26 to 50 of 166 Vulnerability Assessment Jobs in the UK

Security Penetration Tester , you will be responsible for supporting the design, implementation, and maintenance of TVM (Threat & Vulnerability Management) solutions, controls and processes across the organisation. You will be liaising with Digital teams to ensure appropriate mitigation and remediation of vulnerabilities detected across our IT estate. This role requires … internal penetration testing function. Conduct network, application penetration testing, code and security reviews. Identify and exploit vulnerabilities through proof-of-concept testing. Support vulnerability management across the enterprise, ensuring that a framework for identification, categorisation and mitigation exists and is implemented and maintained. Responsible for supporting the creation ...

security assessments, design security architectures, and help clients build security programs that meet regulatory requirements without creating operational friction. Responsibilities Lead penetration testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct incident response … Advise C-level executives on security strategy and risk management Requirements 8+ years in information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security (AWS Security Hub, Azure Defender ...

such as NIST, ISO 27001 and PCI-DSS. As a senior member of the team, you will provide technical leadership, assure the quality of assessment outputs, contribute to service development and support client-facing activities. You will maintain awareness of emerging threats, vulnerabilities and best practice to ensure … deliver infrastructure, web application and cloud security penetration testing engagements. Conduct Cyber Essentials and Cyber Essentials Plus assessments. Deliver technical security reviews and vulnerability assessments. Produce high-quality technical and executive reports with clear remediation guidance. Mentor and support junior consultants to develop technical capability. Contribute to the development ...

Design approach Selecting, understanding and adapting/adopting appropriate security control frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security … authentication, least privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails ...

Design approach Selecting, understanding and adapting/adopting appropriate security control frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security … authentication, least privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails ...

Lead Security Engineer to be a key member of our team. This engineer will assist in the minimization of potential attack surfaces through vulnerability management, cloud configuration assessments, incorporating threat intelligence from public and private sources, and work internally to build, enhance, and automate policies, standards, and processes. They … lifecycle. Assess and understand the Wellington CI/CD pipeline to be able to provide recommendations to developers for securing their code. Lead urgent vulnerability response, misconfiguration events, or otherwise assist with Cyber Defense as needed. Use scripting and AI to automate manual workflows, assist with data assessments ...

into practical solutions. Leading technical engagements and working with specialist security teams. Advising senior stakeholders and communicating complex security decisions. Conducting security, risk and vulnerability assessments. Developing architectures aligned with security standards and regulatory requirements. Working with vendors and third parties to secure systems and data exchanges. Supporting cloud … risk modelling experience. Strong understanding of network security, encryption, authentication and access controls. Experience with security technologies including SIEM, firewalls, IDS/IPS and vulnerability assessment tools . Cloud security experience across AWS, Azure or Google Cloud . Experience with DevSecOps, CI/CD and automated deployment . ...

implementation and continuous improvement of information security controls. Identify, assess, and mitigate security risks across applications, infrastructure, and cloud environments. Conduct security reviews, vulnerability assessments, and risk analysis. Analyse security findings and coordinate remediation activities with engineering teams. Review application and infrastructure security controls and recommend improvements. Support secure ...

resolved. Establishing and maintaining quality assurance procedures, including testing coverage standards, defect management processes and release approval criteria. Carrying out security-focused testing and vulnerability assessments to identify potential weaknesses within the Academy's systems. Supporting the Academy's information security procedures and relevant IT standards, including ...

container scanning) and enable secure SDLC practices Collaborate across teams to champion secure development practices and responsible use of AI-enabled security workflows Lead vulnerability assessments, code reviews and security audits across infrastructure and applications, maintaining appropriate human review, audit trails and escalation pathways Develop and evolve security standards ...

container scanning) and enable secure SDLC practices Collaborate across teams to champion secure development practices and responsible use of AI-enabled security workflows Lead vulnerability assessments, code reviews and security audits across infrastructure and applications, maintaining appropriate human review, audit trails and escalation pathways Develop and evolve security standards ...

urgent vulnerabilities or emerging threats - making a difference when it matters most Work across cyber domains: network, endpoint, cloud security, cryptography, malware analysis, vulnerability assessment, PAM, anomaly/intrusion detection, incident response, offensive security Leverage key cyber data sources: EDR, firewall logs, proxy logs, vulnerability reports Cross … Organisational Influence Partner with threat hunters, threat intelligence, vulnerability management and more to translate complex requirements into scalable solutions Lead architecture reviews, establish reusable patterns and drive consistency across business units Be part of a global community of Principal Engineers/Distinguished Engineers/Engineering Fellows , shaping standards ...

Selection changes the language of the page/content Vulnerability Response Engineer London, England, United Kingdom Software and Services Apple is seeking an exceptional Information Security Engineer to support our vulnerability response program. This is a technical, hands-on role in a dynamic and fast-paced environment. Apple … Conduct security assessments and large-scale scanning of external properties to discover vulnerabilities before they are reported or exploited Author clear, authoritative responses to vulnerability inquiries, including direct communication with external security researchers Triage automated alerting and emerging threats, including zero-day assessment, and coordinate rapid mitigation with ...

meaningful hands-on experience securing AWS environments. You'll ideally bring: Strong practical AWS cloud security experience. Experience maintaining or improving cloud security controls. Vulnerability assessment, prioritisation and remediation experience. Exposure to security incidents, including investigation, triage or coordination. Experience using AWS-native security and monitoring services. Good ...

Cyber Security Analyst Remote/On-Site Full Time 10/07/2025 Key Responsibilities Monitor and protect systems from cyber threats Conduct vulnerability assessments and penetration testing Implement security policies and access controls Investigate security incidents and provide solutions Required Skills & Qualifications 2+ years of cybersecurity experience ...

network hardware experience e.g. Cisco/Fortinet FortiGate. Security - this role is highly focused on security with knowledge of the following System security hardening, vulnerability assessments and patch management. Policy creation and roll out Security Best practices across all environments Security Compliance - GDPR, PCI, ISO27001 Working with external ...

devices while ensuring compliance with industry regulations Work alongside client R&D teams to lead on secure code reviews, threat modeling, security risk assessments, vulnerability assessments and validation and verification of controls Monitor emerging cybersecurity threats in the IoT and medical device landscape and write though leadership to showcase ...

suited to a security professional who can operate at both architectural and hands-on levels, with strong experience across endpoint protection, Antivirus/EDR, vulnerability management, platform security and secure environments. You will work closely with Infrastructure, Platform and Security teams, applying NIST Cybersecurity Framework principles and MOD security … implementation of endpoint and platform security solutions. Design security controls aligned with MOD policies, NIST Cybersecurity Framework and NCSC guidance. Design and deliver vulnerability management capabilities, including scanning, risk prioritisation, remediation and reporting. Develop security solutions for offline and air-gapped environments, including controlled update, patch and signature distribution. ...

cases, recording findings and producing high-quality technical reports. Troubleshooting complex technical issues, conducting root cause analysis and driving continuous improvement. Supporting security and vulnerability testing activities, enabling features and configurations required by testing teams. Evaluating new technologies and network components to support ongoing lab evolution. Maintaining and enhancing … Strong stakeholder engagement and communication skills. We'd Love to See Experience working within telecommunications testing, assurance or research environments. Experience supporting cyber security, vulnerability assessment or penetration testing activities. An interest in emerging telecommunications technologies and their security implications. Flexible Working Successful applicants will be expected ...

fashion Responsible for partnering with the Platform, Engineering and Delivery Teams to deliver seamless infrastructure support for all Visa business lines Security Remediation process (vulnerability assessment and patch management) Contribute to standardized and document operational procedures Responsible for adherence of established ITIL practice such as Incident, Change, Problem ...

ensure successful deployment, adoption, and customer satisfaction. Technical Expertise Required: Network Security Technologies: Expertise in Network Access Control (NAC), IPS, Firewalls (FW), Endpoint Protection, Vulnerability Assessment tools, Mobile Device Management (MDM), and other similar cybersecurity solutions for both IT and OT environments. Networking Protocols & Infrastructure: Deep understanding ...

recovery plans, and system updates.Network & Security· Support LAN/WAN infrastructure, firewalls, VPNs, and wireless networks.· Implement and maintain cybersecurity protocols and tools.· Conduct vulnerability assessments and support compliance initiatives.Cloud & Application Support· Manage cloud-based services (e.g., Microsoft 365, Azure, AWS).· Support enterprise applications and integrations with ...

resolve issues swiftly Security Auditing: Help perform regular audits of cloud-based systems to ensure compliance with security protocols and government regulations Risk and Vulnerability Assessments: Participate in identifying vulnerabilities within cloud services, maintaining Risk reporting mechanisms and proposing mitigations to improve security posture Compliance & Governance: Assist in ensuring ...

Maintain service availability of at least 99.9% through effective redundancy, failover, disaster-recovery and business-continuity planning. Implement infrastructure security policies and controls, coordinate vulnerability assessments and penetration testing, address identified risks and lead responses to infrastructure security incidents or outages. Lead, coach and develop the Platform and Infrastructure ...

projectsEngage effectively with risk, legal, privacy, data governance and enterprise architectureProvide support and guidance through secure by design competencies (Attack mapping, threat modelling)Conduct vulnerability assessments and coordinate remediation efforts.Collaborate with DevOps and IT teams to integrate security into infrastructure and application design and development lifecycles.Support compliance efforts (e.g. … Security Capabilities (Product Delivery Model):Identify, prioritise and deliver artificial intelligence (AI) and machine learning use cases that measurably improve security outcomes – for example vulnerability prioritisation, control assurance and evidence gathering.Own AI-enabled security capabilities as products rather than projects: define the problem statement and user need, maintain ...