1 to 25 of 30 Vulnerability Management Jobs in the Thames Valley

Bonus Scheme Shape the Future of Security Testing! Are you an experienced cyber security professional who enjoys the technical side of penetration testing and vulnerability management, but wants to move beyond purely hands-on testing? This is an opportunity to lead and mature a security testing capability across … complex and business-critical technology estate. You'll work at the intersection of security testing, vulnerability management, stakeholder engagement and governancehelping ensure that testing programmes are effective, scalable and aligned to evolving business risk. Rather than spending your days conducting penetration tests yourself, you'll be the person ...

Recruiting: Operational Security Lead & Cyber Vulnerability Manager Location: Hybrid - 1 x week in Marlow Department: Information Security Monday-Friday Are you an experienced cyber security professional with a passion for security operations, incident response and vulnerability management? We're looking for an Operational Security Lead & Cyber Vulnerability … Role Reporting to the Chief Information Security Officer, you'll lead the day-to-day operational cyber security function, overseeing security operations, cyber incident management, infrastructure and cloud vulnerability management, and third-party security oversight. You'll be responsible for ensuring security risks are managed appropriately, coordinating ...

looking for a Cyber Threat & Vulnerability Analyst to join our Cyber Security team, helping protect the systems that deliver essential water services to millions of customers every day. You'll play a key role in identifying, assessing, and reducing cyber risk across a large and complex technology estate, making … with technical teams and business stakeholders to keep our services safe, resilient, and running smoothly. What you'll be doing as a Cyber Threat & Vulnerability Analyst: As a Cyber Threat & Vulnerability Analyst, you'll be responsible for supporting and improving how we identify, assess, and manage cyber vulnerabilities ...

Security Penetration Tester , you will be responsible for supporting the design, implementation, and maintenance of TVM (Threat & Vulnerability Management) solutions, controls and processes across the organisation. You will be liaising with Digital teams to ensure appropriate mitigation and remediation of vulnerabilities detected across our IT estate. This role … internal penetration testing function. Conduct network, application penetration testing, code and security reviews. Identify and exploit vulnerabilities through proof-of-concept testing. Support vulnerability management across the enterprise, ensuring that a framework for identification, categorisation and mitigation exists and is implemented and maintained. Responsible for supporting the creation ...

security controls Supporting security across a predominantly Microsoft Azure environment Reviewing and optimising Microsoft security technologies Identifying security gaps and driving technical improvements Supporting vulnerability management and remediation activities Providing security engineering expertise on technical projects Improving documentation, processes and security standards Working closely with technical teams … security stack including technologies such as: Microsoft Azure Microsoft Defender Microsoft Defender for Endpoint Microsoft Defender for Cloud Microsoft Purview Intune Tenable Zscaler Enterprise vulnerability management and cloud-native security technologies What do you need to be successful We're looking for an experienced Security Engineer with ...

maintain Infrastructure as Code using Terraform with Git-based CI/CD Implement cloud security controls, IAM roles and policies, network segmentation, secrets management, vulnerability remediation and audit requirements Establish platform monitoring, alerting, logging, capacity management, backup, disaster recovery and incident-response procedures Manage patching, upgrades, lifecycle … management and service reliability for cloud workloads Support application, research and AI teams with reusable cloud patterns, self-service capabilities and technical guidance Optimise OCI consumption, performance and cost with stakeholders on forecasting and governance Maintain architecture documentation, standards, runbooks and operational procedures Work closely with Infrastructure, Cyber Security ...

ensure rapid detection, escalation and remediation of security events.Driving our threat monitoring capability, identifying emerging risks that could impact our business, customers or reputation.Overseeing vulnerability management across on-premise and cloud environments, ensuring weaknesses are identified, prioritised and remediated effectively.Developing and continually improving security incident response processes, including … outsourced environments.Strong technical expertise across modern security tooling, including Microsoft Defender, Microsoft E5 Security, Sentinel, AWS, Azure, Purview, SIEM, XDR/EDR, CSPM and vulnerability management platforms.Experience leading technical incident response, problem management and security investigations.A solid understanding of enterprise, network, cloud and SaaS/IaaS security.Experience ...

Cyber Security & DevSecOps Champion secure-by-design principles throughout the organisation. Ensure security controls are embedded across infrastructure, platforms, and software delivery pipelines. Support vulnerability management, compliance, and cyber resilience initiatives. Drive adoption of DevSecOps practices and security automation. Data & Analytics Oversee enterprise data platforms, pipelines, and analytics … environments. Strong knowledge of DevOps, DevSecOps, Platform Engineering, and Infrastructure as Code principles. FinOps and cloud cost optimisation experience. Experience implementing cyber security controls, vulnerability management, and secure engineering practices. Experience managing external suppliers and strategic technology partners. Knowledge of enterprise data platforms, data engineering, data governance ...

professional IT experience, including a minimum of 5 years of dedicated information security experience.Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience managing … analytics, featuring recent experience in technical design and architecture.Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance.Proven experience acting as a technical leader, mentor, or subject matter expert in consulting or architectural roles.Excellent communication ...

professional IT experience, including a minimum of 5 years of dedicated information security experience.Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience managing … analytics, featuring recent experience in technical design and architecture.Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance.Proven experience acting as a technical leader, mentor, or subject matter expert in consulting or architectural roles.Excellent communication ...

systems. Working closely with the CIO and development teams, the Cyber Security Engineer will play a key role in improving cloud security, incident response, vulnerability management, security monitoring and secure development practices, helping to enhance the organisation's overall cyber resilience. The company develops innovative software solutions … Security Operations Experience with cloud security across AWS, Azure or GCP Experience with SIEM, EDR/XDR and security monitoring technologies Strong knowledge of vulnerability management and remediation Experience responding to and investigating security incidents Good understanding of network security technologies including Firewalls, IDS/ ...

dependencies, escalating matters appropriately to senior leadership. Manage programme budgets of up to £10m per annum, ensuring effective financial control, forecasting, reporting, cost management, and delivery within agreed tolerances. Manage programme change across scope, time, cost, resources, and quality, ensuring appropriate governance and escalation where required. Coordinate technology solution … should bring to the role Experience delivering complex Cyber Security programmes or major projects within a large enterprise environment. Strong understanding of cyber risk management and the ability to translate technical cyber risks into business impacts, priorities and decisions. Experience working with Cyber Security teams across areas such ...

exciting opportunity for an ambitious cyber security professional looking to progress into Security Architecture while gaining hands-on experience across secure software delivery, risk management, security assurance, governance, and Defence accreditation activities. Working within a Through Life Support (TLS) environment, you will be responsible for maintaining the security posture … teams. Ensure products maintain a live security case supported by appropriate assurance evidence. Promote security best practices throughout the software development lifecycle. Security Risk Management Conduct and maintain security risk assessments using recognised risk management methodologies. Manage product-level security risk registers and track remediation activities. Assess vulnerabilities ...

this area, including understanding of governance, controls, data migration, integration and delivery risks. Key Responsibilities : Lead IT audits covering IT general controls, access management, change management, IT operations and technology controls. Assess cyber and information security, including vulnerability management, patching, endpoint/network security and data … recommendations for senior stakeholders and governance committees. Build effective relationships with technology, data and business teams while maintaining independent challenge. Monitor and validate management actions to ensure identified risks are effectively addressed. Maintain up-to-date knowledge of emerging technology, cyber and data risks. Skills & Experience : Several years' experience ...

detail-oriented and analytical Software Asset Analyst to join our team. Reporting to the HPC Governance and Compliance Director, this role will support the management and optimization of software assets across the organization. You will play a key role in ensuring software license compliance, maintaining accurate inventories, supporting audits … records.Administer software licenses, including terms and conditions, usage rules, restrictions, and product associations.Associate purchases, subscriptions, and renewals with corresponding licenses within the Software Asset Management (SAM) tool.Support administration and maintenance of the SAM platform, including upgrades, interfaces, and troubleshooting.Collect and reconcile software installation data to determine compliance positions.Manage inventory ...

available.Administer and support hybrid infrastructure services across on-premises and cloud environments, including virtualisation, identity, networking and platform services.Support security operations activities, including vulnerability remediation, access controls, monitoring, platform hardening and service assurance.Develop automation, scripting and process improvements to increase platform reliability, operational efficiency and user experience.Work collaboratively with … internal teams, suppliers and project stakeholders to deliver new capabilities and support the lifecycle management of existing services.You haveExperience supporting enterprise infrastructure, platform services or hybrid technology environments, including server, virtualisation, cloud or network technologies.Strong troubleshooting and problem-solving skills, with experience supporting technologies such as Windows Server, Active ...

manage lessons learned and continuous improvement activities. Produce clear reporting on remediation progress, cyber risks, and compliance outcomes. Key Skills & Experience: Proven delivery management experience within cyber security, infrastructure, or technology programmes. Strong background in remediation, patching, vulnerability management, or cyber risk reduction initiatives. Excellent stakeholder management skills with the ability to coordinate across technical and operational teams. Experience with governance, RAID management, delivery reporting, and assurance activities. Good understanding of cyber security, risk management, audit, and compliance requirements. Strong planning, organisational, and communication skills. This is an excellent opportunity for a delivery-focused ...

clear documentation and reporting. Good planning and organisational skills with attention to detail. Technical experience and skills Understanding of cybersecurity domains, including Threat Intelligence, Vulnerability Management, Security Testing, Security Architecture, Infrastructure Protection, Application Security, Identity and Access Management, Incident Investigation & Response, and Cryptography. Familiarity with information security ...

should bring to the role Experience in control testing automation, process automation, or related assurance activities within an enterprise environment. Strong understanding of risk management practices and control frameworks. Ability to measure, monitor, and report on control effectiveness using relevant metrics and data. Experience collaborating with both technical … cloud platforms. Ability to implement monitoring mechanisms and analyse automated testing outputs to identify control weaknesses. Experience documenting automation processes, workflows, and exception management procedures. Desirable qualifications and experience Experience working in a regulated environment, the water utility sector, or large complex critical national infrastructure organisations. Familiarity with governance ...

timely responses and where needed, direct engagement with customer security teams Support the development and maintenance of Dexory's information security policies and risk management framework Conduct vendor and third-party security assessments as part of the procurement and onboarding process Contribute to Dexory's incident response and vulnerability management processes Monitor the threat landscape for risks relevant to an autonomous robotics and warehouse intelligence business Develop and run security awareness training and phishing simulation programmes across the business Experience in an information security, GRC, or compliance role, ideally within a B2B SaaS or technology business Hands ...

Terraform/Bicep modules, deployment pipelines, environment promotion, and release controls. Security-by-design implementation: IAM/RBAC, network segmentation, private connectivity, encryption, secrets management, policy-as-code, logging/monitoring, vulnerability management integration. Operational readiness and handover: observability/alerting, backup and disaster recovery, runbooks, support …/CD (Azure DevOps, GitHub Actions, GitLab CI or similar). Solid cloud security engineering knowledge: RBAC/IAM, private networking, key/secrets management, encryption, secure logging, and policy/guardrails. Excellent troubleshooting skills across networking (DNS, routing, firewalls), distributed systems, and platform services. Comfortable operating with autonomy ...

business to experiment and drive innovation.Create and maintain training and educational materials and technical position papers for solution delivery teams.Support business case development.Lead vulnerability management activities working closely with the platform team to initiate remedial action where required, utilising “Secure by Design” Principles.Develop security requirements, epics and stories … manage risk, maximising business value with appropriate security.Able to effectively communicate, both verbally and written, highly technical aspects of your field of expertise, to management, clients and staff at all levels.Desirable:Quantifiable experience in fundamentals of all aspects of Security technical design.Experience in performing formal risk assessments and production ...

/CD pipelines, ideally including GitHub Actions. Scripting experience with Python, Bash or Shell. Experience with security technologies such as SIEM, EDR, DLP, vulnerability-management or code-analysis tools. An understanding of monitoring and logging tools such as CloudWatch, New Relic or Splunk. Strong communication skills and experience ...

PowerShell and Azure CLI for automation, configuration, and operational tasks. Experienced deploying virtualised infrastructure environments including compute, virtualisation, storage, and security. Experience with security vulnerability management and remediation. Experience administrating Microsoft environments such as Windows Server and SQL Server. Familiarity with ITSM tooling and service desk processes. Experience ...

closely with the CISO, understanding their position, sharing observations, performing security review, and assisting with the overall strategy Provide skills across SIEM, EDR, and Vulnerability Management tools. Vendor agnostic but SentinelOne and/or Microsoft Security experience would be advantageous Infrastructure & Cyber Security Consultant Skills Previous experience leading ...