20 of 20 Remote/Hybrid Vulnerability Scanning Jobs in London

asking that you attend the office a minimum of 1 day per week. About the Role We are seeking a highly motivated and experienced Vulnerability Management Engineer to join our Cyber Security team. As a Vulnerability Management Engineer, your primary responsibility will be to manage vulnerability management … improving existing processes. You will achieve this by creating automated solutions through collaboration with technical teams across Starling. Responsibilities Design, build, and maintain robust vulnerability management tooling and technical solutions. Drive efficiency by implementing automated solutions that eliminate manual overhead and streamline operations. Partner with internal engineering teams ...

Integration, Operations, and Security. You will be responsible for the full software lifecycle; from configuring secure cloud environments, orchestrating application deployments, running automated security scanning, and executing continuous updates with minimal downtime. What you will do Platform Deployment & Lifecycle Management: Deploy, upgrade, patch, and maintain multi-user self-hosted … pipelines to automate application delivery (primarily for Kubernetes).Maintain Infrastructure-as-Code (IaC) templates and configuration management scripts for reliable instance provisioning. Application Security & Vulnerability Scanning: Integrate continuous security scanning into pipelines to inspect application code, dependencies, and container images for vulnerabilities. Remediate identified CVEs and enforce ...

better, be more and ultimately, be more fulfilled. To learn more about how we can supercharge progress for you, visit www.hcltech.com Job Title : Senior Vulnerability Management Engineer Location: London, UK ( Hybrid mode at client location ) Experience: 3 – 6 years in vulnerability management/information security ROLE SUMMARY … Senior Vulnerability Management Engineer owns the organisation's end-to-end vulnerability management programme, spanning EUC, Data Center, Network, and Application Infrastructure domains. The role is responsible for scanner architecture and tuning, risk-based prioritisation, integration with patch management and SOC functions, automation of VM workflows, and executive ...

technical patterns without unnecessarily impacting developer productivity. Key Responsibilities Define target and transitional DevSecOps platform architectures. Design secure software supply-chain capabilities including SCA, vulnerability scanning, secrets detection, licence controls, SBOMs, signing and provenance. Assess and recommend vendor solutions, technologies and deployment options. Establish approved, controlled and unsupported … architecture. Extensive experience across CI/CD, artefact repositories, containers, runtime provisioning and enterprise integrations. Strong understanding of software supply-chain security, including SCA, vulnerability scanning, SBOMs, secrets management and software signing/provenance. Experience with Identity, SSO, RBAC, logging and auditable security controls. Knowledge of Policy ...

develop reusable GitHub Actions workflows and pipeline templates. Build standardised CI/CD patterns covering: Build Unit testing Integration testing Static analysis Security scanning Packaging Artifact management Promotion Deployment Create modular and maintainable pipeline components for multiple application teams. Establish consistent pipeline standards across different technology stacks. Improve build … environments. Security & Quality Embed security and quality directly into the standard pipeline. You Will Work With Technologies And Practices Including SonarQube SAST DAST Dependency scanning CVE/vulnerability scanning Container/image scanning Image signing Security and quality thresholds Automated quality gates The objective ...

broader organizational Crisis Management plan owned outside Technology. A key focus is optimising security tooling (e.g., SIEM, SOAR, EDR/XDR, NDR, email security, vulnerability scanning) and driving strong vulnerability and threat management, using threat intelligence to prioritise defensive improvements. Key Responsibilities Own the incident response lifecycle … teams (e.g., SIEM, SOAR, EDR/XDR, NDR, email security) including use‐case coverage, alert quality, automation, logging strategy, and operational runbooks. Own the vulnerability management programme (on‐prem and cloud), including scanning coverage, prioritisation, remediation SLAs, exception handling, verification, and executive reporting. Drive threat management by operationalising ...

broader organizational Crisis Management plan owned outside Technology. A key focus is optimising security tooling (e.g., SIEM, SOAR, EDR/XDR, NDR, email security, vulnerability scanning) and driving strong vulnerability and threat management, using threat intelligence to prioritise defensive improvements. Key Responsibilities Own the incident response lifecycle … teams (e.g., SIEM, SOAR, EDR/XDR, NDR, email security) including use‐case coverage, alert quality, automation, logging strategy, and operational runbooks. Own the vulnerability management programme (on‐prem and cloud), including scanning coverage, prioritisation, remediation SLAs, exception handling, verification, and executive reporting. Drive threat management by operationalising ...

Infrastructure Protection: Oversee the security of all corporate and boutique networks, including firewalls, VPNs, end-point protection, and cloud environments (AWS/SaaS). Vulnerability & Patch Management: Lead regular vulnerability scanning and penetration testing schedules; prioritise and oversee the remediation of technical weaknesses across all retail systems ...

CyberArk will be your deepest area of expertise, complemented by hands-on experience across the wider modern security stack, including Zscaler, EDR, SIEM and vulnerability management. The Opportunity As Senior Cyber Security Engineer, you’ll take ownership of CyberArk and privileged access management solutions throughout their lifecycle—from initial … Establishing privileged-access standards and providing evidence for client audits, including ISO 27001 and Cyber Essentials Plus. Deploying, configuring and maintaining EDR, SIEM integrations, vulnerability-scanning and email-security solutions. Supporting Zscaler ZIA and ZPA deployments, configuration and policy development. Monitoring the health of the security-tooling estate ...

Meraki switching, wireless access points, and MX firewall Manage Cisco Firepower HA firewall configuration and firmware Coordinate with Infinity on network patching, alerting, and vulnerability scanning Manage 3CX telephony via Gamma — extensions, call routing, and handsets Mobile & Work Phones Manage work phone estate Maintain vendor relationship for ongoing ...

Puppet. Scripting: Bash, Shell, Python. Monitoring & Logging: Prometheus, Grafana, ELK stack, Splunk. Version Control: Git (GitHub/GitLab/Bitbucket).Security: IAM, secrets management, vulnerability scanning. Experience & Qualifications8+ years of experience in DevOps/Site Reliability/Infrastructure Engineering. Strong understanding of DevOps and CI/CD best practices. ...

platforms, including repositories, branching models, permissions and access controls. Design, build and maintain CI/CD pipelines for automated build, test, code quality, security scanning, release approvals and deployment across development, test, staging and production environments. Create and maintain Infrastructure as Code using Terraform, Bicep or ARM templates, supporting … Microsoft Azure, with awareness of networking, identity, security, monitoring, storage and platform services relevant to application delivery. Integrate automated testing, code quality gates, vulnerability scanning and compliance controls into pipelines, working with development, QA and security teams. Troubleshoot deployment failures, pipeline issues, Kubernetes errors, environment defects and production ...

internet connectivity. Enforce Software Supply Chain Security: Implement cryptographic signing (e.g., Sigstore/Cosign, SLSA provenance), Software Bill of Materials (SBOM) generation, and automated vulnerability gating across all build pipelines. Automate Infrastructure-as-Code (IaC): Maintain release-side IaC and GitOps delivery frameworks (ArgoCD, Flux, Terraform) to ensure target … deployment environments (on-premise, edge, or air-gapped systems). Supply Chain Security Fluency: Solid understanding of build integrity concepts, artifact signing, provenance tracking, vulnerability scanning, and SBOM standards. CI/CD & GitOps Mastery: Proven experience designing enterprise pipelines (GitHub Actions, GitLab CI, Tekton, ArgoCD) with robust testing ...

test, deployment and release processes Implementing Infrastructure as Code using Terraform, Bicep and ARM templates Embedding security controls throughout the software development lifecycle Integrating vulnerability scanning, code quality checks and compliance controls into deployment pipelines Managing releases across development, test, staging and production environments Developing deployment plans, rollback ...

ability to debug large and complex systems and solve large problems that affect a wide user base in a simple way. Experience with image vulnerability scanning and patching strategies for large systems. Experience/Familiarity with AWS Multi Accounts system designs tools like Crossplane and Control Tower. Familiarity ...

ability to debug large and complex systems and solve large problems that affect a wide user base in a simple way. Experience with image vulnerability scanning and patching strategies for large systems. Experience/Familiarity with AWS Multi Accounts system designs, tools like Crossplane and Control Tower. Familiarity ...

third-party AI risk Own and develop the organisation's Responsible Use Policy for AI Lead the DevSecOps security function, including secrets management, vulnerability scanning, pipeline security and workload protection Own third-party security assessments and ongoing supplier/vendor security monitoring Develop and mature the organisation … successful certification programme Strong working knowledge of SOC 2, NIST CSF and other recognised security frameworks Strong technical understanding across SIEM, EDR, IAM, vulnerability management and DevSecOps Proven GDPR and data protection experience, ideally within a multi-jurisdiction environment Strong understanding of AI security and governance, including prompt injection ...

Ensure standards and controls operate as required across all IT services, maintaining systems and operations to identify and eliminate security vulnerabilities through routine practices (vulnerability scanning and software patching) and strategic solutions that increase information security Skills, Knowledge & Expertise What we're looking for in you: A background ...

legal and regulatory requirements. Perform daily, weekly, monthly checks and maintenance to ensure the health and availability of services. Remediation of vulnerability identified through penetration testing and vulnerability scanning. Develop and implement proactive systems monitoring and alerting. Provide coaching and advice to other areas of IT to help ...

policy design. Load Balancing: Practical knowledge of HAProxy or equivalent reverse proxies/load balancers, with experience configuring L4/L7 security protections. Vulnerability Mgmt: Familiarity with CVE triage workflows and integrating vulnerability scanners into CI/CD and registry workflows. Runtime Security: Exposure to runtime security tooling ...