226 to 250 of 660 Vulnerability Management Jobs in the UK excluding London

adopting robust development practices, including software design, verification, validation, traceability, cybersecurity, and risk management. Partner with Software, Systems, Quality, Regulatory, Scientific, and Product Management teams throughout the product lifecycle. Contribute technical expertise to product planning, technology roadmaps, and architectural governance activities. Champion secure-by-design principles and help ensure … modern engineering practices. Experience working within regulated software development environments, including quality, safety, and cybersecurity considerations. Experience contributing to software verification, validation, requirements management, traceability, risk management, and software lifecycle activities. Ability to influence technical direction across multidisciplinary organisations through expertise, collaboration, and leadership. Strong communication skills with ...

Develop and maintain technical roadmaps aligned with business goals, collaborating with leadership to prioritize initiatives Design, implement, and continuously improve automated provisioning and systems management pipelines (CI/CD for IT tooling, endpoint management) Research and evaluate new technologies, tools, and vendors; lead proof-of-concept efforts … Assist with or own high-complexity onboarding and offboarding workflows, ensuring security and access policies are followed Perform and improve maintenance activities: backups, patch management, license audits, and monitoring Create and improve IT documentation and internal knowledge bases Respond to critical incidents and drive root cause analysis and permanent ...

Days Home) Type: Full-time, Permanent Overview A leading financial technology organisation is looking to appoint an Information Security Officer to support the management and continuous improvement of information and cyber security across the business. This is a broad security role covering governance, risk, compliance, third party assurance … security who wants broad responsibility rather than specialising solely in one area. Key Responsibilities Support the development and continual improvement of the Information Security Management System Identify, assess, treat and report information security, cyber, technology and third party risks Conduct security risk assessments, control reviews and assurance activities Support ...

manage lessons learned and continuous improvement activities. Produce clear reporting on remediation progress, cyber risks, and compliance outcomes. Key Skills & Experience: Proven delivery management experience within cyber security, infrastructure, or technology programmes. Strong background in remediation, patching, vulnerability management, or cyber risk reduction initiatives. Excellent stakeholder management skills with the ability to coordinate across technical and operational teams. Experience with governance, RAID management, delivery reporting, and assurance activities. Good understanding of cyber security, risk management, audit, and compliance requirements. Strong planning, organisational, and communication skills. #J-18808-Ljbffr ...

manage lessons learned and continuous improvement activities. Produce clear reporting on remediation progress, cyber risks, and compliance outcomes. Key Skills & Experience: Proven delivery management experience within cyber security, infrastructure, or technology programmes. Strong background in remediation, patching, vulnerability management, or cyber risk reduction initiatives. Excellent stakeholder management skills with the ability to coordinate across technical and operational teams. Experience with governance, RAID management, delivery reporting, and assurance activities. Good understanding of cyber security, risk management, audit, and compliance requirements. Strong planning, organisational, and communication skills. This is an excellent opportunity for a delivery-focused ...

strong focus on cybersecurity, IT infrastructure, or platform security initiatives. Security & IT Domain Expertise: Deep understanding of cybersecurity frameworks, enterprise IT delivery, threat management, DevSecOps practices, and security architecture principles. Governance, Risk & Compliance (GRC): Strong experience in risk management, financial forecasting, regulatory compliance, and security governance frameworks within … enterprise tech environments. Executive Stakeholder Management: Demonstrated ability to influence, present to, and align priorities with senior and executive leadership (e.g., CISO, CTO, Head of IT). Leadership & Coaching: Proven track record in leading, coaching, and mentoring delivery professionals, fostering skills growth in technical delivery and security operations. Delivery ...

alerts for urgency and impact Deliver weekly and monthly reporting to clients and stakeholders Communicate security findings and trends directly to clients Support vulnerability management analysis and remediation efforts Lead false‐positive reduction and SIEM tuning activities Mentor and support development of Tier 1 and junior analysts Contribute ...

/or AWS. Identity security, Zero Trust and Privileged Access Management. Network, endpoint and infrastructure security. SOC, SIEM, SOAR, EDR, NDR or XDR technologies. Vulnerability management and security monitoring. Threat modelling, risk assessment and security governance. DevSecOps, Infrastructure as Code or security automation. Designing secure, resilient and auditable ...

Information Security Vulnerability Engineer , Staffordshire ( Qualys, Rapid7, Nessus, Tanium, CrowdStrike) Our well-established client is seeking an Information Security Vulnerability Engineer to join their growing team in Staffordshire. In this role, you will play a key part in identifying, assessing, and mitigating security vulnerabilities across IT, OT, cloud … interested in candidates who have built strong technical foundations within Technical Support, Service Desk, or Infrastructure environments and have gained hands-on experience in vulnerability management, patching, and remediation activities. Experience managing and resolving security vulnerabilities through patch management, tooling and automation, system hardening, and working collaboratively ...

Security Analyst Requirements Experience in information security, IT risk or IT operations. Good understanding of cybersecurity risks, threats and security controls. Experience with incident management, risk assessment and assurance activities. Exposure to SIEM, endpoint protection or vulnerability management tooling. Understanding of cloud security concepts, ideally including Azure. ...

clear documentation and reporting. Good planning and organisational skills with attention to detail. Technical experience and skills Understanding of cybersecurity domains, including Threat Intelligence, Vulnerability Management, Security Testing, Security Architecture, Infrastructure Protection, Application Security, Identity and Access Management, Incident Investigation & Response, and Cryptography. Familiarity with information security ...

across product , application , cloud , infrastructure, network , endpoint , and third-party environments. Working knowledge of EU cybersecurity regulatory requirements, particularly the incident and actively exploited vulnerability notification requirements of the EU Cyber Resilience Act. Strong understanding of threat and vulnerability analysis, digital forensics, evidence preservation, chain of custody … technologies such as SIEM, endpoint security, threat intelligence, and vulnerability management platforms. Ability to translate complex technical findings into clear incident assessments, escalation decisions, executive communications, and regulatory notifications. Strong leadership, stakeholder management, communication, and decision-making skills, with the ability to manage high-pressure incidents ...

with HQ in Redhill; Surrey. Main Purpose of Job · Developing the information security plans and policies for the company and Customers working with Security Management and Compliance functions to embed security management plans into operational practice · Implementing protections and solutions to ensure and enforce the information security plans … testing for vulnerabilities and recommending improvements. · To participate and support all internal IT & Engineering teams including providing advice and expertise on the design and management of internal, customer and global networks from a cybersecurity perspective. Creating documentation around policies, procedures and events. Technical expertise: Security · Be the centre ...

Disclosure and Barring Service). This role is 5 days onsite in Preston and is on shift. Your role As a Security Incident Management Analyst, your mission is to detect, investigate, and... you’ll: Monitor security systems for suspicious activity and emerging threats. Log and escape incidents using … incident management platform. Ensure the health and performance of monitoring tools. Collaborate with other analysts and support teams during investigations. Document findings clearly and contribute to continuous improvement. Help produce regular service reports and insights. You can bring your whole self to work. At Capgemini building an inclusive future ...

security and quality gates into the SDLC. Cloud Security & Compliance: Enforce cloud security best practices, including least privilege, encryption at rest/in transit, vulnerability scanning, and automated remediation. Support ITGC, audit, and regulatory requirements by implementing controls, monitoring, and evidence collection for cloud environments. Respond to security incidents …/CD & DevOps: Strong knowledge of CI/CD tools, containerization (Docker, Kubernetes), and orchestration Security: Solid understanding of cloud security frameworks, IAM, encryption, vulnerability management, and compliance (ISO, NIST, CIS) Networking: Expertise in cloud networking, VPNs, load balancers, DNS, CDN, and hybrid connectivity Monitoring & Observability: Experience with ...

remediation plans. Partner with engineering and product teams to embed Cyber Resilience Act (CRA) requirements into the product lifecycle, including secure-by-design principles, vulnerability management, SBOMs, and incident reporting processes. Drive implementation of cybersecurity and risk management controls, ensuring compliance with regulatory requirements related to governance … communicate compliance status to leadership. What You Will Need: 7+ years of experience in cybersecurity compliance, governance, risk & compliance (GRC), IT/cyber risk management, or a related regulatory compliance function. Strong knowledge of EU cybersecurity regulations, including NIS2 and the Cyber Resilience Act (CRA), or experience with frameworks ...

customers. Configure, maintain and troubleshoot network and host-based security technologies. Develop and review secure architectures, standards, procedures and security controls. Support system hardening, vulnerability management and security improvement initiatives. Produce high-quality technical documentation, reports, procedures and customer deliverables. Perform cybersecurity IEC62443 risk assessments and vulnerability … SCADA environments, with strong knowledge of industrial cybersecurity architectures including zones, conduits and segmentation, Active Directory, PKI, secure remote access, and cybersecurity risk and vulnerability management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection ...

shape and grow the wider cyber security capability. Key Responsibilities Deliver Cyber Security work packages for clients and internal delivery programmes Develop Security Management Plans Understand and define capability context; perform Risk Assessments Define and architect Security Controls Plan Vulnerability Management activity Develop Key/Certificate Management ...

infrastructure. System Administration: Manage and maintain clients' IT environments, including servers, virtualization platforms (VMware, Hyper‐V), cloud infrastructure (Azure, AWS), and network configurations. Network Management: Configure and troubleshoot firewalls, VPNs, switches, routers, and wireless solutions, ensuring optimal network performance and security. Security Management: Implement and manage security solutions … including firewalls, antivirus, endpoint protection, vulnerability management, and patching protocols. Project Implementation: Work on large-scale projects such as server migrations, cloud deployments, network overhauls, and security upgrades for our clients. Client Consultation: Act as a trusted advisor for clients, providing recommendations and strategic solutions to improve their ...

incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical roadmaps with … gaps and align solutions/services to mitigate risk Strong communication and storytelling skills , adapting for technical and non-technical audiences Familiarity with service management practices (e.g. ITIL, ticketing systems) Relevant certifications (e.g. CISSP, CISM, Security+, cloud security ) – desirable Proactive, accountable, and customer-focused mindset with strong ownership Benefits ...

investigation workflows. Build clear timelines of activity and maintain accurate investigation notes. Escalate complex cases to Senior and Lead Analysts with appropriate context. Review vulnerability management output and provide basic prioritisation insight. Hunt and improve Take part in directed threat hunting activities. Suggest improvements to detections, dashboards ...

Online, OneDrive) **Experience with Azure AD **Support of Windows and Apple devices **Knowledge of networking, VPNs, remote access, and infrastructure **Experience with cybersecurity, endpoint management, patching, and vulnerability management **Exposure to technologies such as Azure, VMware, Cisco, or Meraki Immediate start date. Please apply or call Craig ...

Manage and enhance the organisation's cyber security posture . Monitor, investigate, and respond to security threats and vulnerabilities . Administer Identity and Access Management (IAM) across Microsoft , Microsoft Azure , Amazon Web Services (AWS) , and Software as a Service (SaaS) platforms. Implement and maintain Microsoft Defender , Microsoft Sentinel , Microsoft … Purview , and other security technologies . Lead vulnerability management and coordinate penetration testing activities. Secure Microsoft 365 services, including Exchange Online , SharePoint Online , OneDrive , and Microsoft Teams . Implement data protection controls, including Data Loss Prevention (DLP) , Sensitivity Labels , and encryption . Manage security awareness training and phishing ...

should bring to the role Experience in control testing automation, process automation, or related assurance activities within an enterprise environment. Strong understanding of risk management practices and control frameworks. Ability to measure, monitor, and report on control effectiveness using relevant metrics and data. Experience collaborating with both technical … cloud platforms. Ability to implement monitoring mechanisms and analyse automated testing outputs to identify control weaknesses. Experience documenting automation processes, workflows, and exception management procedures. Desirable qualifications and experience Experience working in a regulated environment, the water utility sector, or large complex critical national infrastructure organisations. Familiarity with governance ...

environment. Hands-on experience with SIEM platforms including Microsoft Defender, Splunk, QRadar, CrowdStrike, or LogRhythm. Comfortable with Microsoft Azure, Microsoft Intune, and Identity & Access Management (IAM) security. Knowledge of network security, including protocols, encryption, firewalls, and security solutions such as Tanium. Experience managing and administering IAM and Directory services. … current cyber security threats, vulnerabilities, attack techniques, and security frameworks. Experience with Cloud Security across SaaS, PaaS, and IaaS platforms. Strong understanding of vulnerability management, threat actors, attack methodologies, infection vectors, and incident investigation. Strong communication skills with the ability to explain technical findings to technical ...