276 to 300 of 663 Vulnerability Management Jobs in the UK excluding London

large public-sector environment. Key Responsibilities Build, administer and maintain secure infrastructure and platforms Drive automation, resilience and continuous improvement Support infrastructure hardening, vulnerability management and monitoring Work across IAM, configuration management and incident response Provide technical expertise on secure and compliant environments Essential Skills Linux ...

accountability. - Represent the organisation externally as a trusted security leader through industry engagement, customer dialogue, and executive advocacy. Key Responsibilities 1. Strategy & Risk Management Strategy & Roadmap: Define and lead the organisation’s cyber security strategy and multi-year roadmap, ensuring security priorities are aligned to business objectives, customer expectations … cyber incidents, acting as the executive point of escalation and ensuring effective coordination, decision‐making, and recovery. Operational Assurance: Oversee core security operations including vulnerability management, threat detection, security testing, and monitoring to maintain an effective and resilient control environment. Security Capability: Direct the investment, performance, and continuous ...

identity, network, and data protection, and maintain living technical standards — feeding directly into how teams build, not just how they're audited. Lead vulnerability remediation as an engineering programme. Define the prioritisation framework — drawing on EPSS, KEV, CVSS, and asset criticality — set remediation SLAs, own the risk-acceptance register … standard for incident response and detection engineering. Build and drive adoption of detection, alerting, and IR tooling across engagements, own the IR-to-vulnerability-management feedback loop, and coordinate cross-team exercises including known-exploited-vulnerability scramble drills. Grow the people around you. Mentor colleagues across ...

integration patterns between IT and OT environments, including segmentation, access control, monitoring and resilience capabilities. Lead OT security transformation workstreams, including secure remote access, vulnerability management, protective monitoring and operational resilience. Advise CISOs, CIOs, operational leaders and engineering teams on OT risk, resilience, regulatory obligations and investment priorities. … accommodations to the recruitment process, at either application or interview, please contact us on recruitmentenquiries@paconsulting.com#LI-IC2SummaryType: Full-timeFunction: ConsultingExperience level: Mid-Senior LevelIndustry: Management Consulting ...

confidence to bring security into delivery without slowing everyone down. Practical experience with security tooling and practices including SAST, DAST, SCA, container scanning, vulnerability management, SBOM tooling such as CycloneDX, IaC security across Terraform, Bicep, Ansible and tools such as Trivy, plus Policy as Code and threat modelling. ...

purpose. Experience defining acceptance criteria, supporting testing/UAT and documenting requirements, issues and decisions Cyber Security Risk, Security Assurance, Controls Testing, GRC, Vulnerability Management Assess control design, Endpoint security, Cloud, Identity, Secure Development, Third-Party risk, Incident Management Desirable: CISSP, CISM, CRISC, CISA, ISO 27001 Lead … APIs, Power BI or data quality controls. Experience with Azure, AWS or GCP security controls. Experience with security data platforms, knowledge graphs, exposure management platforms or PAI. The contract opportunity for a Cyber Security Risk & Assurance SME will be on a 6-month rolling basis, with a hybrid/ ...

purpose. Experience defining acceptance criteria, supporting testing/UAT and documenting requirements, issues and decisions Cyber Security Risk, Security Assurance, Controls Testing, GRC, Vulnerability Management Assess control design, Endpoint security, Cloud, Identity, Secure Development, Third-Party risk, Incident Management Desirable: CISSP, CISM, CRISC, CISA, ISO 27001 Lead … APIs, Power BI or data quality controls. Experience with Azure, AWS or GCP security controls. Experience with security data platforms, knowledge graphs, exposure management platforms or PAI. The contract opportunity for a Cyber Security Risk & Assurance SME will be on a 6-month rolling basis, with a hybrid/ ...

purpose. Experience defining acceptance criteria, supporting testing/UAT and documenting requirements, issues and decisions Cyber Security Risk, Security Assurance, Controls Testing, GRC, Vulnerability Management Assess control design, Endpoint security, Cloud, Identity, Secure Development, Third-Party risk, Incident Management Desirable: CISSP, CISM, CRISC, CISA, ISO 27001 Lead … APIs, Power BI or data quality controls. Experience with Azure, AWS or GCP security controls. Experience with security data platforms, knowledge graphs, exposure management platforms or PAI. The contract opportunity for a Cyber Security Risk & Assurance SME will be on a 6-month rolling basis, with a hybrid/ ...

What you’ll do: Deliver Unified Endpoint Management services across Windows and mobile devices, configuring Microsoft Intune policies for security, compliance, device configuration and patch management, and creating accurate production device profiles and deployment policies. Support CyberArk Privilege Management policies and build and maintain Privileged Access Workstation … development work. Develop and maintain PowerShell automation, reporting solutions and API integrations, and drive improvements in endpoint security, user experience and operational efficiency. Support vulnerability management and security remediation programmes, maintain technical documentation and process workflows, independently deliver technical projects and service improvements, and provide out-of-hours ...

enterprise environments. To be considered for this position, you will need solid hands-on skills with: cloud, endpoint, or infrastructure security identity and access management, multifactor authentication, privileged access, and zero-trust principles managing Windows endpoints through modern device management platforms and implementing endpoint detection and response technologies … into understandable reports. Excellent collaboration and communication skills, capable of working with both technical and non-technical colleagues. Experience working with external security providers, vulnerability management platforms, and SaaS security. Knowledge of frameworks such as ISO 27001 or NIST CSF, along with relevant professional certifications As a Cyber ...

testing, documentation, monitoring and governance standards. Plan and deliver application improvements in collaboration with stakeholders and colleagues, covering requirements, estimation, prioritisation, reporting, risk management, service improvement, knowledge sharing, coaching and continuous professional development. Please see the full Job Description for further details about the role and its requirements. Person … error handling approaches in application services. Awareness of change impact and the need to update existing applications and dependent services. Experience of system management and support (e.g. supporting live applications, troubleshooting and assisting with releases). Desirable NHS or public sector experience (or evidence of working in regulated environments ...

applications, including incremental decomposition, API enablement, cloud adoption and technical debt retirement. Guide the appropriate use of Azure services, containers, application services, messaging, API management, relational and NoSQL data platforms. Improve continuous integration, continuous delivery, automated quality controls, infrastructure management, observability and release safety. Promote cost‐effective architecture … shared platforms where they meet UK product and regulatory needs Security, compliance and operational integrity Ensure threat modelling, secure design, privacy by design, vulnerability management and data protection controls are integrated into engineering ways of working. Work with security, risk, architecture and operations stakeholders to address audit findings ...

Essentials Plus certifications. Coordinate annual assessments and remediation activities. Continuously monitor compliance against Cyber Essentials requirements. Drive improvements that exceed minimum certification standards. Risk Management Maintain the Information Security risk register. Conduct regular risk assessments across systems, suppliers and business processes. Track remediation actions and ensure risks are managed … appropriately. Provide guidance on risk treatment and mitigation strategies. Security Operations Oversee vulnerability management activities. Review security alerts, monitoring outputs and threat intelligence. Coordinate remediation activity with Infrastructure, Development and Operational teams. Support investigation and response to security incidents. Lead post-incident reviews and lessons learned activities. Security ...

Administer and secure our on-premises data centre estate alongside public cloud environments (AWS, GCP or similar). Own OS patching, certificate lifecycle, and vulnerability remediation across the estate. Build and maintain configuration management and automation (Ansible or similar) for consistent, repeatable infrastructure changes. Support containerised workloads (Docker … Hands-on experience with virtualisation and on-premises server infrastructure (VMware ESXi or similar). Strong, proven experience with Linux. Experience with configuration management/infrastructure-as-code (Ansible, Terraform or similar). Experience with logging and monitoring stacks (ELK or similar). Understanding of containerisation and orchestration (Docker ...

evolving threats. Responsibilities Key Responsibilities: Design, implement and optimise security controls across network and cloud environments. Manage and improve firewall, IDS/IPS, and vulnerability management solutions. Identify security weaknesses and drive remediation activities. Support incident response and security investigations. Improve infrastructure logging, monitoring, and threat detection capabilities. … Qualifications Position Requirements 3-5 years' experience in Security Engineering, Network Engineering, or Infrastructure Engineering. Strong knowledge of firewalls, networking, IDS/IPS, and vulnerability management. Experience securing enterprise infrastructure and virtualised environments. Understanding of cyber attack techniques and defensive controls. Knowledge of Azure and/ ...

boards and design authorities. Supporting solution architects and engineering teams in defining clear security and non-functional requirements. Leading or contributing to threat modelling, vulnerability assessments and penetration testing activities. Additional requirements specific to the role: Occasional travel across our client sites and operational locations. Participation in governance … Strong knowledge of industry frameworks such as NCSC guidance, NIST CSF/800-53, ISO 27001/2 or SABSA. Understanding of identity & access management, network security, encryption, API security and secrets management. Experience with vulnerability management, penetration testing and security assurance processes. Ability to define, document ...

features. - Architect, Design, and Implement Infrastructure as Code (IaC): You will treat our infrastructure as a sophisticated software system, responsible for its comprehensive lifecycle management using Terraform. This involves applying best practices from software engineering, such as designing reusable code modules, implementing robust unit and integration testing strategies … tasks, reduce human error, and improve overall system reliability. This involves developing scripts, tools, and workflows to automate tasks such as infrastructure provisioning, configuration management, and monitoring. You will also proactively identify opportunities for automation and drive continuous improvement in our operational processes. - Act as a Strategic Partner ...

features. Architect, Design, and Implement Infrastructure as Code (IaC): You will treat our infrastructure as a sophisticated software system, responsible for its comprehensive lifecycle management using Terraform. This involves applying best practices from software engineering, such as designing reusable code modules, implementing robust unit and integration testing strategies … tasks, reduce human error, and improve overall system reliability. This involves developing scripts, tools, and workflows to automate tasks such as infrastructure provisioning, configuration management, and monitoring. You will also proactively identify opportunities for automation and drive continuous improvement in our operational processes. Act as a Strategic Partner ...

features. Architect, Design, and Implement Infrastructure as Code (IaC): You will treat our infrastructure as a sophisticated software system, responsible for its comprehensive lifecycle management using Terraform. This involves applying best practices from software engineering, such as designing reusable code modules, implementing robust unit and integration testing strategies … tasks, reduce human error, and improve overall system reliability. This involves developing scripts, tools, and workflows to automate tasks such as infrastructure provisioning, configuration management, and monitoring. You will also proactively identify opportunities for automation and drive continuous improvement in our operational processes. Act as a Strategic Partner ...

features. Architect, Design, and Implement Infrastructure as Code (IaC): You will treat our infrastructure as a sophisticated software system, responsible for its comprehensive lifecycle management using Terraform. This involves applying best practices from software engineering, such as designing reusable code modules, implementing robust unit and integration testing strategies … tasks, reduce human error, and improve overall system reliability. This involves developing scripts, tools, and workflows to automate tasks such as infrastructure provisioning, configuration management, and monitoring. You will also proactively identify opportunities for automation and drive continuous improvement in our operational processes. Act as a Strategic Partner ...

features. Architect, Design, and Implement Infrastructure as Code (IaC): You will treat our infrastructure as a sophisticated software system, responsible for its comprehensive lifecycle management using Terraform. This involves applying best practices from software engineering, such as designing reusable code modules, implementing robust unit and integration testing strategies … tasks, reduce human error, and improve overall system reliability. This involves developing scripts, tools, and workflows to automate tasks such as infrastructure provisioning, configuration management, and monitoring. You will also proactively identify opportunities for automation and drive continuous improvement in our operational processes. Act as a Strategic Partner ...

features. Architect, Design, and Implement Infrastructure as Code (IaC): You will treat our infrastructure as a sophisticated software system, responsible for its comprehensive lifecycle management using Terraform. This involves applying best practices from software engineering, such as designing reusable code modules, implementing robust unit and integration testing strategies … tasks, reduce human error, and improve overall system reliability. This involves developing scripts, tools, and workflows to automate tasks such as infrastructure provisioning, configuration management, and monitoring. You will also proactively identify opportunities for automation and drive continuous improvement in our operational processes. Act as a Strategic Partner ...

features. Architect, Design, and Implement Infrastructure as Code (IaC): You will treat our infrastructure as a sophisticated software system, responsible for its comprehensive lifecycle management using Terraform. This involves applying best practices from software engineering, such as designing reusable code modules, implementing robust unit and integration testing strategies … tasks, reduce human error, and improve overall system reliability. This involves developing scripts, tools, and workflows to automate tasks such as infrastructure provisioning, configuration management, and monitoring. You will also proactively identify opportunities for automation and drive continuous improvement in our operational processes. Act as a Strategic Partner ...

features. Architect, Design, and Implement Infrastructure as Code (IaC): You will treat our infrastructure as a sophisticated software system, responsible for its comprehensive lifecycle management using Terraform. This involves applying best practices from software engineering, such as designing reusable code modules, implementing robust unit and integration testing strategies … tasks, reduce human error, and improve overall system reliability. This involves developing scripts, tools, and workflows to automate tasks such as infrastructure provisioning, configuration management, and monitoring. You will also proactively identify opportunities for automation and drive continuous improvement in our operational processes. Act as a Strategic Partner ...

features. Architect, Design, and Implement Infrastructure as Code (IaC): You will treat our infrastructure as a sophisticated software system, responsible for its comprehensive lifecycle management using Terraform. This involves applying best practices from software engineering, such as designing reusable code modules, implementing robust unit and integration testing strategies … tasks, reduce human error, and improve overall system reliability. This involves developing scripts, tools, and workflows to automate tasks such as infrastructure provisioning, configuration management, and monitoring. You will also proactively identify opportunities for automation and drive continuous improvement in our operational processes. Act as a Strategic Partner ...