4 of 4 Remote/Hybrid Vulnerability Management Jobs in the West Midlands

Deliverables Deploy and Govern Pipelines: Rapidly evaluate, design, and improve secure, automated CI/CD and GitOps pipelines across multiple integrated product teams. Vulnerability Management: Seamlessly integrate automated security scanning into build/deployment workflows and manage the vulnerability lifecycle (including allowlist processes and pragmatical risk acceptance … . Multi-Cloud Policy Enforcement: Standardize secrets management, identity/access management (IAM), and policy enforcement across AWS, Azure, and OCI workloads. Cross-Team Collaboration: Partner with developers, infrastructure engineers, and testers to embed secure-by-design principles from day one. Observability and Resilience: Ensure robust logging, monitoring ...

Doing Leading DevSecOps practices across multiple digital products Designing and improving secure CI/CD and GitOps pipelines Embedding security scanning, vulnerability management and compliance controls Driving Infrastructure as Code adoption and governance Implementing secrets management, IAM and policy enforcement Enhancing observability through monitoring, logging and audit ...

remediation alongside feature delivery and other technical work. Help improve secure software development and delivery practices, including CI/CD and related controls. Support vulnerability remediation, including root cause analysis and long-term fixes. Contribute to security standards, metrics and ways of working that improve product security maturity over … product and development teams operate, including how security considerations are balanced alongside product delivery. Strong experience of threat modelling, secure design review, vulnerability assessment and remediation prioritisation. The judgement to assess exploitability and business impact pragmatically Practical experience applying security across the software development lifecycle, including areas such ...

technologies, including cloud platforms, identity solutions, APIs, and microservices. Ensure alignment with NCSC guidance, CAF principles, and government cyber security frameworks. Oversee penetration testing, vulnerability management, and remediation activities. Maintain security, privacy, and resilience risk registers across projects and platforms. Work closely with internal IT, delivery, and third … within complex enterprise or government environments. Proven experience securing and integrating Salesforce platforms within enterprise architectures. Deep understanding of cloud security, identity and access management, APIs, and application security. Experience designing and reviewing secure architectures for large-scale systems and transformation programmes. Strong knowledge of NCSC guidance ...