26 to 50 of 523 Remote/Hybrid Vulnerability Management Jobs

report them regularly Own the information security risk register and the information security committee agenda Own security policy end to end, including the vulnerability management, version support and secure development policies. Own security budget and spend, and make the case for investment where it is needed. Product … release gating, and work with engineering leadership to embed it in the delivery pipeline rather than bolt it on at the end. Run vulnerability management as a single process across all products, from detection through triage, remediation and customer communication, and close the coverage gaps where some products ...

expert (SME). Leading and facilitating threat modeling exercises. Secure the Build & Deploy Pipeline (DevSecOps/AppSec) Automation of security testing (SAST, DAST, SCA, vulnerability management). Ensuring full benefits realisation of relevant tooling. Ensure maximum code and infrastructure coverage. Ensure code and artifact integrity through automated signing … development, ensuring AI-generated code is rigorously vetted for security vulnerabilities and adheres to internal coding standards. Ensure company-wide best practices for Secret Management, IaC Security, and SBOM. Security auditing of software developed by the company and its partners. Operate a software vulnerability management program, taking ...

business and our customers. In the short to medium term, your focus will be on improving operational security capability - enhancing detection and response, incident management, vulnerability management and cloud security operations. As these capabilities mature, you’ll increasingly focus on security engineering and architecture; designing scalable security … SaaS environment. Build, tune, and maintain high-quality detections, reducing alert fatigue while increasing confidence that meaningful threats are identified quickly. Continuously improve vulnerability management through effective scanning, risk-based prioritisation, remediation and tracking. Improve our cloud security posture across AWS and GCP through strong identity management ...

will be responsible for planning and implementing appropriate security controls to ensure that the information within is kept secure. Key functions/outputs: 1. Vulnerability Scanning & Reporting 2. Endpoint Security 3. Incident Management & Tickets 4. System Hardening 5. Change Work 6. Participation in Regular Meetings 7. Documentation Main … Objectives: Vulnerability Scanning & Reporting Perform regular vulnerability scans and generate reports utilising the below tool sets or similar. The process should be focused on ensuring that the below tool sets are kept up to date and ensure that scans are performed regularly to help assist the Vulnerability ...

PermanentWork Hours: Full TimeContact: Jas GujralEmail: cv@nexusjobs.comTelephone: 020 7488 6900Apply for this job nowJob DescriptionIT Operations Platforms and Security LeadThis role requires excellent management of a small team in IT along with managing stakeholders and vendors. You must be hands-on technically in IT Infrastructure. The IT Operational … Azure, Exchange Online) form a core part of the infrastructure, the role also encompasses broader enterprise IT systems, multi layered networking, security, data management, and third-party platforms that support global business operations and the associated applications estate. The role requires a proactive leader who can drive IT operational ...

PermanentWork Hours: Full TimeContact: Jas GujralEmail: cv@nexusjobs.comTelephone: 020 7488 6900Apply for this job nowJob DescriptionIT Infrastructure Operations and Security LeadThis role requires excellent management of a small team in IT along with managing stakeholders and vendors. You must be hands-on technically in IT Infrastructure. The IT Operational … Azure, Exchange Online) form a core part of the infrastructure, the role also encompasses broader enterprise IT systems, multi layered networking, security, data management, and third-party platforms that support global business operations and the associated applications estate. Security, Compliance & Risk ManagementDefine and enforce cloud security policies, identity management ...

Cybersecurity Consultant, GISI Consulting GroupAbout GISI Consulting Group and PalladiumGISI Consulting Group (GISI CG) is a top 10 global provider of program and project management and engineering consulting services delivering outcomes and solutions for some of the most complex challenges. We deliver services in infrastructure & mobility, earth & water … than 100 countries. With over 5,000 projects annually and a global team of over 11,000 professionals, our advisory, consulting, design and program management capabilities enable us to create a safer and more sustainable world. Learn more about GISI CG at Palladium, a GISI company, works to design ...

suited to a security professional who can operate at both architectural and hands-on levels, with strong experience across endpoint protection, Antivirus/EDR, vulnerability management, platform security and secure environments. You will work closely with Infrastructure, Platform and Security teams, applying NIST Cybersecurity Framework principles … implementation of endpoint and platform security solutions. Design security controls aligned with MOD policies, NIST Cybersecurity Framework and NCSC guidance. Design and deliver vulnerability management capabilities, including scanning, risk prioritisation, remediation and reporting. Develop security solutions for offline and air-gapped environments, including controlled update, patch and signature ...

suited to a security professional who can operate at both architectural and hands-on levels, with strong experience across endpoint protection, Antivirus/EDR, vulnerability management, platform security and secure environments. You will work closely with Infrastructure, Platform and Security teams, applying NIST Cybersecurity Framework principles … implementation of endpoint and platform security solutions. Design security controls aligned with MOD policies, NIST Cybersecurity Framework and NCSC guidance. Design and deliver vulnerability management capabilities, including scanning, risk prioritisation, remediation and reporting. Develop security solutions for offline and air-gapped environments, including controlled update, patch and signature ...

directly. Location : This is a remote role, offering the flexibility to work virtually from anywhere within the UK. Contract Type : Permanent The Opportunity The Vulnerability Analyst is responsible for proactively identifying, validating and assessing security vulnerabilities across the organisation's technology estate. Working closely with the Vulnerability Manager … Security Operations, Risk Management, Infrastructure, Cloud, EUC, Network and Application teams, the role focuses on discovering security weaknesses, validating findings, assessing exploitability and determining risk to the organisation. The Vulnerability Analyst acts as the technical subject matter expert for vulnerability identification and prioritisation activities. What ...

operational processes.Review security architectures and provide pragmatic recommendations aligned to business risk.Support the design and implementation of security controls across areas such as access management, data protection, logging and monitoring, vulnerability management, incident response and third-party risk.Help clients interpret security requirements, assess control maturity and develop … Security OperationsIdentify opportunities to use AI safely to improve cyber security operations, such as alert triage, threat intelligence enrichment, incident summarisation, detection engineering, reporting, vulnerability prioritisation and control testing.Support the evaluation and adoption of AI-enabled security tools, ensuring appropriate security, privacy, governance and operational safeguards are in place.Help ...

Review security architectures and provide pragmatic recommendations aligned to business risk. Support the design and implementation of security controls across areas such as access management, data protection, logging and monitoring, vulnerability management, incident response and third-party risk. Help clients interpret security requirements, assess control maturity … Security OperationsIdentify opportunities to use AI safely to improve cyber security operations, such as alert triage, threat intelligence enrichment, incident summarisation, detection engineering, reporting, vulnerability prioritisation and control testing. Support the evaluation and adoption of AI-enabled security tools, ensuring appropriate security, privacy, governance and operational safeguards ...

MAIN DUTIES Information Security & Risk Management Maintain and continuously improve the ISO 27001:2022 ISMS, including the Statement of Applicability, information security policies, standards and procedures, and the supporting documentation register, ensuring they remain current, mapped to control frameworks and audit-ready. Provide proactive security and data protection assurance … teams that run day‐to‐day security monitoring, detection and remediation, rather than performing these activities hands‐on. Conduct and coordinate threat intelligence and vulnerability management interpreting relevant intelligence, tracking identified vulnerabilities against remediation SLAs, coordinating timely remediation with technology teams and external providers, and keeping abreast ...

Review security architectures and provide pragmatic recommendations aligned to business risk. Support the design and implementation of security controls across areas such as access management, data protection, logging and monitoring, vulnerability management, incident response and third-party risk. Help clients interpret security requirements, assess control maturity … Operations Identify opportunities to use AI safely to improve cyber security operations, such as alert triage, threat intelligence enrichment, incident summarisation, detection engineering, reporting, vulnerability prioritisation and control testing. Support the evaluation and adoption of AI-enabled security tools, ensuring appropriate security, privacy, governance and operational safeguards ...

Review security architectures and provide pragmatic recommendations aligned to business risk. Support the design and implementation of security controls across areas such as access management, data protection, logging and monitoring, vulnerability management, incident response and third-party risk. Help clients interpret security requirements, assess control maturity … Operations Identify opportunities to use AI safely to improve cyber security operations, such as alert triage, threat intelligence enrichment, incident summarisation, detection engineering, reporting, vulnerability prioritisation and control testing. Support the evaluation and adoption of AI-enabled security tools, ensuring appropriate security, privacy, governance and operational safeguards ...

hybrid cloud environments. You will secure cloud infrastructure using industry best practices and cloud-native security technologies. You will implement identity and privileged access management controls. You will monitor and remediate cloud security risks and misconfigurations. You will participate in cloud security reviews, assessments, and architecture discussions. Security Operations … response capabilities. You will support security investigations, incident response activities, and root cause analysis. You will deliver security automation initiatives that improve operational effectiveness. Vulnerability Management You will implement and maintain vulnerability management processes. You will conduct infrastructure, application, and cloud security assessments. You will work ...

integration and enablement position focused on aligning suppliers to established security processes rather than redesigning them. You will work closely with Security Assurance, Incident Management and Vulnerability Management teams to ensure suppliers understand their obligations and can demonstrate readiness from day one. Key responsibilities Develop structured supplier … onboarding documentation. Identify and manage gaps between supplier capabilities, client expectations and existing SI/OI processes. Support supplier assessments relating to Security Management Plans, compliance reporting and assurance activities. Ensure suppliers understand audit expectations, governance requirements and evidence obligations. Coordinate onboarding across multiple service commencement dates and transition ...

vast amount of data generated by banks and financial institutions. Requirements As Director of Platform Engineering, you will: Lead the day‐to‐day management, reliability and continuous improvement of ITRS’ Analytics SaaS platform, with a strong focus on Kubernetes‐based services, cloud‐native operational excellence and measurable service outcomes. … automation, reliability and continuous improvement. Remain highly hands‐on, working directly with engineers on production issues, Kubernetes troubleshooting, incident response, deployment automation, observability, capacity management and service resilience. Drive the evolution of SaaS engineering towards a more automated model, reducing manual intervention, operational toil and human hand‐offs through ...

operation. Configuring, maintaining and improving OFG's security tools, including Microsoft Defender, Microsoft Intune, Entra ID, Microsoft 365 security and compliance capabilities, endpoint protection, vulnerability management and other security platforms. Identifying opportunities to harden systems, reduce risk, improve secure configuration, automate repeatable tasks and strengthen the overall resilience … maintenance of secure configurations across the estate. This is a practical engineering role for someone who is comfortable working across Microsoft cloud security, endpoint management, security monitoring, vulnerability remediation and infrastructure hardening. You will be expected to maintain awareness of the changing threat landscape and proactively recommend improvements ...

build the automation that makes security controls scalable and repeatable. You'll play a key role in supporting regulatory compliance frameworks, customer assurance activities, vulnerability management programmes, and cloud security operations. Key ResponsibilitiesCloud Security & Governance Lead cloud security governance across AWS, Azure, and GCP. Design and implement secure … Cloud AWS Security Hub AWS GuardDuty AWS Inspector Qualys Snyk SonarQube DRATA GitLab Bitwarden Support threat detection, incident investigations, cloud security reviews, and vulnerability management activities. Identity & Access Management Design and maintain least-privilege access models. Manage AWS IAM, IAM Identity Center, Azure Entra ID, RBAC ...

maintain core infrastructure platforms including Windows Server, Active Directory, Microsoft Entra ID (Azure AD), Hyper‐V, storage and backup environments. Support system monitoring, patch management, vulnerability remediation and disaster recovery activities to ensure secure and resilient services. Troubleshoot and resolve infrastructure, server and application issues, providing technical expertise … Azure Hyper‐V PowerShell Backup and Disaster Recovery solutions Storage platforms SCCM/Microsoft Configuration Manager SCVMM HPE Infrastructure SolarWinds Networking technologies Security and vulnerability management tools IT Service Management platforms What We're Looking For Essential At least 3 years' experience in an Infrastructure Engineer, Systems ...

security controls Supporting security across a predominantly Microsoft Azure environment Reviewing and optimising Microsoft security technologies Identifying security gaps and driving technical improvements Supporting vulnerability management and remediation activities Providing security engineering expertise on technical projects Improving documentation, processes and security standards Working closely with technical teams … embedded throughout delivery Technology Environment You'll work with a broad Microsoft security stack including technologies such as: Microsoft Purview Tenable Zscaler Enterprise vulnerability management and cloud‐native security technologies What do you need to be successful We're looking for an experienced Security Engineer with a strong ...

security controls Supporting security across a predominantly Microsoft Azure environment Reviewing and optimising Microsoft security technologies Identifying security gaps and driving technical improvements Supporting vulnerability management and remediation activities Providing security engineering expertise on technical projects Improving documentation, processes and security standards Working closely with technical teams … security stack including technologies such as: Microsoft Azure Microsoft Defender Microsoft Defender for Endpoint Microsoft Defender for Cloud Microsoft Purview Intune Tenable Zscaler Enterprise vulnerability management and cloud-native security technologies What do you need to be successful We're looking for an experienced Security Engineer with ...

practical experience working with modern enterprise security platforms covering endpoint detection and response, extended detection and response, cloud security, threat monitoring, behavioural analytics and vulnerability management, and be comfortable engaging with IT teams, senior stakeholders and third-party vendors. Experience in a medium to large, multi-site professional … eradication, recovery, evidence preservation and clear documentation of findings and actions. Maintain and improve security monitoring, detection rules, alert workflows, operational playbooks, procedures and management reporting. Assist with vulnerability management, supplier and client due diligence returns, audit responses, evidence gathering and compliance monitoring against policies, standards ...

global investment banks. For more information, please visit www.cmgx.io The Role We are hiring a Senior Security Engineer to lead our security risk management and governance work. This is a senior individual‐contributor role for someone who thrives on owning large, ambiguous initiatives end‐to‐end and turning them … CISO, own cross‐program initiatives, and collaborate closely with senior leadership across the firm. The core of the role is hands‐on security risk management, threat modeling, security risk assessments, and security design and architecture reviews, paired with the governance and process work that scales the program. You will ...