26 to 50 of 305 Vulnerability Management Jobs in London

integration and enablement position focused on aligning suppliers to established security processes rather than redesigning them. You will work closely with Security Assurance, Incident Management and Vulnerability Management teams to ensure suppliers understand their obligations and can demonstrate readiness from day one. Key responsibilities Develop structured supplier … onboarding documentation. Identify and manage gaps between supplier capabilities, client expectations and existing SI/OI processes. Support supplier assessments relating to Security Management Plans, compliance reporting and assurance activities. Ensure suppliers understand audit expectations, governance requirements and evidence obligations. Coordinate onboarding across multiple service commencement dates and transition ...

vast amount of data generated by banks and financial institutions. Requirements As Director of Platform Engineering, you will: Lead the day‐to‐day management, reliability and continuous improvement of ITRS’ Analytics SaaS platform, with a strong focus on Kubernetes‐based services, cloud‐native operational excellence and measurable service outcomes. … automation, reliability and continuous improvement. Remain highly hands‐on, working directly with engineers on production issues, Kubernetes troubleshooting, incident response, deployment automation, observability, capacity management and service resilience. Drive the evolution of SaaS engineering towards a more automated model, reducing manual intervention, operational toil and human hand‐offs through ...

Since being founded in 2018, Copper has been building the standard for institutional digital asset infrastructure with a focus on custody, collateral management, and prime services. Led by Amar Kuchinad, Copper's Global CEO, the firm provides a comprehensive suite of custody, trading and settlement solutions that reduce counterparty … lead initiatives to protect Copper's systems, data, and digital assets. You will be responsible for enhancing our security capabilities across identity and access management, cloud platforms, endpoint security, vulnerability management, automation, and security monitoring, ensuring security controls remain effective, scalable, and aligned to business and regulatory ...

practical experience working with modern enterprise security platforms covering endpoint detection and response, extended detection and response, cloud security, threat monitoring, behavioural analytics and vulnerability management, and be comfortable engaging with IT teams, senior stakeholders and third-party vendors. Experience in a medium to large, multi-site professional … eradication, recovery, evidence preservation and clear documentation of findings and actions. Maintain and improve security monitoring, detection rules, alert workflows, operational playbooks, procedures and management reporting. Assist with vulnerability management, supplier and client due diligence returns, audit responses, evidence gathering and compliance monitoring against policies, standards ...

Threat Intelligence and Vulnerability Manager 6-Month Contract | Inside IR35 | London 1-2 Days Per Week We're looking for an experienced security leader to take ownership of Threat Intelligence, Vulnerability Management, Threat Modelling, Security Testing and External Threat Hunting capabilities within a complex, high-profile environment. … activities, and provide the intelligence needed to strengthen enterprise security across IT, OT, physical and people security domains. Key Experience Threat Intelligence & Threat Hunting Vulnerability Management & Risk Prioritisation Threat Modelling & Security Assurance Penetration Testing & Control Validation Security Operations & Incident Readiness Supplier & Security Testing Provider Management Executive-level ...

member of the team, the emphasis will be on delivering security focused projects, acting as technical lead for our Sophos MDR solution and vulnerability management customers. The Information Security Project Engineer will be responsible for ensuring projects are documented and completed to a high quality and supporting … Information Security Consultants as a dedicated Microsoft Security Subject Matter Expert. This role would suit a highly competent individual with strong communication, time management & technical skills. Amongst other tasks you will be responsible for: Working closely with the Information Security Consultants to scope, build and document security focused projects ...

market. Job Description Key Responsibilities Lead requirements gathering, process design, and configuration/customization of the ServiceNow IRM (Integrated Risk Management) platform. Act as the primary ServiceNow IRM Business Analyst in engagements, ensuring successful delivery of platform solutions. Create high-level and low-level technical design documents and contribute … discussions and deployment planning. Demonstrate IRM and SecOps solutions as required, showcasing platform capabilities to stakeholders. Work across various IRM modules such as Policy Management, Compliance & Audit Management, Vendor Management, Business Continuity Management, Vulnerability Response, Incident Response, and Security Dashboard. Assess existing IRM processes ...

global investment banks. For more information, please visit www.cmgx.io The Role We are hiring a Senior Security Engineer to lead our security risk management and governance work. This is a senior individual‐contributor role for someone who thrives on owning large, ambiguous initiatives end‐to‐end and turning them … CISO, own cross‐program initiatives, and collaborate closely with senior leadership across the firm. The core of the role is hands‐on security risk management, threat modeling, security risk assessments, and security design and architecture reviews, paired with the governance and process work that scales the program. You will ...

commerce, and turning that research into intelligence that drives decisions. The CTI Analyst will work cross‐functionally with Detection Engineering, Incident Response, Threat Hunting, Vulnerability Management, Fraud, and external partners to provide actionable intelligence, and will help mature the CTI program while remaining closely engaged … partner with Detection Engineering to turn them into detection content such as YARA, Sigma, or SIEM queries. Support threat hunting, detection engineering, incident response, vulnerability management, fraud, and broader cyber defence teams with intelligence‐driven context and prioritisation. Develop and refine Priority Intelligence Requirements, collection priorities, analytical workflows ...

Cyber Security Specialist/Cyber Security Engineer - CISSP, CEH, CCNA Security, Incident Response, Threat Monitoring, Vulnerability Management, Security Architecture, Azure, Windows Server Infrastructure. Permanent. London Hybrid. c.£90k - £100k + Bons +Benefits Global Law Firm seeks an experienced IT Cyber Security Specialist to join its Infrastructure Engineering team … incidents and strengthen the firm's overall security posture. This is a hands-on technical role covering Cyber Security Engineering, Incident Response, Threat Monitoring, Vulnerability Management and Security Architecture (Infrastructure focussed) using tools such as MS Defender and MS Sentinel. You'll work across a complex infrastructure environment ...

leads cyber defence operations (including the MSSP) and cybersecurity incident response across the organisation. This fits within the context of the broader organizational Crisis Management plan owned outside Technology. A key focus is optimising security tooling (e.g., SIEM, SOAR, EDR/XDR, NDR, email security, vulnerability scanning … driving strong vulnerability and threat management, using threat intelligence to prioritise defensive improvements. Key Responsibilities Own the incident response lifecycle (prepare, detect, analyse, contain, eradicate, recover), ensuring playbooks, tooling, and decision-making processes are in place and exercised. Lead and coordinate response to security incidents, acting as incident ...

coverage scope, methods, reporting, and remediation tracking Coordinate Red Team and testing activities to ensure outputs support programme assurance and close testing capability gaps Vulnerability Management and Post‐Production Assurance Establish and assure governance for post‐production vulnerability management, including monitoring from suppliers, research findings … supplier assurance requirements Familiarity with CRA compliance needs, including defined reporting workflows such as Article 14 Excellent technical writing, communication, and stakeholder management skills, with the ability to present risk clearly and pragmatically Knowledge or experience of TARA and threat modelling approaches, including review of threat artefacts such ...

innocent is seeking a Vulnerability Management Engineer on a hands-on contract to implement Qualys across our technology estate. You’ll design scanning, prioritisation and remediation processes and roll out agents across servers, endpoints and cloud environments to improve asset visibility and reduce exposure to risks. You will … collaborate with security, infrastructure and cloud teams to embed vulnerability management into how we work, delivering dashboards and actionable reporting that informs #J-18808-Ljbffr ...

technical teams and supporting key stakeholders across the organization. This role requires a strong blend of technical expertise, leadership capability, operational excellence, and stakeholder management skills, within a complex enterprise environment that includes financial, trading, and treasury systems. Role Description The IT Infrastructure & Systems Manager is a full-time … control, and security monitoring. Proven ability to manage IT projects, prioritize tasks, and deliver improvements on time and within scope. Excellent communication and stakeholder management skills, with the ability to explain technical concepts to non-technical audiences. Experience leading or mentoring IT team members or support staff is highly ...

third-party tooling for monitoring, logging, alerting, diagnostics, and service health reporting Implement DevSecOps practices, including shift-left security, policy as code, secrets management, vulnerability management, and secure software supply chain controls Troubleshoot complex infrastructure, networking, identity, security, pipeline, and production issues to maintain reliable business-critical … networking, identity, compute, storage, monitoring, and governance Deep experience with Azure DevOps or GitHub for source control, pull requests, CI/CD pipelines, release management, deployment automation, and environment controls Proven experience delivering infrastructure as code using Bicep, Terraform, ARM templates, or similar technologies Strong understanding of Docker, Kubernetes ...

Vulnerability & Threat Exposure Manager (Contract, Inside IR35) Location: London (1–2 days per week in office, remainder remote) Contract: Initial 6 months, with potential to extend IR35 Status: Inside IR35 Our client, a large, complex enterprise organisation, is urgently seeking a manager to lead their vulnerability and exposure … management capability, with a mandate to expand into threat intelligence and enhanced security testing over time. You'll join a lean, focused team and play a hands-on leadership role from day one, with genuine scope to shape process, tooling, and maturity over a six-month roadmap. The immediate ...

facing applications. Provide subject matter expertise for web application security, secure application delivery and WAF best practices. Provide technical support to Audit & Compliance, Capacity Management, Lifecycle Management, Vulnerability Management and Risk Management Functions. Provide technical leadership during major incidents and drive to quick resolutions. Coach … preferred, or equivalent industry experience. Strong industry expertise within IT or Telecommunications environments. Financial Services experience preferred. Advanced expertise in Azure WAF and network management within complex enterprise environments. Deep technical expertise in Network Security, with exposure to technologies such as Azure Firewall, Palo Alto Firewall/ ...

Cyber Security Lead - Vulnerability & Exposure Management An established organisation operating within a highly regulated environment is looking for a Cyber Security Lead to strengthen its approach to identifying, assessing and reducing technical security risk. You will take ownership of the vulnerability management function, developing it into … proactive, intelligence-led exposure management capability. This will include: * Establishing an effective CTEM framework and longer-term security roadmap. * Improving vulnerability scanning across cloud, on-premises and externally accessible technology. * Prioritising remediation using asset importance, active threats, EPSS, attack paths and business impact. * Coordinating patching and remediation activity ...

/RBAC Engineer to join its Data Platform team. This role sits at the intersection of cloud platform engineering, identity and access management, governance and security. The successful candidate will be responsible for implementing and improving access controls, governance frameworks and security practices across a large-scale Google Cloud … environment. Responsibilities Design and implement IAM and RBAC controls across GCP Manage service accounts, permissions and access governance Support data governance, classification and access management initiatives Implement and maintain least-privilege access models Conduct access reviews and support audit requirements Work with engineering teams to improve platform security ...

governance. Security, Compliance, and Systems Establish, implement, and maintain secure configuration baselines for Windows, macOS, Linux, servers, network devices, cloud services, and endpoint-management platforms using recognized frameworks and vendor guidance. Own patching and vulnerability-remediation workflows, including asset coverage, risk-based prioritization, remediation timelines, exception documentation, validation … escalation support for employees, engineering systems, lab environments, collaboration services, and secure connectivity. Own IT asset lifecycle, software licensing, vendor coordination, procurement support, warranty management, and secure equipment disposal. Use scripting and automation to improve consistency, reduce manual effort, strengthen controls, and provide meaningful operational and compliance reporting. Contribute ...

department’s controls design and effectiveness, ensuring controls are proportionate and embedded in day‐to‐day department activity* Provide proactive assurance around risk management through appropriate data driven monitoring and through the implementation of structured sampling techniques to validate that controls are functioning as intended before failure* Educate … with industry and company standards* Work in partnership with the Digital Engineering Solutions and Services Product and Platform owners, challenging and advising on risk management for new products, processes and change programmes. Provide risk-based decision making, supporting the department to make informed, risk-based decisions by providing ...

security policies, procedures and governance frameworks. Establish and maintain risk registers and support security governance forums. Support incident response planning, tabletop exercises and crisis management activities. Provide advice across areas including vulnerability management, identity and access management, cloud security, security operations and supplier assurance. Support Secure … SDLC and broader security transformation initiatives. Provide vCISO/outsourced security management support where required. Design and facilitate client workshops, discovery sessions and stakeholder interviews. Translate technical security issues into clear business risks and practical recommendations. Produce high-quality, client-ready reports, assessments, roadmaps and presentations. Manage multiple client ...

service-led banking powered by modern technology. Job Purpose Support the Bank's operational cyber security capability through cyber security monitoring, incident response coordination, vulnerability management, supplier assurance and operational reporting activities. To place the interests of customers at the centre of all activities … alerts, incidents and escalations, ensuring actions, decisions and outcomes are appropriately recorded and tracked. Act as Incident Coordinator during cyber security incidents, supporting incident management, communications, action tracking and post-incident activities. Maintain incident, vulnerability, threat intelligence and operational cyber security registers, ensuring records remain accurate ...

amongst its teams and divisions provides its customers with clear advantage, and its technology-led service provides access to all major exchanges, order-flow management via screen, voice and DMA, plus award-winning data, insights and analytics. The Technology Department delivers differentiation, scalability and security for the business. Technology … will be responsible for engineering, administering, and continually improving security capabilities across the Marex Group, with a primary focus on Identity Protection, Privileged Access Management, and associated access control environments. The role will support the secure management of privileged accounts, access workflows, credential rotation, platform onboarding, incident response ...

coding training, workshops and awareness sessions. Mentor development teams and promote security-first engineering practices. Drive adoption of secure development standards and methodologies. Threat & Vulnerability Management Support application vulnerability management activities. Assist development teams with vulnerability triage and remediation planning. Identify recurring weaknesses and opportunities … DAST and Software Composition Analysis (SCA) tools. Experience integrating security controls into CI/CD pipelines. Strong understanding of OWASP Top 10 and common vulnerability classes. Experience with API and web application security. Knowledge of threat modelling techniques and methodologies. Experience working closely with software engineering teams in enterprise ...