201 to 225 of 366 Vulnerability Management Jobs in London

mobile, FIX, and trading platforms. Lead complex global security initiatives, build custom AI-powered tooling to maximize efficiency and scale the cybersecurity program. Assess vulnerability risks, deliver actionable recommendations across all technical levels, and track health metrics and KPIs for executive reporting. Drive high-impact projects and adapt … Azure, or GCP). Proficient in programming languages like C/C++, Java, JS, Python, Go, or Rust. Possess a deep understanding of common vulnerability frameworks (OWASP Top 10, SANS CWE Top 25). Solid grasp of enterprise software development, Agile, CI/CD pipelines, and security tooling (SAST ...

corporate systems Partner with engineers on threat modelling, architecture reviews and secure design for new AI and document-processing features Operate and automate our vulnerability management, security testing, secrets management, access controls, logging and detection capabilities Maintain and exercise our incident response programme, including playbooks, simulations, investigations ...

supporting infrastructure. Support services across AWS, Microsoft Azure and Microsoft 365. Maintain patching, monitoring, backups, access controls and secure configurations. Support identity and access management, including onboarding and offboarding. Investigate infrastructure and security issues and elevate where appropriate. Maintain accurate system documentation, inventories and operational procedures. Support backup restoration … time. Maintain ISMS documentation, policies, asset records, risk records and corrective actions. Coordinate activities such as access reviews, supplier reviews, security awareness and vulnerability remediation. Gather and maintain evidence for internal and external audits. Track audit findings and remediation actions through to completion. Help ensure documented controls remain aligned ...

give the business clear, practical advice. This role sets security and privacy requirements, advises and assures. Overall responsibility for; Information Security the management of Information Security within the business; maintaining ISO 27001:2022 and Cyber Essentials certification, chairing the ISMS Board and running the ISMS day to day - policies … risk management, controls, evidence and internal audits; liaising with Engineering, Product and Data & AI on information security threats and vulnerabilities and recommending mitigations; Information Security incident management and remediation; managing the Application and Infrastructure penetration testing and vulnerability management process, tracking findings to closure; leading ...

optimise hosting and service costs. Manage infrastructure risks, incidents and service improvements. Maintain effective backup, recovery and disaster recovery capabilities. Own the operational management of Microsoft 365 and collaboration services. Manage Entra ID, authentication, conditional access and identity governance controls. Support secure user onboarding, changes and offboarding. … user device standards, endpoint management and device lifecycle processes. Ensure endpoint protection, anti-virus and device compliance controls are maintained. Manage technology suppliers, including service reviews, KPIs and improvement plans. Ensure patching and vulnerability remediation activities are completed. Support security incident response, business continuity and operational resilience testing. ...

protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. Reviewing vulnerability scan results and working with technical teams to prioritise fixes. Keeping accurate incident records and producing clear reports on findings and recommended actions. Supporting … role with security responsibilities. A good understanding of networking, operating systems and common attack techniques. Familiarity with security monitoring, endpoint protection or vulnerability management tools. Strong problem-solving skills and attention to detail. The ability to explain technical findings clearly to different audiences. A proactive approach to learning ...

Define and maintain target-state architecture for Microsoft Azure, cloud and hybrid technology platforms. Define reference architectures and reusable patterns for Azure landing zones, Management Groups, subscriptions, networking, identity, compute, storage, monitoring and governance. Establish architectural principles and guardrails covering Azure Policy, RBAC, PIM, private connectivity, resource organisation, logging … Vault, encryption, certificates and secrets management. Define architecture patterns aligned with Zero Trust principles across identity, networks, applications and cloud platforms. Ensure security, vulnerability management, hardening, logging and monitoring requirements are incorporated into reference architectures and solution designs. Work closely with Information and Cyber Security to ensure platform ...

strategy and roadmap. Own and continuously improve ISO 27001 and Cyber Essentials Plus. Lead security operations and manage an outsourced SOC. Oversee incident response, vulnerability management and remediation. Manage external security partners and specialist suppliers. Lead and mentor the Information Security team. Work closely with senior stakeholders across … improving ISO 27001 and security governance. Experience managing outsourced SOC and security partners. Strong knowledge of security operations, threat detection, incident response and vulnerability management. Good understanding of Microsoft/Azure, cloud security, SaaS assurance and security architecture. This is a senior leadership opportunity to shape and mature ...

someone who enjoys both building and securing. About Legatics Legatics is one of the world's leading LegalTech scale-ups. Our legal transaction management platform enables law firms and their clients to collaborate on and close deals in an interactive online environment, providing clarity, reducing risk and saving time. … access control design. Embed security into our software development lifecycle through threat modelling, secure code review and security requirements for new features. Perform vulnerability and exploitability analysis, including CVE triage and dependency risk, and prioritise remediation with engineers based on real exposure. Operate and consolidate our security scanning ...

product teams to identify and mitigate security risks and strengthen the organisation's overall security posture. The successful candidate will contribute to security architecture, vulnerability management, threat detection, incident response, and secure engineering practices. Success will be measured through effective risk reduction, reliable security controls, timely remediation … with employee contribution options. 02 Responsibilities 01 Design, implement, and maintain cybersecurity controls across cloud, infrastructure, applications, and corporate systems. 02 Conduct security assessments, vulnerability analysis, and technical risk reviews. 03 Identify security weaknesses and work with engineering teams to develop and implement remediation plans. 04 Support threat detection ...

team in London (Hybrid) . This is a hands‐on opportunity for someone who enjoys working across Security Service Edge (SSE), Zero Trust, exposure management and cyber asset visibility , while working directly with customers to improve their security posture. What you’ll be doing Deploy, configure and operate enterprise … configuration changes Operate and optimise SSE capabilities including SWG, CASB, DLP, ZTNA and RBI Support Zero Trust and conditional access initiatives Run exposure and vulnerability management programmes aligned to CTEM Identify, validate and prioritise vulnerabilities based on real-world exploitability and business impact Use CAASM platforms to identify ...

within large complex organisations, developing secure solutions that align with enterprise architecture strategies and long-term business objectives. Strong expertise in cyber security risk management and threat mitigation with experience identifying vulnerabilities, assessing risks and implementing effective security controls to protect critical services and data. Knowledge of identity … access management technologies and security protocols, with experience applying security principles across modern digital and cloud-based environments. Strong communication and stakeholder engagement skills, with the ability to influence decision-making, provide expert security guidance and develop capability across multidisciplinary teams and architecture communities. You and your role ...

contributes to project planning, ensures system reliability, security, and performance, and independently drives the resolution of complex system issues. This role also supports change management processes and promotes automation and operational efficiency in a DevOps-oriented environment. Key Responsibilities:· Diagnose and resolve complex system and performance issues in cloud … Monitor system health and proactively address risks to stability, performance, and security· Design and implement system configurations, improvements, and automation· Support and execute change management processes, including impact assessment· Develop and maintain infrastructure as code and operational scripts· Collaborate with development, support teams, and vendors to deliver reliable solutions ...

contributes to project planning, ensures system reliability, security, and performance, and independently drives the resolution of complex system issues. This role also supports change management processes and promotes automation and operational efficiency in a DevOps-oriented environment. Key Responsibilities: Diagnose and resolve complex system and performance issues in cloud … Monitor system health and proactively address risks to stability, performance, and security Design and implement system configurations, improvements, and automation Support and execute change management processes, including impact assessment Develop and maintain infrastructure as code and operational scripts Collaborate with development, support teams, and vendors to deliver reliable solutions ...

contributes to project planning, ensures system reliability, security, and performance, and independently drives the resolution of complex system issues. This role also supports change management processes and promotes automation and operational efficiency in a DevOps-oriented environment.**Key Responsibilities:** · Diagnose and resolve complex system and performance issues in cloud … Monitor system health and proactively address risks to stability, performance, and security· Design and implement system configurations, improvements, and automation· Support and execute change management processes, including impact assessment· Develop and maintain infrastructure as code and operational scripts· Collaborate with development, support teams, and vendors to deliver reliable solutions ...

business teams to strengthen our security posture while enabling innovation and operational excellenceWhat you'll be doing: Lead and manage our third-party risk management (TPRM) programme, ensuring suppliers and partners meet security requirements. Drive governance, risk and compliance (GRC) activities, helping the business identify, assess and mitigate information … risks. Own and deliver security improvement projects that strengthen our overall security posture across global operations. Act as the primary lead for security incident management, coordinating responses and driving lessons learned activities. Collaborate with business and technology stakeholders to assess compliance against security controls and identify remediation priorities. Develop ...

with the curiosity and commercial instinct to work across the rest. Strong understanding of core cyber security domains including IAM, data security, incident response, vulnerability management, network security, business continuity and monitoring. Experience assessing and evidencing controls against recognised frameworks such as NIST CSF, CIS Controls ...

existing Senior AppSec Engineer and Security Architect, strengthening our capacity and resilience as we continue to mature our security services. This is not a vulnerability management position. It is true engineering‐led AppSec, shaping secure design, embedding controls into CI/CD, operating core security services and getting ...

risk to business value with a practical, adaptable and innovative approach, then this is the role for you. Key Responsibilities Risk Management: Work closely with technology teams and clients to develop an accurate and current understanding of the risk picture, and articulate and report on it consistently and effectively … measurable improvements in control efficacy and analyst capacity. Core GRC Services: Contribute to and mature the core services we provide, including third-party risk management, the policy and standards framework, and security awareness and training content, making each scalable, measurable and automated wherever practical. Function Development: Support the development ...

Software Solutions in London/Hounslow area is seeking a Cyber Security Analyst to support information security, risk management, governance and compliance activities. You will conduct risk assessments, audits and vulnerability management to strengthen the organization’s security posture. The ideal candidate has hands-on experience with ...

frameworks, architecture or capability mapping. Knowledge of application security tooling such as GitHub Advanced Security, CodeQL, Dependabot, Fortify, Qualys or Checkov beneficial. Strong stakeholder management with the ability to challenge technical and engineering teams. Knowledge of vulnerability management, exception governance and remediation processes advantageous. SC clearance ...

comprehensive observability and robust disaster recovery and failover strategies across on-premises and cloud environments. Own Relation’s platform security controls, including IAM, secrets management, network policy and vulnerability management, ensuring the platform meets the data governance standards required of a clinical-stage biotech working with sensitive ...

priorities Controls and tooling Oversee the engineering and lifecycle of core security controls, e.g. identity and access, endpoint, network, email, cloud, data protection, and vulnerability management Drive automation of control deployment, monitoring, and evidence collection Rationalize the tool portfolio and manage vendor relationships and technical due diligence Cloud … software and automation delivery lifecycle (DevSecOps: integrating security into development and deployment pipelines) Governance alignment Map technical controls to the firm’s information security management system (ISMS) and relevant frameworks such as ISO 27001 [ Provide engineering evidence for audits, client security assessments, and regulatory inquiries Incident and threat readiness ...

being formed. What You’ll Work On Application and API security across Saturn’s web applications, backend services and integrations, including authentication, authorisation, session management and firm-level data separation AWS security , covering IAM, network controls, secrets, encryption and workload isolation Threat modelling and security review for new systems … financial workflows, external integrations and AI capabilities, joining projects early enough to change their design Vulnerability management end to end : discovery, prioritisation by real risk, remediation and verification across code, dependencies, cloud resources and employee systems Security tooling and automation , including checks built into CI/ ...

partners around the world. Job responsibilities: Lead EntraID administration, optimizing conditional access policies and security best practices. Develop and implement robust identity and access management solutions to protect organizational assets. Provide expert support for multi-cloud environments (Azure, GCP, AWS) to platform engineers. Secure end-user devices using Jamf … Radar, including managing application allow-listing. Monitor and remediate security incidents and vulnerabilities on end-user devices. Automate repetitive tasks and streamline user management with scripting (PowerShell, Bash) and Microsoft tools. Collaborate with security teams on implementing recommended changes and participating in threat modeling exercises. Support and manage Netskope ...