1 to 25 of 55 Remote/Hybrid Vulnerability Scanning Jobs in the UK

asking that you attend the office a minimum of 1 day per week. About the Role We are seeking a highly motivated and experienced Vulnerability Management Engineer to join our Cyber Security team. As a Vulnerability Management Engineer, your primary responsibility will be to manage vulnerability management … improving existing processes. You will achieve this by creating automated solutions through collaboration with technical teams across Starling. Responsibilities Design, build, and maintain robust vulnerability management tooling and technical solutions. Drive efficiency by implementing automated solutions that eliminate manual overhead and streamline operations. Partner with internal engineering teams ...

Information Security Analyst, Vulnerability Management Stoke-on-Trent Technology As an Information Security Analyst in our vulnerability management team, you will ensure IT systems are operating in a secure manner in line with regulatory requirements. Full-time Closes 12/08/2026 Join our vulnerability management … secure and compliant while protecting our live operation. Our Information Security team monitors our live operation around the clock. We spot anomalies and manage vulnerability scanning across all endpoints. You assess risk, plan specialist testing, and help the business understand the urgency of patching. You also work with ...

Integration, Operations, and Security. You will be responsible for the full software lifecycle; from configuring secure cloud environments, orchestrating application deployments, running automated security scanning, and executing continuous updates with minimal downtime. What you will do Platform Deployment & Lifecycle Management: Deploy, upgrade, patch, and maintain multi-user self-hosted … pipelines to automate application delivery (primarily for Kubernetes).Maintain Infrastructure-as-Code (IaC) templates and configuration management scripts for reliable instance provisioning. Application Security & Vulnerability Scanning: Integrate continuous security scanning into pipelines to inspect application code, dependencies, and container images for vulnerabilities. Remediate identified CVEs and enforce ...

better, be more and ultimately, be more fulfilled. To learn more about how we can supercharge progress for you, visit www.hcltech.com Job Title : Senior Vulnerability Management Engineer Location: London, UK ( Hybrid mode at client location ) Experience: 3 – 6 years in vulnerability management/information security ROLE SUMMARY … Senior Vulnerability Management Engineer owns the organisation's end-to-end vulnerability management programme, spanning EUC, Data Center, Network, and Application Infrastructure domains. The role is responsible for scanner architecture and tuning, risk-based prioritisation, integration with patch management and SOC functions, automation of VM workflows, and executive ...

technical patterns without unnecessarily impacting developer productivity. Key Responsibilities Define target and transitional DevSecOps platform architectures. Design secure software supply-chain capabilities including SCA, vulnerability scanning, secrets detection, licence controls, SBOMs, signing and provenance. Assess and recommend vendor solutions, technologies and deployment options. Establish approved, controlled and unsupported … architecture. Extensive experience across CI/CD, artefact repositories, containers, runtime provisioning and enterprise integrations. Strong understanding of software supply-chain security, including SCA, vulnerability scanning, SBOMs, secrets management and software signing/provenance. Experience with Identity, SSO, RBAC, logging and auditable security controls. Knowledge of Policy ...

develop reusable GitHub Actions workflows and pipeline templates. Build standardised CI/CD patterns covering: Build Unit testing Integration testing Static analysis Security scanning Packaging Artifact management Promotion Deployment Create modular and maintainable pipeline components for multiple application teams. Establish consistent pipeline standards across different technology stacks. Improve build … environments. Security & Quality Embed security and quality directly into the standard pipeline. You Will Work With Technologies And Practices Including SonarQube SAST DAST Dependency scanning CVE/vulnerability scanning Container/image scanning Image signing Security and quality thresholds Automated quality gates The objective ...

looking for a Cyber Threat & Vulnerability Analyst to join our Cyber Security team, helping protect the systems that deliver essential water services to millions of customers every day. You'll play a key role in identifying, assessing, and reducing cyber risk across a large and complex technology estate, making … with technical teams and business stakeholders to keep our services safe, resilient, and running smoothly. What you'll be doing as a Cyber Threat & Vulnerability Analyst: As a Cyber Threat & Vulnerability Analyst, you’ll be responsible for supporting and improving how we identify, assess, and manage cyber vulnerabilities ...

investigation and response. Desirable Skills We’re also interested in candidates with: Understanding of UK privacy, data protection and cyber security legislation. Knowledge of vulnerability management and vulnerability scanning solutions. Familiarity with DDoS defence techniques and mitigation strategies. Awareness of digital forensics principles. The ability to communicate ...

investigation and response. Desirable Skills We’re also interested in candidates with: Understanding of UK privacy, data protection and cyber security legislation. Knowledge of vulnerability management and vulnerability scanning solutions. Familiarity with DDoS defence techniques and mitigation strategies. Awareness of digital forensics principles. The ability to communicate ...

investigation and response. Desirable Skills We’re also interested in candidates with: Understanding of UK privacy, data protection and cyber security legislation. Knowledge of vulnerability management and vulnerability scanning solutions. Familiarity with DDoS defence techniques and mitigation strategies. Awareness of digital forensics principles. The ability to communicate ...

broader organizational Crisis Management plan owned outside Technology. A key focus is optimising security tooling (e.g., SIEM, SOAR, EDR/XDR, NDR, email security, vulnerability scanning) and driving strong vulnerability and threat management, using threat intelligence to prioritise defensive improvements. Key Responsibilities Own the incident response lifecycle … teams (e.g., SIEM, SOAR, EDR/XDR, NDR, email security) including use‐case coverage, alert quality, automation, logging strategy, and operational runbooks. Own the vulnerability management programme (on‐prem and cloud), including scanning coverage, prioritisation, remediation SLAs, exception handling, verification, and executive reporting. Drive threat management by operationalising ...

broader organizational Crisis Management plan owned outside Technology. A key focus is optimising security tooling (e.g., SIEM, SOAR, EDR/XDR, NDR, email security, vulnerability scanning) and driving strong vulnerability and threat management, using threat intelligence to prioritise defensive improvements. Key Responsibilities Own the incident response lifecycle … teams (e.g., SIEM, SOAR, EDR/XDR, NDR, email security) including use‐case coverage, alert quality, automation, logging strategy, and operational runbooks. Own the vulnerability management programme (on‐prem and cloud), including scanning coverage, prioritisation, remediation SLAs, exception handling, verification, and executive reporting. Drive threat management by operationalising ...

suited to a security professional who can operate at both architectural and hands-on levels, with strong experience across endpoint protection, Antivirus/EDR, vulnerability management, platform security and secure environments. You will work closely with Infrastructure, Platform and Security teams, applying NIST Cybersecurity Framework principles and MOD security … implementation of endpoint and platform security solutions. Design security controls aligned with MOD policies, NIST Cybersecurity Framework and NCSC guidance. Design and deliver vulnerability management capabilities, including scanning, risk prioritisation, remediation and reporting. Develop security solutions for offline and air-gapped environments, including controlled update, patch and signature ...

suited to a security professional who can operate at both architectural and hands-on levels, with strong experience across endpoint protection, Antivirus/EDR, vulnerability management, platform security and secure environments. You will work closely with Infrastructure, Platform and Security teams, applying NIST Cybersecurity Framework principles and MOD security … implementation of endpoint and platform security solutions. Design security controls aligned with MOD policies, NIST Cybersecurity Framework and NCSC guidance. Design and deliver vulnerability management capabilities, including scanning, risk prioritisation, remediation and reporting. Develop security solutions for offline and air-gapped environments, including controlled update, patch and signature ...

Recruiting: Operational Security Lead & Cyber Vulnerability Manager Location: Hybrid - 1 x week in Marlow Department: Information Security Monday-Friday Are you an experienced cyber security professional with a passion for security operations, incident response and vulnerability management? We're looking for an Operational Security Lead & Cyber Vulnerability … Chief Information Security Officer, you'll lead the day-to-day operational cyber security function, overseeing security operations, cyber incident management, infrastructure and cloud vulnerability management, and third-party security oversight. You'll be responsible for ensuring security risks are managed appropriately, coordinating incident response activities, driving remediation programmes ...

Cyber Security Specialist, where you will be responsible for delivering a comprehensive range of security services. This includes detection and response services, vulnerability scanning, dark web monitoring, social engineering assessments, and detailed reporting. Your primary objective will be to maintain and enhance the security posture of our clients … operationalization of AI-driven capabilities to enhance threat detection and response. Collaborate with internal and external stakeholders to resolve security incidents and ensure vulnerability compliance. Strive for customer satisfaction while continuously seeking to improve operational performance. Maintain an up-to-date understanding of the threat landscape, including knowledge ...

Implementfirewallcontrols and email security standards (SMTP, TLS) to safeguard business data. Compliance & Testing: Contributeto ISO 27001 compliance (policy/documentation); review penetration testing and vulnerability scans to proactively mitigate risk. Business Continuity,Operational Reliability Disaster Recovery:Monitorbackup systems, conduct regular restore testing, and support annual external audits … backup, recovery, and disaster recovery principles Knowledge of email systems, security, and certificate management Experience with IT security tools and concepts (firewalls, antivirus, vulnerability management) Ability to document systems and processes clearly Strong problem-solving and diagnostic skills Experience supporting ISO 27001 environments Familiarity with Azure services, including ...

layers: replication to the recovery site, a recovery plan that is current, and at least one proper test of it a year Run the vulnerability management cycle with our scanning tooling, and remediate to fixed timescales, with critical fixes measured in days not months Apply monthly vendor patches … just a lab Linux administration and comfortable scripting Real backup, restore and disaster recovery experience, including having actually run a recovery test Experience running vulnerability scanning and remediation cycles in a managed environment Familiarity with bastion or jump host access patterns and privileged access management tooling, because ...

with key stakeholders and including legacy system decommissioning recommendations. Fully migrate server estate onto the platform completed in Workstream 1, with penetration testing/vulnerability assessment remediation activity also undertaken if applicable. Test and validation documentation, completed with key stakeholders. Any additional relevant information handed over to local … Platform Infrastructure Activities include: Provision 2x new virtual servers on the new Hyper-V platform; each capable of hosting the required network monitoring/vulnerability scanning applications. Install and configure operating systems, apply security hardening and patching to Microsoft best practise and local governance requirements. Configure storage, networking ...

Services (AWS) , and Software as a Service (SaaS) platforms. Implement and maintain Microsoft Defender , Microsoft Sentinel , Microsoft Purview , and other security technologies . Lead vulnerability management and coordinate penetration testing activities. Secure Microsoft 365 services, including Exchange Online , SharePoint Online , OneDrive , and Microsoft Teams . Implement data protection controls … security or information security role. Strong technical expertise in Microsoft Entra ID , Microsoft Defender Suite , Microsoft Sentinel , and Microsoft Purview . Proven experience managing vulnerability scanning and penetration testing programmes. Experience supporting ISO 27001 compliance and coordinating Cyber Essentials and Cyber Essentials Plus certifications. Strong analytical, problem-solving ...

systems within a large, highly regulated Critical National Infrastructure organisation. This role focuses on ensuring core operational security controls are consistently applied, including patching, vulnerability management, adherence to security standards and policies, and governance of privileged user access. You will oversee vulnerability assessments, drive remediation efforts … appointment. What you'll do Implement and manage robust security protocols and procedures, identifying potential threats and vulnerabilities across operational processes Oversee regular vulnerability assessments, ensuring rapid response and ongoing improvement of penetration testing plans and methodologies Ensure clear understanding within the team of the criticality of information ...

Infrastructure Protection: Oversee the security of all corporate and boutique networks, including firewalls, VPNs, end-point protection, and cloud environments (AWS/SaaS). Vulnerability & Patch Management: Lead regular vulnerability scanning and penetration testing schedules; prioritise and oversee the remediation of technical weaknesses across all retail systems ...

CyberArk will be your deepest area of expertise, complemented by hands-on experience across the wider modern security stack, including Zscaler, EDR, SIEM and vulnerability management. The Opportunity As Senior Cyber Security Engineer, you’ll take ownership of CyberArk and privileged access management solutions throughout their lifecycle—from initial … Establishing privileged-access standards and providing evidence for client audits, including ISO 27001 and Cyber Essentials Plus. Deploying, configuring and maintaining EDR, SIEM integrations, vulnerability-scanning and email-security solutions. Supporting Zscaler ZIA and ZPA deployments, configuration and policy development. Monitoring the health of the security-tooling estate ...

Cyber Security Specialist, you will work within a multi-disciplinary security team delivering a broad range of services, including threat detection and response, vulnerability scanning, dark web monitoring, social engineering assessments, and security reporting. You will act as a technical escalation point for complex security incidents, leading containment … driven capabilities to improve threat detection and response. Working closely with internal teams and customers, you will ensure effective incident resolution and vulnerability compliance, while staying up to date with emerging threats, threat actors, attack techniques, and vulnerabilities. This role can offer 3 days remote working. Essential Experience: Strong ...

Checks. Conduct internal audits, control reviews, and risk assessments. Maintain and monitor the organisational risk register. Support business continuity and resilience planning activities. Coordinate vulnerability scanning, penetration testing, and remediation programmes. Assist with the investigation and resolution of information security incidents. Deliver security awareness initiatives, user training … risk, and compliance frameworks. Extensive knowledge of PCI DSS, ISO 27001, Cyber Essentials Plus, and data protection requirements. Experience with Microsoft 365, Azure, AWS, vulnerability management, and SIEM tools. Strong communication, stakeholder management, and report-writing skills. Professional certifications such as CISSP, CISA, ISO 27001 Lead Auditor/Implementer ...