126 to 150 of 305 Vulnerability Management Jobs in London

major infrastructure incidents and service disruptions through to resolution. Track and report on operational KPIs, SLAs, service performance, and capacity metrics. Maintain infrastructure lifecycle management plans covering hardware, software, cloud services, and supporting technologies. Technical Leadership Lead and develop the infrastructure team, mentoring and setting standards while remaining hands … efficiency. Infrastructure Security & Compliance Implement and maintain infrastructure security controls in line with internal policies, regulatory obligations, and risk requirements. Support and run vulnerability management, patching, endpoint protection, privileged access controls, and infrastructure monitoring. Support security assessments, penetration testing, audit activities, and regulatory reviews. Ensure infrastructure services meet ...

Application Firewall (WAF), API Security and bot protection capabilities. Strong hands on experience with Web Application Firewalls (WAF), including policy design, rule tuning, exception management and application onboarding. Good understanding of OWASP Top 10 and OWASP API Security Top 10. Knowledge of HTTP/S, REST APIs and application … layer attack mitigation. Experience with vulnerability management, Qualys and attack surface monitoring tools. Understanding of patch management and vulnerability remediation. Strong stakeholder engagement and communication skills. Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community ...

monitoring, and alerting tools Security & Compliance Practical experience implementing ISO27001 and SOC2 controls Knowledge of OWASP methodologies and secure development lifecycle practices Experience with vulnerability management, PAM, secrets management, and secure access Platform & Operations Excellence Experience running and scaling highly available SaaS platforms Strong understanding … incident management, and operational best practices Experience implementing BCP/DR solutions across cloud and on-prem Leadership & Delivery Proven leadership experience managing technical teams (5+ years) Ability to lead multiple complex initiatives end-to-end Strong stakeholder management and communication skills Ability to balance business priorities with ...

frameworks (MoD and HMG experiences helpful) Cloud-based cyber security principles and architecture points Boundary controls, network segmentation and access control Identity and Access Management (including RBAC and A/PBAC, permissions management) Cryptographic techniques and implementations IT asset management and tracking Vulnerability Management ...

helping to keep our infrastructure secure and compliant and our staff safe and productive. You'll be working on projects covering identity and access management, cloud and network security, vulnerability management, security monitoring, security hardening, compliance reviews, and more. It's a very varied role with lots … qualifications are a plus) Experience with Infrastructure as Code and infrastructure provisioning tools, particularly Terraform Experience configuring GCP-native security posture and threat management with Security Command Center Experience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact Analysis Experience with key and secret management ...

team includes the Chief Data Office, Chief Software Office, Chief Technology Office, Emerging Technology, Shared Technology Services, Technology, Risk and the Executive Program Management Office (EPMO). Driven by our investment in cutting‐edge technologies like AI and cloud solutions, we’re home to a diverse range of roles … About The Role The Endpoint Engineer is a key technical contributor within the global infrastructure organization, providing advanced (Tier 2/3) support, endpoint management, and platform engineering across Windows, Microsoft Intune, and related technologies. This role delivers secure, reliable, and frictionless user experiences through modern device management ...

resilience and influencing strategic technology decisions. As a senior technical authority, you will provide expertise across server platforms, enterprise application hosting, backup and recovery, vulnerability management, platform monitoring, performance optimisation and infrastructure lifecycle management. You will act as a trusted subject matter expert, helping to ensure critical technology … technical leadership within complex enterprise environments. As a Workplace Platforms Principal Engineer, you will act as a senior technical authority, driving platform strategy, lifecycle management, service resilience and continual improvement across critical infrastructure services. In addition to this, the ideal candidate will: Have proven experience as a senior infrastructure ...

helping to keep our infrastructure secure and compliant and our staff safe and productive. You'll be working on projects covering identity and access management, cloud and network security, vulnerability management, security monitoring, security hardening, compliance reviews, and more. It's a very varied role with lots … qualifications are a plus) Experience with Infrastructure as Code and infrastructure provisioning tools, particularly Terraform Experience configuring GCP-native security posture and threat management with Security Command Center Experience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact Analysis Experience with key and secret management ...

supporting the firm's engineering, trading, data and corporate technology platforms. The position drives automation, infrastructure-as-code adoption, operational simplification and technology lifecycle management, enabling Platform Engineering to provide stable foundations for application delivery, data platforms, AI workloads and business‐critical services. Main Responsibilities Lead the Platform Operations … team responsible for compute, virtualisation, storage, backup, network services, operating systems, patch management and core infrastructure platforms. Own operational performance, availability, capacity and resilience of infrastructure services across on‐premise, co‐located and cloud‐hosted environments. Establish infrastructure standards, operational procedures and engineering practices that promote automation, repeatability ...

standards, and governance frameworks. Provide expert guidance on OT cyber risk, controls, investments, and best practices. Lead OT cybersecurity audits and remediation activities. Risk Management & Compliance Conduct OT cyber risk assessments and vulnerability reviews. Identify, assess, and mitigate risks across industrial and operational environments. Ensure compliance with industry … during security events. Monitor emerging OT threats and vulnerabilities. Asset Security & Continuous Improvement Maintain visibility of OT assets, systems, and communication networks. Oversee OT vulnerability management, patching, and remediation programmes. Ensure secure configuration and lifecycle management of industrial assets. Drive continuous improvement across OT security controls ...

better regulatory decisions and build greater cohesion across our broad financial services remit. Significant improvements in digital enablement, business intelligence, market data and information management maturity are all being pursued to maintain our position as a world leader in financial services regulation. In March 2025, the FCA launched … detect, and recover from disruption, failure, or exploitation. The role brings together operational resilience, infrastructure governance, supplier oversight, and enterprise technology and AI‐specific vulnerability management, ensuring that both traditional infrastructure and AI‐enabled systems are designed, operated, and governed to remain safe, dependable, and trustworthy under stress. ...

serve government customers who have no tolerance for downtime or data compromise. Key Responsibilities Own the security posture of the Spaceflux platform: threat modelling, vulnerability management, penetration test remediation, and incident response. Design and maintain secure CI/CD pipelines, integrating SAST, DAST, dependency scanning, and container security … tooling. Manage cloud infrastructure (Azure) using infrastructure-as-code, with security controls, secrets management, and least-privilege access enforced by default. Lead on compliance requirements for UK Government programmes, including Cyber Essentials Plus, ISO 27001, and defence data handling standards. Work with engineering to define and enforce secure coding ...

dedicated liaison between UK Sovereign technical security teams and customers, ensuring transparency, trust, and proactive communication. The Senior Trust Analyst will track and report vulnerability remediation activities in a structured Plan of Action and Milestones (POA&M) format, deliver regular security status updates, and translate complex technical information into … Maintain the public trust center and UK Sovereign customer-facing documentation, ensuring security whitepapers, certifications, and standard responses remain current and reusable. Security Posture & Vulnerability Reporting Security Posture Assessment: Collaborate closely with UK Sovereign technical and engineering teams to understand and assess the current security posture of UK Sovereign ...

service offerings. Contribute to the development and presentation of compelling client proposals collaborating with teams across our business. Contribute to documented Information Security Management Plans which incorporate Regulatory, Legal and Compliance in relation to applicable security policies. Standards and guidelines Contribute to the identification of identified risks and emerging … cyber security vulnerabilities and threats. The subsequent analysis to quantify and lead risk mitigation plans Work with Service Management to ensure that partners and suppliers adhere to agreed standards, policies and verify/evidence appropriate compliance and security KPIs Work closely with 1st, 2nd and 3rd lines of defense ...

security monitoring platforms Support Layer 7 and web security initiatives including WAF, reverse proxy, API protection and edge security controls Support implementation and operational management of edge security platforms such as Cloudflare or similar technologies Support vulnerability management, remediation and infrastructure and networking security assessments across cloud … support the implementation, tuning and operational maturity of endpoint security, EDR and Microsoft Defender capabilities across infrastructure, corporate and production environments Support identity, access management and privileged access security initiatives across infrastructure environments Continuously evaluate emerging infrastructure threats, attack vectors and security tooling to strengthen the organisation's security ...

applications Improving security monitoring, detection engineering and incident response Supporting complex and high‐severity security incidents alongside internal teams and external SOC partners Strengthening vulnerability and exposure management using threat intelligence, exploitability and business risk Automating security processes using Python, PowerShell, Logic Apps, Azure Functions and APIs Supporting … cloud, endpoint, data, network and application security Experience with threat modelling and security architecture reviews Exposure to detection engineering, incident response, threat hunting and vulnerability management Security automation or scripting experience Knowledge of Zero Trust, ISO 27001, Cyber Essentials Plus and NIST CSF The ability to communicate technical ...

minimal oversight, collaborating with global IT teams to protect Medpace’s systems; Own the administration and reliability of key security platforms, including privileged access management, EDR, and SIEM; Coordinate platform upgrades and fixes proactively; Lead cross-functional security projects from planning through execution; Coordinate with stakeholders across departments … Active Directory, networks, and cloud architectures; Experience securing Azure cloud architectures; Hands‐on experience with SIEM, endpoint detection and response, identity or privileged access management, and cloud security tools; Excellent communication and documentation skills; Ability to explain complex security concepts to technical and non‐technical stakeholders; Strong analytical ...

communicate Flo’s security strategy and roadmap, promoting strong shared security ownership culture. Security Programme: Oversee all aspects of Flo’s security programme, risk management, security architecture, product security, and security operations, including embedded security engineering functions. Data Protection & Governance: Define and enforce standards for storing, protecting, and deleting … Act. Third-Party & Supply-Chain Risk: Establish evaluation criteria and ongoing governance controls for vendors, SDKs, and external partners accessing internal environments or data. Vulnerability Management: Oversee the management life cycle of code, third party and platform vulnerabilities, ensuring remediation paths are transparent, risk-based, and tracked ...

world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered the company ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose … server OS configuration, TCP/IP networking hardware, protocols, LAN and WAN technologies & configurations, and network design) and/or IS (ideally PKI, firewall management, IDS & IPS, vulnerability management, and network scanners), in engineering, administration or support roles Familiarity with cryptographic principles, digital certificates, and PKI concepts. ...

service offerings. Contribute to the development and presentation of compelling client proposals collaborating with teams across our business. Contribute to documented Information Security Management Plans which incorporate Regulatory, Legal and Compliance in relation to applicable security policies. Standards and guidelines Contribute to the identification of identified risks and emerging … cyber security vulnerabilities and threats. The subsequent analysis to quantify and lead risk mitigation plans Work with Service Management to ensure that partners and suppliers adhere to agreed standards, policies and verify/evidence appropriate compliance and security KPIs Work closely with 1st, 2nd and 3rd lines of defense ...

vulnerabilities from cyber-attacks by developing a security road-map tailored to your unique needs. We help organisations improve processes such as threat management by building an identity management programme, and establishing prevention, detection and response capabilities to cyber-attacks. The SOC Team Lead drives performance and operational … mitigation strategies Strong leadership and communication skills with the ability to guide teams in high-pressure scenarios Experience working with SIEM, EDR, and vulnerability management platforms Understanding of risk-based prioritisation and regulatory compliance considerations Willingness to support out-of-hours activities based on threat levels or response ...

Azure DevOps CI/CD pipelines, including static analysis, dependency scanning, and IaC scanning. Ensure Kubernetes workloads follow best practices: RBAC, network policies, secrets management, image security, and ingress protections. Support secure configuration of Azure VMs hosting legacy or specialised products. Vulnerability Management Operate and enhance container … vulnerability scanning. Monitor CVEs relevant to Centellic’s stack and coordinate remediation activities with engineering teams. Perform regular reviews of Terraform modules, container images, Helm charts, and AKS configurations to identify misconfigurations and risks. Monitoring, Detection & Incident Response Work with monitoring tooling (e.g., Datadog or Azure Monitor) to detect ...

internal teams.* Analyze and validate potential security incidents, ensuring accurate classification, documentation, and escalation.* Perform daily operational information security tasks, including the management and resolution of ServiceNow incidents assigned to the Information Security team.* Support incident response efforts through investigation, coordination, and detailed documentation of findings.* Participate occasionally … appropriate logging, monitoring, and alerting capabilities are in place across systems.* Work closely with the IT Service Desk, Operations, and development teams to support vulnerability identification and ensure remediation is prioritised and delivered within agreed SLAs.* Work closely with global and regional stakeholders to support consistent security operations ...

stakes customer procurement reviews, vendor risk assessments (DDQs), and defense customer evaluations. Oversee Security Operations: Build and manage internal incident response capabilities, continuous monitoring, vulnerability management, and employee security awareness programs. What we are looking for Progressive Experience: 6–10 years in cybersecurity (e.g., Lead Security Architect, SecOps … Track Record: Proven experience taking a high‐growth technology company through SOC 2 Type II or ISO 27001 certifications from start to finish. Stakeholder Management: Exceptional ability to bridge technical security requirements with business strategy for executives, developers, and defense customers alike. Certifications/Credentials: CISSP, CISM, CCSP ...

automation, orchestration and use of technology. Supporting the implementation and adoption of SOAR and other automation capabilities. Working alongside other MSSP services such as Vulnerability Assessment, Vulnerability Management, MDR, SIEM and incident response . Improving processes, procedures, playbooks and operational standards. Developing and mentoring the existing ...