176 to 200 of 366 Vulnerability Management Jobs in London

services by identifying, investigating and helping to contain cyber threats across a 24x7x365 multi-customer CSOC. The role converts security telemetry, threat intelligence and vulnerability information into timely, evidence-led decisions. Success is demonstrated through accurate alert disposition, complete incident records, decisive escalation, effective handovers and practical improvements … evidence-based rationale and escalate material risk without delay.• Create and maintain complete, accurate cyber security incident records in the relevant IT service management (ITSM) tool, ensuring that evidence, timestamps, affected assets, indicators, actions, ownership and escalation decisions support effective response, handover and audit.• Correlate logs and events across ...

part of our security team, you’ll grow your skills, collaborate with talented colleagues, and make a real impact on our technology risk management efforts. We offer a supportive environment where you can develop your career and contribute to a culture of innovation and security. Be part … forthe LOB risk assessment, governance, standardization, and measurement across all the Cyber domains. Your primary focus will be leading and managing the Security Configuration Management domain. This role ensures that foundational and advanced controls across platform, network, endpoint and application security configuration are governed by clearly defined standards ...

Engineer to own security tooling and lead end-to-end security engineering projects in a Microsoft environment. You will work across identity and access management, cloud security, vulnerability management and SIEM/detection, with a focus on SSO improvements and Zero Trust initiatives. The role suits ...

mobile, FIX, and trading platforms. Lead complex global security initiatives, build custom AI-powered tooling to maximize efficiency and scale the cybersecurity program. Assess vulnerability risks, deliver actionable recommendations across all technical levels, and track health metrics and KPIs for executive reporting. Drive high-impact projects and adapt … platforms (AWS, Azure, or GCP). Proficient in programming languages like C/C++, Java, JS, Python, Go, or Rust. Deep understanding of common vulnerability frameworks (OWASP Top 10, SANS CWE Top 25). Solid grasp of enterprise software development, Agile, CI/CD pipelines, and security tooling (SAST ...

solutions, identify security risks and ensure security is embedded throughout the design and delivery lifecycle. Combining deep technical expertise with strong consulting and stakeholder management skills, the role will involve leading security architecture reviews, advising on security controls, supporting technical assurance and helping delivery teams implement robust, secure … security controls. Review complex technical solutions to ensure alignment with security, regulatory and business requirements. Conduct and support threat modelling, cyber risk assessments and vulnerability assessments. Provide technical oversight and recommendations for security testing and penetration testing activities. Support vulnerability management, helping teams prioritise and remediate security ...

Requirements Experience: Significant cybersecurity background within highly regulated environments (e.g., Financial Services). Technical Skills: Strong foundation in Cloud/SaaS risk, Identity & Access Management (IAM), threat/vulnerability management, and Application Security. GRC Expertise: Deep capability in cyber risk articulation, control mapping, and issue management. Soft ...

Requirements Experience: Significant cybersecurity background within highly regulated environments (e.g., Financial Services). Technical Skills: Strong foundation in Cloud/SaaS risk, Identity & Access Management (IAM), threat/vulnerability management, and Application Security. GRC Expertise: Deep capability in cyber risk articulation, control mapping, and issue management. Soft ...

part of our growing business. Job purpose: The Systems and Infrastructure Engineer will be responsible for the day-to-day management, security, maintenance and compliance of the organisation's internal infrastructure platforms. Be part of project teams as required to renew current systems and deploy new solutions. Ensure that … security patches, vendor bug fixes and firmware/software updates within agreed timescales and defined security and hardening standards. Monitor vendor security advisories and vulnerability notifications and assess their relevance and impact. Identify and remediate vulnerabilities across the infrastructure estate based on risk and defined remediation SLAs. Ensure infrastructure ...

looking for a DV cleared Microsoft Support Engineer to provide day-to-day support and operational management of Microsoft server, identity,and application services within a managed service environment. You will be responsible for incident resolution, monitoring, maintenance, patching, service requests, and operational changes across a range of Microsoft … audit logs,performance counters and telemetry to identify service degradation. Proactively identify trends,capacity concerns and potential service risks. Support root cause analysis andproblem management activities. Maintain monitoring thresholdsand alerting configurations. Microsoft Identity Services Administration Administer Microsoft ActiveDirectory Federation Services (AD FS). Manage Device RegistrationServices (DRS) and device ...

cyber security best practices across the business. Administer security tools, including multi-factor authentication (MFA), mail filtering and Anti-Virus software. Participate in vulnerability management, incident response coordination, and system security reviews. Help maintain system documentation, asset registers, and compliance records in line with IT policies and data … Documentation Maintain up‐to‐date documentation of IT systems, configurations, procedures, and security protocols. Support the continuous improvement of IT operational processes and incident management workflows. Skills & Experience Required Proven experience in a Systems Analyst, IT Support Analyst, or Desktop Support role, ideally within a retail, luxury, or manufacturing ...

connections, and stand alone servers. Performing audit and benchmarking across the cloud environments to ensure optimal level of security controls are implemented (such as vulnerability management) and to help drive future initiatives. Prepare and enforce standards and guidelines for cloud security, including standard builds, configurations, and automation processes … third party security technologies within a cloud environment (ie, firewalls, IDS/IPS). Experience in design, documentation and configuration of Identity and Access Management solutions. Experience in securing cloud container environments. Working knowledge of cloud security standards including NIST, CIS, and ISO. Performed risk analysis and documented ...

network, endpoint, and cloud infrastructure. Key Responsibilities: Design and implement security solutions (firewalls, EDR, cloud security controls) Lead incident response, investigation, and remediation Conduct vulnerability assessments and drive risk mitigation Manage SIEM and security monitoring tools Advise clients on best practices and compliance (Cyber Essentials, ISO 27001, NIST, GDPR … endpoint security (Microsoft Defender, Sophos, etc.) Network security (VLANs, VPNs, TCP/IP, DNS) Azure and/or AWS security configuration Incident response and vulnerability management experience Comfortable working in a fast-paced MSP environment What's on Offer: £55k DOE Hybrid working (London-based) 22 days holiday ...

Compliance departments across all regions. This role ensures that projects are designed, developed, and implemented in accordance with established security policies, standards, risk management requirements, and compliance obligations ESSENTIAL JOB FUNCTIONS: Understand, advocate, and influence alignment with business and IT strategy, ensuring security architecture supports enterprise objectives Analyze business … enterprise guardrails Participate in security incident investigations as needed, providing architectural guidance and root cause insight Support internal and external audits, penetration testing, and vulnerability assessments by contributing to responses and recommending risk mitigation actions Assist in developing, formalizing, and maintaining security policies, procedures, and technical standards, and support ...

with other engineering and security teams to embed security best practices Automation to support security tooling like SIEM tooling log ingestion Firewall and network management within hybrid cloud and on-premises environments Develop and maintain security policies, standards and procedures Conduct security assessments in the form of infrastructure reviews … Azure, and GCPservices Proficiency in scripting or programming (Python, Bash, PowerShell) Excellent problem-solving, analytical, and communication skills Experience with IDS/IPS solutions, vulnerability management, and endpoint security Familiarity with AI hardening techniques Experience in working within SOC teams Familiarity withIaCtechnologies (CloudFormation, Terraform, Bicep) Note: This rolemayrequire ...

will own the planning and delivery of a risk-based technical assurance programme, providing independent oversight of security controls across infrastructure, cloud, identity, applications, vulnerability management, data security and incident response capabilities. The role combines technical cyber security expertise, assurance methodology, stakeholder engagement and leadership. You'll engage … Cybersecurity Framework NIST 800-53 CIS Controls MITRE ATT&CK Experience producing board-level reporting and translating technical findings into business risk. Excellent stakeholder management skills, with the ability to challenge constructively and influence senior leaders. Desirable Experience Continuous Controls Monitoring (CCM) platforms. Automated assurance and evidence collection. PowerShell ...

administration of Mimecast email filtering system including email review and release. * Day-to-day administration of CyberArk identity and privileged access management tooling. * Microsoft Purview administration including DLP policy monitoring, sensitivity labels, Discovery Searches and compliance alerts. * Maintain and respond to security-related DDQs, keeping the security evidence library … success in the role. * Hands-on experience with Netskope - web filtering, CASB and cloud security and/or CyberArk - identity and privileged access management would be highly desirable skills. * Experience with Rapid7, InsightVM or InsightIDR for vulnerability management and SIEM would also be highly desirable. * Experience ...

business. Working within a small, agile team, you will combine project delivery with day-to-day operational responsibility across Azure, Microsoft 365, identity, endpoint management, servers and enterprise networking. You will lead technical work from initial requirements and design through to implementation and handover, working independently while ensuring solutions … Conditional Access, application integrations, identity governance and access controls. Manage Microsoft 365 services, including Exchange Online, Teams, SharePoint and Power Platform governance. Own endpoint management through Intune and Autopilot, including Windows 11 deployment, application packaging and patch management. Deliver and support office and WAN networking, including Cisco Meraki ...

helping to keep our infrastructure secure and compliant and our staff safe and productive. You'll be working on projects covering identity and access management, cloud and network security, vulnerability management, security monitoring, security hardening, compliance reviews, and more. It's a very varied role with lots ...

found internally or via the firm’s Managed Security Service Providers Review security context alerts and logs using the firm’s security information event management platform (SIEM) or other tools Build dashboards and custom SIEM queries as need to facilitate detection, response and other use-cases. Serve … response tools Significant experience with and expertise in conducting security event analysis and incident response. Significant experience and expertise in using security information event management platforms (SIEM) for searching and correlating events including; building complex searches and correlation rules Strong knowledge of networking concepts including; DNS, switching, routing ...

default for our engineering teams, from design and code through to the pipelines that release it. You will own our Application Security Posture Management (ASPM) platform, Ox Security, and ensure its findings translate into effective remediation. This includes reducing noise, prioritising vulnerabilities that are genuinely exploitable and partnering closely … materials (SBOMs) and build provenance Define pre-deployment cloud guardrails through policy-as-code, in partnership with our Senior Security Engineer (Cloud & SecOps) Vulnerability management and remediation Own Ox Security as our ASPM platform, including policy tuning, noise reduction and the prioritisation of findings based on reachability ...

Asset & Configuration Management Lead - Permanent, £80k - £85k plus package, London Hybrid We're working with a global organisation to find an Asset & Configuration Management Lead. You'll own the CMDB and the asset lifecycle across a large international technology estate, and make sure the data in both … owner role. You set the standards, governance and roadmap, and sit alongside the other ITSM practice owners to make sure Change, Incident, Problem and Vulnerability Management are working from accurate configuration data. What you'll be doing Owning the Snow system data and ServiceNow CMDB: CI model, data ...

running threat hunts mapped to MITRE ATT&CK Hardening our Microsoft environment across Entra ID, Intune, Defender for Endpoint and Azure, and owning the vulnerability management lifecycle Administering our email, web and data security controls, and running the phishing simulation and awareness programme Producing audit evidence and monthly … Intune Demonstrable incident response experience Experience working with or alongside a managed SOC or MSSP Clear, concise written communication, from incident reports to management-ready metrics It would be a bonus if you also have: KQL and MITRE ATT&CK knowledge Microsoft ...

related risks that impact our infrastructure, products, trading systems, and internal operations. You will contribute to the design and execution of our risk management framework across traditional cyber domains (cloud security, infrastructure, application security, third-party risk, regulatory compliance) while also helping establish foundational governance controls for AI systems … required; we’re happy to invest in the right candidate. Things You Get To Do: Support the execution of Alpaca’s cybersecurity risk management program Conduct cyber risk assessments across cloud infrastructure , APIs, trading systems, and internal platforms Assist in identifying, documenting, and evaluating AI-related risks (model risk ...

Babcock’s people, information, systems, programmes and customers. You will transform complex threat data into actionable intelligence that supports proactive cyber defence, incident response, vulnerability management and risk reduction activities across the organisation.Day-to-day, you’ll work closely with Security Operations, Incident Response, Security Assurance and business ...

ideally have: Significant experience designing, implementing and managing application security programmes and tooling. Strong knowledge of application security practices, secure coding principles and vulnerability management. Experience working with SCA, SAST, DAST and related application security technologies. Strong experience integrating security into CI/CD pipelines and DevSecOps environments. Experience ...