101 to 125 of 305 Vulnerability Management Jobs in London

improvement plans, aligned to corporate priorities and the council’s ambitions for the borough. Direct and assure the outsourced Security Operations Centre and govern vulnerability management practice, holding providers and suppliers to account for service performance. Own the council’s cyber incident response plans and lead the response … building a cyber security function within a large, complex organisation, ideally within local government or the public sector. Strong working knowledge of security operations, vulnerability management and security compliance frameworks such as PSN, Cyber Essentials, PCI DSS and UK GDPR. Experience of leading the response to cyber security ...

DESCRIPTION Join us to directly influence the future of technology at JPMorganChase. As a Senior Security Architect - SecOps and Vulnerability Management, you'll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion for security and drive to make a real ...

libraries and templates that all three teams can reuse. Review code, infrastructure-as-code and configuration changes for security issues. Handle day-to-day vulnerability management, including pen test findings: prioritise what's genuinely exploitable, track fixes and check they've worked. Help run threat modelling sessions … IriusRisk and turn the results into backlog tickets. Look after secrets management, certificates and access reviews and keep security documentation, control evidence and CAB records up to date. Be the go-to person when security is blocking a delivery team, cover for the senior engineers when priorities shift ...

development standards, run threat modelling on the work that carries the most risk, and set the direction for how we handle cloud security, identity, vulnerability management and data protection. A big part of the job is lifting the security knowledge of the engineering and product teams so that … guardrails for our cloud environment, covering secure configuration, access and encryption, and support the people who put them into practice Decide how we judge vulnerability severity and remediation priority, and set the standards that engineering works to Design how we manage identity and privileged access, including strong authentication ...

Engineer (Endpoint Management and Intune) Business area Digital Services Location London Job ID 324994 Location – London, with hybrid working in line with departmental requirements Lane Clark & Peacock (LCP) is an award-winning partnership operating across pensions and benefits, investments, insurance, energy, health, sports and data analytics. We combine industry … continue to evolve, LCP is strengthening its End User Computing (EUC) engineering capability. This role will help drive improvements in endpoint governance, modern device management, application lifecycle management, automation and secure endpoint standards across the firm. The EUC Engineer (endpoint management and Intune) is responsible ...

MITRE ATT&CK to inform architecture decisions and prioritise controls. Shape security across the complete software delivery lifecycle, including secure SDLC, application security, vulnerability management and security assurance. Lead our approach to AI security architecture , defining guardrails for AI/ML and GenAI solutions and helping Quadient adopt … ownership of security architecture for modern software products and solutions. Strong knowledge of product and application security , including secure SDLC, threat modelling, vulnerability management and security testing. Strong understanding of cloud and platform security , alongside the ability to work with on‐premise and legacy environments. Experience defining security ...

automation, and growing the engineers around you. Key responsibilities Own the operation of our corporate security controls: endpoint hardening, identity and access, privileged access, vulnerability and patch management, and access reviews. Partner with our central Security team on policy, vulnerability management and incident response. They … runs the joiner, mover and leaver process itself; you own the platform it runs on and the evidence that access was revoked. Own endpoint management across a genuinely mixed Mac, Windows and Linux fleet, covering enrolment, baselines, patching and compliance reporting. Own device and asset lifecycle and SaaS ...

continuously improve DevSecOps practices across the delivery teams, including: Secure, automated CI/CD pipelines Security scanning integrated into build, test and deployment workflows Vulnerability lifecycle management, including allowlist processes and risk acceptance where required Secrets management and identity/access management Policy enforcement for workloads … leading others): CI/CD and GitOps (e.g. GitHub Actions, Argo CD, Argo Rollouts) Security and compliance tooling (e.g. Trivy scanning and vulnerability management, HashiCorp Vault, cert-manager) Containers and orchestration (e.g. Docker, AWS EKS) Infrastructure as Code (e.g. Terraform) Observability (e.g. Grafana, Loki) Scripting and automation (e.g. ...

games, systems and data. Day to day,the Senior Security Analystwill beresponsible for identifying, prioritising, and reducing organisational cyber risk through proactive exposure management,investigating alerts andresponding to incidents.The rolewill be maintaining and optimising Cyber Security tooling as well as contributing towards the increased use of automation and AI.The … applied across the whole Cyber Security teamto ensure vulnerabilities and exposures are identified, prioritized by risk, and remediated efficientlyandtoassist with security improvements and risk management activities. This role suits someone with broad cyber security experience who is looking to deepen their expertise and make a measurable impact ...

that welcomes you—because when you feel valued, you’re empowered to do your best work. Job Summary The Senior Controls Engineer, OT Fleet Management, is a regional technical leader responsible for advancing the security, reliability, supportability, and lifecycle health of operational technology systems across the data center fleet. … role combines deep industrial controls expertise with strong OT network, server, virtualization, database, and cybersecurity knowledge to lead Threat Vulnerability Management (TVM) execution for building management, supervisory control, power monitoring, and related OT platforms. This engineer will translate identified vulnerabilities and technology risks into executable remediation plans ...

Manage and execute operating system, middleware, application server, and Java platform patching, upgrades, and lifecycle maintenance across UNIX/Linux environments. Perform security hardening, vulnerability remediation, configuration management, cluster patching, rolling upgrades, rollback planning, disaster recovery validation, and post-patch testing while ensuring compliance with enterprise security … change management standards. Skills requireed for the role UNIX/Linux (RHEL, Solaris, AIX) Red Hat Satellite Ansible Oracle WebLogic OPatch JBoss EAP Java (JDK/JRE) JVM Tuning Security & Vulnerability Management Change Management Disaster Recovery Smoke Testing Disclaimer: This vacancy is being advertised by either ...

platforms and service providers, including coexistence, endpoint migration, telemetry validation, cutover, rollback and decommissioning. Define log-source onboarding, data connector, normalisation, retention, ingestion, cost-management and data-residency requirements across cloud, on-premises and third-party services. Develop detection and response architectures covering analytics rules, MITRE ATT&CK-aligned … cases, threat hunting, workbooks, watchlists, automation and SOAR playbooks. Design secure integrations with ITSM, CMDB, threat intelligence, vulnerability management, identity, network and incident response processes. Produce and own architecture artefacts including requirements, High-Level Designs (HLDs), Low-Level Designs (LLDs), reference patterns, design decisions, migration roadmaps, test criteria ...

Doing Security Leadership & Programme Ownership Define and execute the enterprise-wide security strategy Own capabilities across PAM, SIEM, EDR/XDR, DLP, vulnerability management, identity governance Translate regulatory obligations (FCA, PRA, ISO 27001, Lloyd’s) into practical, measurable controls Hands-On Security Engineering Implement and optimise controls across … portfolio of insurance clients Deliver security reviews, maturity assessments, and improvement plans Act as a trusted advisor on risk, controls, and security architecture Vulnerability & Risk Management Own scanning, assessment, and remediation across platforms Partner with engineering teams to prioritise and reduce risk exposure Drive continuous improvement in security ...

partner with Engineering leads to define security gating criteria. Provide expert-level remediation guidance for complex architectural flaws and critical code vulnerabilities; Enterprise Vulnerability & Risk Management: Own the end-to-end vulnerability management strategy for infrastructure and applications. Prioritise remediation efforts based on business risk ...

inefficiencies and implement automation to reduce manual effort and improve consistency and speed of response Embedding best practice frameworks and modern approaches, including exposure management, attack surface reduction and shift left principles Establishing metrics to track operational performance, efficiency gains and risk reduction outcomes Your skills and experience: Strong … understanding of cyber defence domains including vulnerability management, exposure management, SOC operations and threat intelligence Experience with security tooling such as vulnerability scanners, SIEM, EDR, identity security and attack surface management platforms Proven capability in automation using workflows, scripting or orchestration tools Knowledge of system ...

Manage and execute operating system, middleware, application server, and Java platform patching, upgrades, and lifecycle maintenance across UNIX/Linux environments. Perform security hardening, vulnerability remediation, configuration management, cluster patching, rolling upgrades, rollback planning, disaster recovery validation, and post-patch testing while ensuring compliance with enterprise security … change management standards. Skills requireed for the role UNIX/Linux (RHEL, Solaris, AIX) Red Hat Satellite Ansible Oracle WebLogic OPatch JBoss EAP Java (JDK/JRE) JVM Tuning Security & Vulnerability Management Change Management Disaster Recovery Smoke Testing #J-18808-Ljbffr ...

Security Controls . Experience developing and maintaining security policies, standards, procedures and control frameworks . Strong understanding of security governance and risk management principles . Experience conducting or supporting technology/security risk assessments and maintaining risk registers. Good knowledge of security control frameworks such … NIST CSF . Experience assessing control design and effectiveness , identifying gaps and supporting remediation. Understanding of key IT security disciplines including vulnerability management, patching, identity and access management, privileged access management and backup governance . Experience supporting internal or external audits, assurance reviews and compliance programmes ...

role offers the opportunity to develop broad expertise across information security, cyber resilience, risk management, and governance within a dynamic banking environment. The successful candidate will gain exposure to strategic initiatives, senior stakeholder engagement, and regulatory requirements, providing a strong foundation for career progression into senior Information Security, Risk … Management, Governance, and Resilience leadership roles. Essential Requirements 4+ years' experience in information and cyber security, preferably within banking or regulated financial services. Strong experience managing ISO 27001 ISMS, security risk assessments, audit and regulatory engagements. Sound understanding of data protection governance, operational resilience and third-party risk management. ...

role offers the opportunity to develop broad expertise across information security, cyber resilience, risk management, and governance within a dynamic banking environment. The successful candidate will gain exposure to strategic initiatives, senior stakeholder engagement, and regulatory requirements, providing a strong foundation for career progression into senior Information Security, Risk … Management, Governance, and Resilience leadership roles. Essential Requirements 4+ years' experience in information and cyber security, preferably within banking or regulated financial services. Strong experience managing ISO 27001 ISMS, security risk assessments, audit and regulatory engagements. Sound understanding of data protection governance, operational resilience and third-party risk management. ...

areas requiring attention. Produce clear reporting and insight for senior technology and business stakeholders . Identify opportunities to improve security governance, reporting, risk management and control effectiveness across the IT function. Partner with technical teams to help embed a culture of security, accountability and continuous improvement. You will ideally … Power BI. Experience managing or supporting IT/security risk registers and risk assessments . An understanding of IT security controls and disciplines, including vulnerability management, patching, identity and access management, privileged access management and backup governance . The ability to analyse complex information and turn ...

applicable security standards, policies and industry best practice. Essential Skills/Experience Information Security Strategy Security Assessment Technical Security Architecture Enterprise Security Architecture Stakeholder Management Desirable Skills/Experience Extensive Cybersecurity Technical Knowledge, with a strong understanding of modern cyber security principles, technologies, threats, vulnerabilities, and best practices across … automation, digital transformation and other evolving technologies. Experience of Digital Security Operations, including tracking adversary tradecraft, building an effective threat intelligence pipeline, monitoring, detection, vulnerability management and incident handling. Membership of a professional body desirable e.g. CISSP, CISM, CCISO, GIAC certifications, CRISC. Experience driving change across a complex ...

responsibilities Providing security expertise across security standards and accreditations, measure and control the effectiveness of the security controls framework and maintain the Information Security Management System. Deriving and delivering documented Information Security Management Plans which incorporate Regulatory, Legal and Compliance in relation to applicable security policies. Standards … identification of identified risks and emerging cyber security vulnerabilities and threats. The subsequent analysis to quantify and lead risk mitigation plans Work with Service Management to ensure that partners and suppliers adhere to agreed standards, policies and verify/evidence appropriate compliance and security KPIs Work closely with ...

broad, hands-on role suited to an experienced infrastructure professional who enjoys ownership and variety. You'll be responsible for the day-to-day management, security and development of the organisation's IT estate, while helping shape its future technology strategy as the company continues to scale. The Role … take ownership of core IT systems and infrastructure, providing a blend of operational support, systems administration, cloud management and cybersecurity oversight. Key responsibilities include: Managing and supporting Microsoft 365, including Entra ID, Exchange Online, Teams, SharePoint, OneDrive and Intune Administering Google Cloud Platform (GCP), including IAM, networking, monitoring ...

British Airways the sky is never the limit. Junior Cyber Product Owner The Junior Cyber Product Owner supports the delivery and management of cybersecurity products and services across the organisation. Working with product owners, security engineers, and stakeholders, the role helps define product requirements, prioritise features, and ensure that … alignment across related products Skills, capabilities & experience Strong understanding of cybersecurity principles, frameworks, and domains (e.g. NIST, ISO 27001), including cloud security, identity management, and vulnerability management Experience working with or across cloud platforms such as AWS, Azure, or GCP, ideally with a focus on security controls ...

Device Platform Engineering Manager, you will own and be responsible for the engineering and service for all enterprise, end user devices and the endpoint management platforms across a multi-site, device-diverse Retail estate. This will include the endpoint management platform and device roadmap, engineering backlog, aligned … standards. You will lead and develop a high-performing team, including managed service partners, to standardise, secure and continuously improve endpoint engineering, operations and management services. The role will deliver secure, reliable, low-friction device experiences for colleagues across Stores, Distribution Centres and Support Centre offices. Drive transformation targeting ...