanding of threat and vulnerability management processes Strong stakeholder … management and communication skills Experience delivering security assurance within complex project environments Ability to provide practical, risk-based security advice to both technical and non-technical audiences Desirable Experience Experience delivering security assurance services across multiple projects Security policy development and implementation Knowledge of Agile delivery and DevOps environments ...