1 to 25 of 138 Vulnerability Scanning Jobs in the UK

that empower you to own your career. Join MUFG, where being inspired is expected and making a meaningful impact is rewarded. The Threat and Vulnerability Management Team Lead is responsible for defining, developing, and leading the strategic direction for safeguarding the organisation's infrastructure and applications. This is achieved … Management across EMEA Bank, International Securities, and the 15+ countries in which these entities operate. The position is responsible for leading the Threat and Vulnerability Management function, including oversight of an outsourced offshore third-party service. This function integrates secure practices into the development lifecycle and aligns with service ...

tools that empower you to own your career.Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.The Threat and Vulnerability Management Team Lead is responsible for defining, developing, and leading the strategic direction for safeguarding the organisation’s infrastructure and applications. This is achieved … Management across EMEA Bank, International Securities, and the 15+ countries in which these entities operate. The position is responsible for leading the Threat and Vulnerability Management function, including oversight of an outsourced offshore third-party service.This function integrates secure practices into the development lifecycle and aligns with service transition ...

asking that you attend the office a minimum of 1 day per week. About the Role We are seeking a highly motivated and experienced Vulnerability Management Engineer to join our Cyber Security team. As a Vulnerability Management Engineer, your primary responsibility will be to manage vulnerability management … improving existing processes. You will achieve this by creating automated solutions through collaboration with technical teams across Starling. Responsibilities Design, build, and maintain robust vulnerability management tooling and technical solutions. Drive efficiency by implementing automated solutions that eliminate manual overhead and streamline operations. Partner with internal engineering teams ...

within a complex, highly regulated infrastructure environment. As part of continued investment in cyber security and operational resilience, they are looking for an OT Vulnerability Analyst to strengthen vulnerability management across their Operational Technology estate. This is a hands-on role focused on identifying, assessing and managing vulnerabilities … prioritise remediation based on genuine operational risk. What you’ll be doing Identify, assess and track vulnerabilities across OT and industrial environments. Analyse vulnerability data and prioritise findings based on asset criticality, exploitability and operational impact. Support vulnerability scanning and assessment activity across OT assets and systems. ...

Information Security Analyst, Vulnerability Management Stoke-on-Trent Technology As an Information Security Analyst in our vulnerability management team, you will ensure IT systems are operating in a secure manner in line with regulatory requirements. Full-time Closes 12/08/2026 Join our vulnerability management … secure and compliant while protecting our live operation. Our Information Security team monitors our live operation around the clock. We spot anomalies and manage vulnerability scanning across all endpoints. You assess risk, plan specialist testing, and help the business understand the urgency of patching. You also work with ...

Integration, Operations, and Security. You will be responsible for the full software lifecycle; from configuring secure cloud environments, orchestrating application deployments, running automated security scanning, and executing continuous updates with minimal downtime. What you will do Platform Deployment & Lifecycle Management: Deploy, upgrade, patch, and maintain multi-user self-hosted … pipelines to automate application delivery (primarily for Kubernetes).Maintain Infrastructure-as-Code (IaC) templates and configuration management scripts for reliable instance provisioning. Application Security & Vulnerability Scanning: Integrate continuous security scanning into pipelines to inspect application code, dependencies, and container images for vulnerabilities. Remediate identified CVEs and enforce ...

better, be more and ultimately, be more fulfilled. To learn more about how we can supercharge progress for you, visit www.hcltech.com Job Title : Senior Vulnerability Management Engineer Location: London, UK ( Hybrid mode at client location ) Experience: 3 – 6 years in vulnerability management/information security ROLE SUMMARY … Senior Vulnerability Management Engineer owns the organisation's end-to-end vulnerability management programme, spanning EUC, Data Center, Network, and Application Infrastructure domains. The role is responsible for scanner architecture and tuning, risk-based prioritisation, integration with patch management and SOC functions, automation of VM workflows, and executive ...

Cyber Essentials Plus Conducting security risk assessments, internal audits and control reviews Maintaining and monitoring the organisational security risk register Coordinating vulnerability scanning, penetration testing and remediation Supporting information security incident investigation and resolution Supporting business continuity and resilience planning Coordinating third-party security audits across European operations … Demonstrable experience leading ISO 27001 certification and ongoing ISMS compliance Experience with Cyber Essentials Plus Experience maintaining and managing security risk registers Experience coordinating vulnerability scanning, penetration testing and remediation Information security incident management/investigation experience Experience with Microsoft 365, Azure and AWS environments Strong stakeholder management ...

Escalate complex incidents to Tier 2 Incident Response Teams Review and develop security controls in line with the evolving technical environment Triage and review vulnerability scanning reports and feed results back to technical teams Review secure configurations and provide remediation feedback to technical teams Generate recurring service … develop understanding of security as a discipline Requirements Previous experience in Security, SOC or related technical field Focus on Incident Management Focus on Vulnerability Management Relevant qualification(s) in Cyber Security, or other related technical roles Knowledge of key concepts of Cloud Computing Knowledge of Security Incident Management Knowledge ...

maintain secure infrastructure within Kubernetes environments Administer and maintain Splunk for log aggregation, monitoring, alerting, and threat detection Operate and manage Nessus for vulnerability scanning, reporting, and remediation tracking Integrate security tools into CI/CD pipelines and cloud-native workflows Automate security processes using scripting or infrastructure … Engineer, or similar role Deploying and managing EDR agents Hands-on experience with Kubernetes Experience managing and administering SIEM tooling (e.g. Splunk) Experience deploying vulnerability scanning and analysis tooling (e.g. Nessus) Kubernetes observability (e.g. fluentbit) Familiarity with container security principles and tools Scripting or automation skills (e.g. Python ...

maintain secure infrastructure within Kubernetes environments Administer and maintain Splunk for log aggregation, monitoring, alerting, and threat detection Operate and manage Nessus for vulnerability scanning, reporting, and remediation tracking Integrate security tools into CI/CD pipelines and cloud-native workflows Automate security processes using scripting or infrastructure … Engineer, or similar role Deploying and managing EDR agents Hands‐on experience with Kubernetes Experience managing and administering SIEM tooling (e.g. Splunk) Experience deploying vulnerability scanning and analysis tooling (e.g. Nessus) Kubernetes observability (e.g. fluentbit) Familiarity with container security principles and tools Scripting or automation skills (e.g. Python ...

maintain secure infrastructure within Kubernetes environments Administer and maintain Splunk for log aggregation, monitoring, alerting, and threat detection Operate and manage Nessus for vulnerability scanning, reporting, and remediation tracking Integrate security tools into CI/CD pipelines and cloud-native workflows Automate security processes using scripting or infrastructure … Engineer, or similar role Deploying and managing EDR agents Hands-on experience with Kubernetes Experience managing and administering SIEM tooling (e.g. Splunk) Experience deploying vulnerability scanning and analysis tooling (e.g. Nessus) Kubernetes observability (e.g. fluentbit) Familiarity with container security principles and tools Scripting or automation skills (e.g. Python ...

gaps Partner with developers to ensure testability is designed into APIs and microservices Work alongside DevSecOps specialists to automate SAST, DAST, dependency and container vulnerability scanning Monitor pipeline results, troubleshoot failures and help teams resolve issues quickly Support testing of infrastructure-as-code and deployment configurations Maintain reliable … integration and end-to-end automation experience Experience integrating automated tests into GitLab CI/CD, Jenkins or similar Understanding of SAST, DAST and vulnerability scanning Strong debugging and root-cause analysis skills Understanding of software design principles and OOP Experience with Git and tools such as Jira ...

technical patterns without unnecessarily impacting developer productivity. Key Responsibilities Define target and transitional DevSecOps platform architectures. Design secure software supply-chain capabilities including SCA, vulnerability scanning, secrets detection, licence controls, SBOMs, signing and provenance. Assess and recommend vendor solutions, technologies and deployment options. Establish approved, controlled and unsupported … architecture. Extensive experience across CI/CD, artefact repositories, containers, runtime provisioning and enterprise integrations. Strong understanding of software supply-chain security, including SCA, vulnerability scanning, SBOMs, secrets management and software signing/provenance. Experience with Identity, SSO, RBAC, logging and auditable security controls. Knowledge of Policy ...

Vulnerability Management Engineer London (Hybris) £650p/d - £800 p/d inside IR35 6-month contract Role Overview We are seeking an experienced Vulnerability Management Engineer to own vulnerability discovery, prioritisation, and remediation tracking across Azure and GCP environments during a critical integration programme. This role … work closely with engineering teams to identify, prioritise, and remediate security vulnerabilities while leveraging Infrastructure-as-Code and automation to improve security outcomes. Responsibilities Vulnerability Discovery & Triage Scan Azure and GCP infrastructure for known vulnerabilities using Datadog, Sentinel, or equivalent tooling. Integrate with SCA/SBOM tools such ...

organisations cyber security posture, hardening Microsoft 365 and infrastructure to security best practice, tightening identity and access controls, and driving remediation of identified risks. Vulnerability Management: Own the vulnerability management lifecycle for the UK estate, scanning, triage, prioritisation, patching and reporting, working with global colleagues to drive … Defender. Security Mindset: Practical experience applying security best practice to an infrastructure estate, hardening, patching, identity and access management, endpoint protection, logging and monitoring. Vulnerability and Risk Management: Experience running vulnerability scanning and remediation activity and communicating risk clearly to technical and non-technical audiences. Security ...

develop reusable GitHub Actions workflows and pipeline templates. Build standardised CI/CD patterns covering: Build Unit testing Integration testing Static analysis Security scanning Packaging Artifact management Promotion Deployment Create modular and maintainable pipeline components for multiple application teams. Establish consistent pipeline standards across different technology stacks. Improve build … environments. Security & Quality Embed security and quality directly into the standard pipeline. You Will Work With Technologies And Practices Including SonarQube SAST DAST Dependency scanning CVE/vulnerability scanning Container/image scanning Image signing Security and quality thresholds Automated quality gates The objective ...

audit readiness and continuous compliance. Training and Awareness-Assist in creating and delivering cybersecurity awareness sessions, including guidance on phishing and malicious emails. Role: Vulnerability Management Analyst – Qualys VM Role Summary We are looking for a hands‐on Vulnerability Management professional with strong operational experience on Qualys …/VMDR to support BAU vulnerability operations for large enterprise environments. The role is execution‐heavy and requires day‐to‐day ownership of scanning, validation, remediation tracking, reporting, and stakeholder coordination , rather than advisory or governance‐only work. Key Responsibilities Qualys VM Operations Perform authenticated and unauthenticated vulnerability ...

Hours Full Time Help shape a resilient, risk-led cyber security environment at Laing O'Rourke. We are looking for an experienced Cyber Security Vulnerability Manager to establish and lead an enterprise-wide vulnerability management programme. This is an opportunity to influence how vulnerabilities are identified, prioritised … looking for individuals who are curious, thoughtful, and motivated by contributing to work that has real industry impact. The Role As Cyber Security Vulnerability Manager, you will develop, implement and continually improve Laing O'Rourke's vulnerability management capability across IT, cloud, operational technology and application environments. ...

looking for a Cyber Threat & Vulnerability Analyst to join our Cyber Security team, helping protect the systems that deliver essential water services to millions of customers every day. You'll play a key role in identifying, assessing, and reducing cyber risk across a large and complex technology estate, making … with technical teams and business stakeholders to keep our services safe, resilient, and running smoothly. What you'll be doing as a Cyber Threat & Vulnerability Analyst: As a Cyber Threat & Vulnerability Analyst, you’ll be responsible for supporting and improving how we identify, assess, and manage cyber vulnerabilities ...

investigation and response. Desirable Skills We’re also interested in candidates with: Understanding of UK privacy, data protection and cyber security legislation. Knowledge of vulnerability management and vulnerability scanning solutions. Familiarity with DDoS defence techniques and mitigation strategies. Awareness of digital forensics principles. The ability to communicate ...

investigation and response. Desirable Skills We’re also interested in candidates with: Understanding of UK privacy, data protection and cyber security legislation. Knowledge of vulnerability management and vulnerability scanning solutions. Familiarity with DDoS defence techniques and mitigation strategies. Awareness of digital forensics principles. The ability to communicate ...

investigation and response. Desirable Skills We’re also interested in candidates with: Understanding of UK privacy, data protection and cyber security legislation. Knowledge of vulnerability management and vulnerability scanning solutions. Familiarity with DDoS defence techniques and mitigation strategies. Awareness of digital forensics principles. The ability to communicate ...

broader organizational Crisis Management plan owned outside Technology. A key focus is optimising security tooling (e.g., SIEM, SOAR, EDR/XDR, NDR, email security, vulnerability scanning) and driving strong vulnerability and threat management, using threat intelligence to prioritise defensive improvements. Key Responsibilities Own the incident response lifecycle … teams (e.g., SIEM, SOAR, EDR/XDR, NDR, email security) including use‐case coverage, alert quality, automation, logging strategy, and operational runbooks. Own the vulnerability management programme (on‐prem and cloud), including scanning coverage, prioritisation, remediation SLAs, exception handling, verification, and executive reporting. Drive threat management by operationalising ...

broader organizational Crisis Management plan owned outside Technology. A key focus is optimising security tooling (e.g., SIEM, SOAR, EDR/XDR, NDR, email security, vulnerability scanning) and driving strong vulnerability and threat management, using threat intelligence to prioritise defensive improvements. Key Responsibilities Own the incident response lifecycle … teams (e.g., SIEM, SOAR, EDR/XDR, NDR, email security) including use‐case coverage, alert quality, automation, logging strategy, and operational runbooks. Own the vulnerability management programme (on‐prem and cloud), including scanning coverage, prioritisation, remediation SLAs, exception handling, verification, and executive reporting. Drive threat management by operationalising ...