13 of 13 Vulnerability Assessment Jobs in the South West

supporting systems. Provide security input into formal engineering design reviews, including SRR, PDR, CDR and equivalent programme governance gates. Conduct threat modelling and risk assessment activity across ship systems, platform services, navigation, propulsion, communications, IT, OT and associated support environments. Define and assure network zoning, segregation, trust boundaries, secure … acceptance criteria. Review and assess supplier security deliverables, including security claims, compliance evidence, technical designs, assurance artefacts and software bills of materials. Support the assessment of third-party and supply chain security risks across products, systems, components and supporting services. Scope and support vulnerability assessment, penetration testing ...

working with a well-established and highly regarded cyber security consultancy, known for delivering high-end penetration testing, vulnerability assessment and red teaming services to clients across critical sectors including telecoms, finance, defence, rail and aerospace. Their team has a strong track record of working on complex, high … sites. What you'll be doing: Planning and delivering penetration tests across networks, systems and applications, identifying vulnerabilities and security weaknesses Carrying out detailed vulnerability assessments, security audits and risk analysis, producing clear reports with practical remediation guidance Working alongside the red team to run realistic attack simulations ...

Conduct compliance assessments across systems and processes to evaluate cyber and information assurance posture. Assess technical security controls across networks, systems, and infrastructure - including vulnerability management, security architecture reviews, and technical risk assessments - to inform wider assurance judgements. Develop, refine, or review security policies and procedures to align with … within Defence or UK Government environments. Strong understanding of risk management frameworks Working technical knowledge across areas such as network security, secure system architecture, vulnerability assessment/penetration testing concepts, and cloud or infrastructure security controls. Familiarity with government and defence security standards such as: HMG/NCSC ...

Conduct compliance assessments across systems and processes to evaluate cyber and information assurance posture. Assess technical security controls across networks, systems, and infrastructure - including vulnerability management, security architecture reviews, and technical risk assessments - to inform wider assurance judgements. Develop, refine, or review security policies and procedures to align with … within Defence or UK Government environments. Strong understanding of risk management frameworks Working technical knowledge across areas such as network security, secure system architecture, vulnerability assessment/penetration testing concepts, and cloud or infrastructure security controls. Familiarity with government and defence security standards such as: HMG/NCSC ...

Design approach Selecting, understanding and adapting/adopting appropriate security control frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security … authentication, least privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails ...

assurance within highly secure, mission-critical environments. This is an exciting opportunity for a security professional with expertise in platform security, endpoint protection, vulnerability management and secure infrastructure design to work on a complex programme supporting defence-critical systems. The Role As the Security Architect, you will lead … security controls aligned to NIST Cybersecurity Framework and MOD security policies. Deliver enterprise Anti-Virus, Endpoint Protection and Endpoint Detection & Response (EDR) capabilities. Design vulnerability management frameworks, scanning strategies and remediation processes. Develop secure patching, update and threat intelligence processes for air-gapped environments. Produce High Level Designs (HLDs ...

style documentation. Work with technical teams, delivery teams, suppliers and customer stakeholders to ensure security requirements are properly understood and implemented. Review outputs from vulnerability assessments, penetration tests and supplier assurance activity, then advise on remediation and risk acceptance. Help clients align with relevant frameworks and standards, including ...

remediation alongside feature delivery and other technical work. Help improve secure software development and delivery practices, including CI/CD and related controls. Support vulnerability remediation, including root cause analysis and long-term fixes. Contribute to security standards, metrics and ways of working that improve product security maturity over … product and development teams operate, including how security considerations are balanced alongside product delivery. Strong experience of threat modelling, secure design review, vulnerability assessment and remediation prioritisation. The judgement to assess exploitability and business impact pragmatically Practical experience applying security across the software development lifecycle, including areas such ...

working with a well-established and highly regarded cyber security consultancy, known for delivering high-end penetration testing, vulnerability assessment and red teaming services to clients across critical sectors including telecoms, finance, defence, rail and aerospace. Their team has a strong track record of working on complex, high ...

future. What you'll be doing: Own and evolve asset health, risk, and resilience frameworks. Lead deterioration modelling and risk-based prioritisation. Maintain system vulnerability assessments and resilience planning. Drive a shift from reactive to predictive asset management. Lead asset health inputs into business plans and regulatory submissions. Develop ...

securing complex enterprise networks across cloud and on-prem environments, including: Configuring and optimising security tooling such as segmentation platforms, Sophos, Mimecast, XDR solutions, vulnerability scanners and hardening baselines. Managing firewalls, VPNs, secure remote access and segmentation controls. Improving detection and response by working closely with SIEM/… teams. Ensuring critical logging, monitoring and compliance standards are always met. Automating deployments and controls using PowerShell, Python, Terraform or similar tools. Supporting vulnerability assessments and driving remediation across the estate. Contributing to secure design reviews across applications, infrastructure, and cloud services. Incident response experience is desirable ...

Technical Vulnerability Management Engineer (Offensive Security/Penetration Testing) London (3 days onsite/2 days remote) Up-to £450 per day PAYE equivalent (Inside IR35) Initial 3 months with strong expectation of long-term extension To start ASAP About the role We're supporting one of the world … understand technical impact and exploitability. Assess the potential impact of vulnerabilities across enterprise infrastructure and systems. Identify affected assets using internal tooling and vulnerability data sources. Work closely with engineering and system owners to prioritise and coordinate remediation activities. Write Python, Bash or similar scripts to automate repetitive analysis ...

infrastructure modernisation programmes, ensuring all solutions remain secure, compliant, and aligned with enterprise standards. The role: Core IT Infrastructure & Network Delivery Cyber Security & Compliance Vulnerability Management & Penetration Testing Remediation Domain & Infrastructure Integration Multi-site Network Modernisation Future Clinic Infrastructure Standards & Design Design, implement and support enterprise LAN/… best practices. Identify, assess and mitigate network-related security risks. Support Cyber Essentials, DSPT and broader compliance initiatives. Review and address findings from vulnerability assessments and penetration tests. Drive improvements in network resilience and security posture. Provide 2nd and 3rd line escalation support for complex infrastructure issues. Support technologies ...