26 to 50 of 127 Vulnerability Assessment Jobs in the UK

Cyber Essentials)DesirableIndustry-recognised certifications such as ISO 27001 Lead Auditor/Implementer, CISSP, CISA, CISM, or similar.Exposure to penetration testing, or hands-on vulnerability assessment (even if not a primary role).Experience with public cloud platforms (e.g., AWS, Azure, GCP, MS365) and understanding of cloud security principles.Experience ...

triage, enrichment, containment and response. Identify repetitive analyst workflows and automate them using APIs, scripting and orchestration platforms. Build integrations across SIEM, EDR, CNAPP, vulnerability management and ticketing systems. Help introduce AI-assisted workflows that improve investigation quality and analyst productivity.Security Operations & Incident ResponseMonitor and investigate security events across … services. Collaborate with developers to improve security visibility across the CloudBees platform. Translate operational findings into practical engineering improvements.Vulnerability & Threat IntelligenceContribute to vulnerability assessment and management processes, prioritising findings based on threat context and exploitabilityConsume and operationalise threat intelligence feeds, translating indicators and TTPs into detection logic ...

DescriptionAs a Cyber Risk Advisor, you will be a vital member of the Qualys Cyber Risk Experts Service, supporting enterprise customers with risk analysis, vulnerability assessment, and remediation guidance. Working within the Qualys Risk Operations Center (ROC), you will monitor, research, and contextualize threat and vulnerability data … insights that empower customers to prioritize and remediate the most critical risks across complex IT and cloud environments.ResponsibilitiesPerform continuous monitoring and analysis of customer vulnerability and asset risk data using the Qualys TruRisk Platform.Research threat intelligence, vulnerability disclosures, and exploit activity to determine risk relevance and customer impact.Generate ...

Embark on a Mission to Fortify Amazon's Defences as a Security Engineer II with the Vulnerability Management & Remediation Operations team!Amazon Security is seeking an experienced and innovative Security Engineer to join our Vulnerability Management and Remediation Operations (VMRO) team in London, UK. The VMRO team … responsible for discovering, assessing, triaging, detecting, and driving the remediation of vulnerabilities across the Amazon ecosystem.Key job responsibilities- Analyse public and private vulnerability disclosures and exploit code.- Deeply understand and assess the technical details and potential impact of vulnerabilities across Amazon's infrastructure, services, and applications.- Investigate and triage ...

Conduct compliance assessments across systems and processes to evaluate cyber and information assurance posture. Assess technical security controls across networks, systems, and infrastructure - including vulnerability management, security architecture reviews, and technical risk assessments - to inform wider assurance judgements. Develop, refine, or review security policies and procedures to align with … within Defence or UK Government environments. Strong understanding of risk management frameworks Working technical knowledge across areas such as network security, secure system architecture, vulnerability assessment/penetration testing concepts, and cloud or infrastructure security controls. Familiarity with government and defence security standards such as: HMG/NCSC ...

Design approach Selecting, understanding and adapting/adopting appropriate security control frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security … authentication, least privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails ...

Design approach Selecting, understanding and adapting/adopting appropriate security control frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security … authentication, least privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails ...

solutions aligned with MOD security requirements and defence standards Design boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant boundary configurations and security baselines Incident Management & Threat Response Lead boundary security incident detection, investigation and response Manage security alerts … architecture and boundary security design Proficiency in security incident investigation and threat analysis Knowledge of security event management, SIEM and log analysis Understanding of vulnerability assessment and remediation processes Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge of managed service delivery models and SLA management ...

solutions aligned with MOD security requirements and defence standards Design boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant boundary configurations and security baselines Incident Management & Threat Response Lead boundary security incident detection, investigation and response Manage security alerts … architecture and boundary security design Proficiency in security incident investigation and threat analysis Knowledge of security event management, SIEM and log analysis Understanding of vulnerability assessment and remediation processes Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge of managed service delivery models and SLA management ...

solutions aligned with MOD security requirements and defence standards. Design boundary traffic inspection, content filtering and advanced threat protection. Lead boundary security assessments and vulnerability remediation. Implement MOD-compliant boundary configurations and security baselines. Incident Management & Threat Response Lead boundary security incident detection, investigation and response. Manage security alerts … architecture and boundary security design. Proficiency in security incident investigation and threat analysis. Knowledge of security event management, SIEM and log analysis. Understanding of vulnerability assessment and remediation processes. Familiarity with MOD security requirements, Classification Guides and defence standards. Knowledge of managed service delivery models and SLA management. ...

security alerts across SIEM and EDR platformsManage and tune security tools including firewalls, WAFs, and endpoint protectionInvestigate and support response to security incidentsPerform vulnerability assessments and remediation trackingSupport implementation of security controls across cloud and on-prem environmentsContribute to security policies, standards, and proceduresAssist with threat detection engineering ...

/Fortinet FortiGate. • Server Virtualisation – Nutanix, Hyper-V • Security – this role is highly focused on security with knowledge of the following System security hardening, vulnerability assessments and patch management. Policy creation and roll out Security Best practices across all environments Security Compliance – GDPR, PCI, ISO27001 Working with external ...

devices while ensuring compliance with industry regulations Work alongside client R&D teams to lead on secure code reviews, threat modeling, security risk assessments, vulnerability assessments and validation and verification of controls Monitor emerging cybersecurity threats in the IoT and medical device landscape and write though leadership to showcase ...

maintaining compliance with standards and regulations such as ISO 27001, NIST and GDPR . Develop and review security policies, procedures and documentation. Perform vulnerability assessments and coordinate remediation efforts. Deliver threat modelling workshops and support secure solution design activities. Deliver security awareness training and workshops. Assist with incident response ...

control assessments for new products or initiatives. Working with third party InfoSec auditors (penetration testing, PCI compliance etc.). Conduct regular risk assessments and vulnerability assessments to identify security gaps and develop appropriate mitigation plans. Conducting regulatory gap analysis for regulations and local laws. Answering regulatory requests related ...

design activities or as part of site support. • Ensuring risks are proactively identified, assessed and managed to avoid adverse impacts on the project. • Identification, assessment and adoption of the best technical solution. • Client Interface management comprising: infrastructure planners, project resource, Direct Labour/Construction team, System Operator, property & consents … Topology (System Architecture), Helinks Project files, Helinks SCD, HMI Database/Screens designs with Zenon COPA-DATA, Complete Signal List, 110V DC Power Load Assessment, AC Power Load Assessment, System Handover O&M Manuals and Recovery Documentation, Inventory Equipment Spread Sheet for complete SCS Device List, Vulnerability ...

cyber resilience initiatives while ensuring alignment with organisational risk management objectives.Key ResponsibilitiesLead and manage the Cyber Defence function, overseeing security operations, threat intelligence, vulnerability management, and incident response capabilities.Develop and implement cyber defence strategies, policies, and procedures to protect against evolving cyber threats.Direct Security Operations Centre (SOC) activities, ensuring … threat intelligence programmes, identifying emerging risks and implementing proactive defensive measures.Lead cyber incident response activities, coordinating technical teams and business stakeholders during security events.Manage vulnerability assessment and remediation programmes across enterprise infrastructure and applications.Collaborate with technology, risk, compliance, and business teams to strengthen organisational cyber resilience.Provide strategic advice ...

step in your career.The roleThe Security Threat Specialist, working in collaboration with the business, will be responsible for both proactive and targeted threat and vulnerability identification for cyber and insider threats across the organisation. They will translate these findings into tactical fixes and help advise on the strategic remediation.Key … guidance across all security levelsProviding detailed technical design advice and security recommendations for applications, services, infrastructure, and processesCollaborating with Cyber Security, Incident Response, and Vulnerability Assessment teams to validate findings and coordinate remediationSupporting risk management decisions and identifying audit points to ensure compliance or detect compromiseAssisting developers ...

assurance within highly secure, mission-critical environments. This is an exciting opportunity for a security professional with expertise in platform security, endpoint protection, vulnerability management and secure infrastructure design to work on a complex programme supporting defence-critical systems. *** Hybrid, 2 days in Corsham, United Kingdom - market rate (Inside … security controls aligned to NIST Cybersecurity Framework and MOD security policies. Deliver enterprise Anti-Virus, Endpoint Protection and Endpoint Detection & Response (EDR) capabilities. Design vulnerability management frameworks, scanning strategies and remediation processes. Develop secure patching, update and threat intelligence processes for air-gapped environments. Produce High Level Designs (HLDs ...

data to identify vulnerabilities, threats and detect suspicious activity. You will support the wider team to deliver a comprehensive programme of security testing, including vulnerability scanning and security configuration reviews, ensuring weaknesses are identified early and accurately. Responsibilities: Analyse the impact and severity of identified vulnerabilities based on factors … with system administrators, developers, and other stakeholders to develop and implement effective remediation plans to address identified vulnerabilities in a timely manner. Generate detailed vulnerability assessment reports, including findings, recommendations, and risk assessments, to communicate the status of vulnerabilities to management and stakeholders. Experience required: Previous experience ...

data to identify vulnerabilities, threats and detect suspicious activity. You will support the wider team to deliver a comprehensive programme of security testing, including vulnerability scanning and security configuration reviews, ensuring weaknesses are identified early and accurately. Responsibilities: Analyse the impact and severity of identified vulnerabilities based on factors … with system administrators, developers, and other stakeholders to develop and implement effective remediation plans to address identified vulnerabilities in a timely manner. Generate detailed vulnerability assessment reports, including findings, recommendations, and risk assessments, to communicate the status of vulnerabilities to management and stakeholders. Experience required: Previous experience ...

style documentation. Work with technical teams, delivery teams, suppliers and customer stakeholders to ensure security requirements are properly understood and implemented. Review outputs from vulnerability assessments, penetration tests and supplier assurance activity, then advise on remediation and risk acceptance. Help clients align with relevant frameworks and standards, including ...

team remains proactive in its approach to security.What You’ll Need:Extensive experience in application security, including expertise in secure coding practices, threat modelling, vulnerability assessments, and incident response.Hands-on experience with security testing tools (SAST, DAST) and their integration into development pipelines.Strong understanding of advanced security concepts such ...

remains proactive in its approach to security. What You’ll Need: Extensive experience in application security, including expertise in secure coding practices, threat modelling, vulnerability assessments, and incident response. Hands-on experience with security testing tools (SAST, DAST) and their integration into development pipelines. Strong understanding of advanced security ...

ideally have professional experience in cyber security, information assurance, risk management, systems engineering or a related discipline, alongside experience contributing to security assessment or assurance work. You’ll need to be comfortable producing clear security documentation and communicating with both technical and non-technical audiences. Knowledge of areas such … cyber risk management, security controls, threat and vulnerability assessment, security governance and risk acceptance is important. Experience with frameworks such as ISO 27001, ISO 27005, the NCSC Cyber Assessment Framework, NIST or MOD security standards would be beneficial. Experience within defence, government, critical infrastructure or another high ...