76 to 100 of 168 Vulnerability Management Jobs in the UK excluding London

dependency scanning, secrets detection Enable self-serve security tooling for development teams Ability to set up development environment Cloud Security Own cloud security posture management using Wiz (or similar CSPM) Define and enforce cloud security baselines, guardrails, and policies in AWS Implement and maintain IaC security scanning for Terraform … Manage IAM policies, network segmentation, and secrets management Configure and tune SIEM (or similar) for cloud-focused detection Establish logging, monitoring, and alerting requirements based on threat modelling Investigate and respond to cloud security events Risk & Compliance Identify, articulate, and escalate security risks to senior leadership with mitigation plans ...

resilience, and ensure security best practices are embedded across the organisation. Key Responsibilities: Monitor, investigate, and respond to cyber security threats and incidents. Manage vulnerability remediation, patching, and endpoint security. Implement and maintain secure cloud, network, and endpoint environments. Support security governance, audits, compliance, and reporting. Contribute to compliance … business. About You: Experience in a Cyber Security or Security Engineering role. Knowledge of enterprise security technologies, including firewalls, SIEM, EDR, Microsoft Defender, and vulnerability management tools. Experience securing Microsoft Azure environments. Strong analytical, problem-solving, and stakeholder management skills. Experience with security incident response and risk ...

large organisation. Ability to work closely with ICT Security Lead, Identity & Access Administrator, and other stakeholders including colleagues across MKCC. Practical experience with asset management systems and experience securing Microsoft 365 services (e.g. SharePoint, Teams, Copilot). Evidenced knowledge and understanding of security frameworks, standards and best practices … Cyber Essentials, NIST, ISO27001). Proven familiarity with modern network, cloud and identity security concepts such as authentication, firewalls, endpoint protection, email security, vulnerability management, logging, monitoring and security controls. Continuous Learning and Adaptability: Commitment to staying updated on Microsoft security technologies, threat trends, and best practices. ...

/IP, DNS, firewalls, and proxies. Experience within a SOC, NOC, or 24/7 operational environment. Familiarity with MITRE ATT&CK, CVEs, and vulnerability management. Exposure to cloud security monitoring across Azure, AWS, or Microsoft 365. Desirable Certifications Microsoft SC-200 CompTIA Security+/CySA+ ISC2 ...

Drive security-by-design principles and integrate security controls into cloud services, Infrastructure-as-Code (IaC), automation frameworks, and CI/CD pipelines Own vulnerability management, threat modelling, exposure management, and remediation governance across AWS and Azure platforms, ensuring security findings are remediated within agreed timelines ...

Drive security-by-design principles and integrate security controls into cloud services, Infrastructure-as-Code (IaC), automation frameworks, and CI/CD pipelines Own vulnerability management, threat modelling, exposure management, and remediation governance across AWS and Azure platforms, ensuring security findings are remediated within agreed timelines ...

with engineering and security teams to embed secure development practices Automating security processes, including SIEM integrations and log ingestion Supporting firewall and network security management across hybrid cloud and on-prem environments Developing security policies, standards, and procedures Conducting infrastructure security assessments using tools and frameworks such … platform security Strong understanding of security fundamentals including: Networking Cloud security CI/CD pipelines Infrastructure as Code Virtualisation Experience with SIEM and log management platforms such as: Splunk Microsoft Sentinel Cribl ELK Exposure to AWS, Azure, or GCP security services Scripting or automation experience using: Python Bash PowerShell ...

Monitoring security tools and threat intelligence sources to assess security posture and identify risks Investigating and responding to security incidents, alerts and vulnerabilities Conducting vulnerability assessments and recommending security improvements Designing, building and supporting security solutions including SIEM and IDS/IPS technologies Providing cybersecurity expertise to internal engineering … teams Producing and maintaining security documentation, procedures and technical standards Supporting incident management processes and acting as an escalation point for complex security issues Delivering guidance, training and awareness activities across the wider business What We're Looking For We're interested in hearing from candidates with: At least ...

risk and software provenance, with reference to recognised standards. Familiarity with tools used for continuous compliance monitoring, automated controls testing, or cloud security posture management (for example, CSPM tooling, SIEM platforms, or vulnerability management tools). Experience contributing reusable assets playbooks, templates, tooling, or patterns back into ...

controls into CI/CD pipelines Develop secure Infrastructure as Code (Terraform, Bicep, ARM, Ansible) Design secure Azure, AWS and hybrid cloud environments Implement vulnerability management, security monitoring and automated compliance Support threat modelling, security architecture reviews and risk assessments Drive adoption of Secure Software Development Lifecycle (SSDLC … Code experience (Terraform, Bicep, ARM Templates or Ansible) Experience securing Kubernetes and containerised environments Knowledge of Zero Trust Architecture, IAM, RBAC and Privileged Access Management (PAM) Experience implementing SAST, DAST, SCA, container scanning and secrets management Strong scripting skills with PowerShell, Python or Bash Experience with SIEM, SOAR ...

security and quality gates into the SDLC. Cloud Security & Compliance: Enforce cloud security best practices, including least privilege, encryption at rest/in transit, vulnerability scanning, and automated remediation. Support ITGC, audit, and regulatory requirements by implementing controls, monitoring, and evidence collection for cloud environments. Respond to security incidents …/CD & DevOps: Strong knowledge of CI/CD tools, containerization (Docker, Kubernetes), and orchestration Security: Solid understanding of cloud security frameworks, IAM, encryption, vulnerability management, and compliance (ISO, NIST, CIS) Networking: Expertise in cloud networking, VPNs, load balancers, DNS, CDN, and hybrid connectivity Monitoring & Observability: Experience with ...

platforms, Logic Apps, Python and APIs. Conduct proactive threat hunting and perform root cause analysis following security incidents. Support endpoint security, identity protection and vulnerability management initiatives. Requirements Experience within a SOC environment. Strong knowledge of SIEM, EDR and SOAR platforms. Hands-on experience with platforms such … Darktrace or similar security technologies. Experience monitoring and securing Azure and AWS environments. Knowledge of ISO 27001 and Cyber Essentials. Excellent communication and stakeholder management skills. Desirable Skills CISSP and/or Microsoft Security certifications (SC-200, SC-300 or SC-400). Experience working within ...

security frameworks. Lead the end‐to‐end delivery of complex consultancy engagements across SOC/SIEM/SOAR, XDR/EDR, identity, cloud security, vulnerability management and related services, ensuring delivery to agreed scope, quality and timelines. Serve as a senior technical authority and escalation point for high … consultancy engagements within an MSSP or managed services environment, covering SOC design and deployment, SIEM/SOAR, XDR/EDR, identity, cloud security and vulnerability management. Proven capability designing and implementing enterprise security architectures across Microsoft and mixed-vendor environments, including SaaS platforms and hybrid cloud estates. Deep hands ...

security posture through practical and risk-based approaches to information assurance. Key Responsibilities Identify, assess, and advise on cyber security risks using recognised risk management methodologies. Conduct security assurance reviews against industry standards and compliance frameworks. Produce assurance reports and security evidence for key stakeholders. Undertake Privacy Impact Assessments … Information Assurance, Governance, Risk & Compliance (GRC), or Cyber Security Consultancy roles. Strong understanding of information security standards and frameworks, including ISO standards and security management systems. Experience conducting security risk assessments and compliance reviews. Familiarity with cloud technologies, including at least one major cloud platform such ...

Manage and enhance the organisation's cyber security posture . Monitor, investigate, and respond to security threats and vulnerabilities . Administer Identity and Access Management (IAM) across Microsoft , Microsoft Azure , Amazon Web Services (AWS) , and Software as a Service (SaaS) platforms. Implement and maintain Microsoft Defender , Microsoft Sentinel , Microsoft … Purview , and other security technologies . Lead vulnerability management and coordinate penetration testing activities. Secure Microsoft 365 services, including Exchange Online , SharePoint Online , OneDrive , and Microsoft Teams . Implement data protection controls, including Data Loss Prevention (DLP) , Sensitivity Labels , and encryption . Manage security awareness training and phishing ...

Continuous Deployment, Deployment Automation, Git, GitHub, GitLab, Kubernetes, EKS, ECS, Containers, Docker, Container Orchestration, Helm, Autoscaling, Infrastructure Automation, DevSecOps, Security Scanning, Checkov, Trivy, Snyk, Vulnerability Management, Least Privilege, Access Management, CloudFormation, AWS CDK, GitOps, ArgoCD, Flux, Monitoring, Observability, Logging, Alerting, Incident Response, Reliability Engineering, Grafana, Datadog ...

experience implementing and assuring Security by Design across the full technology lifecycle. Experience working with cloud, infrastructure, and application security technologies Strong understanding of vulnerability management, security controls, and risk management practices Demonstrated ability to engage effectively with technical and non-technical stakeholders Excellent communication, influencing ...

observability standards (SLOs, tracing, dashboards) Embed security into pipelines (SAST, SCA, DAST, secrets, IaC scanning) Govern "Golden Path" templates and adoption Operational Oversight & Risk Management Oversee reliability, performance, and security of platforms and pipelines Lead vulnerability management and remediation Support incident response and post-incident reviews Integrate … policy-as-code Ensure audit-ready pipeline outputs Run recovery and resilience testing (game days) What Were Looking For Strong leadership and people management experience Deep expertise in CI/CD, DevSecOps, and security integration Strong cloud, containerisation, and IaC knowledge Proven ability to improve DORA and engineering performance ...

large organisation. Ability to work closely with ICT Security Lead, Identity & Access Administrator, and other stakeholders including colleagues across MKCC. Practical experience with asset management systems and experience securing Microsoft 365 services (e.g. SharePoint, Teams, Copilot). Evidenced knowledge and understanding of security frameworks, standards and best practices … Cyber Essentials, NIST, ISO27001). Proven familiarity with modern network, cloud and identity security concepts such as authentication, firewalls, endpoint protection, email security, vulnerability management, logging, monitoring and security controls. Continuous Learning and Adaptability: Commitment to staying updated on Microsoft security technologies, threat trends, and best practices. ...

recommend improvements. Support the Infrastructure Team with threat and risk intelligence from the Managed SOC. Investigate and respond to security alerts and incidents. Support vulnerability management and security remediation activities. Assist with Microsoft Defender and Microsoft Sentinel security operations. Promote and enhance the organisation's cyber security culture. … programmes. Experience managing phishing simulation campaigns. Security awareness compliance reporting experience. Microsoft Defender Suite. Microsoft Sentinel. Security Operations (SOC). Incident Response. Threat Intelligence. Vulnerability Management. Excellent communication and stakeholder engagement skills. Desirable Experience ISO 27001. Cyber Essentials. Microsoft Intune. Security awareness programme development. Working with Managed Security Service ...

house and needs a hands-on Technical Lead to take the technical reins. This is a solo contractor engagement with no formal line management, but you'll be the working technical authority for a team of four (1 infrastructure engineer, 3 Java software engineers) and the key point … production-scale Java codebase Owning AWS cloud infrastructure (EC2/Node-based; Azure also fine) Directing and coordinating a small team without formal line management Supporting DevOps and integration capability moving in-house Second-line technical escalation during a defined cover period Essential Proven experience as a Technical Lead ...

administration of Mimecast email filtering system including email review and release. * Day-to-day administration of CyberArk identity and privileged access management tooling. * Microsoft Purview administration including DLP policy monitoring, sensitivity labels, Discovery Searches and compliance alerts. * Maintain and respond to security-related DDQs, keeping the security evidence library … success in the role. * Hands-on experience with Netskope - web filtering, CASB and cloud security and/or CyberArk - identity and privileged access management would be highly desirable skills. * Experience with Rapid7, InsightVM or InsightIDR for vulnerability management and SIEM would also be highly desirable. * Experience ...

Maintaining network documentation, diagrams and asset inventories. Monitoring security alerts and investigating suspicious activity. Supporting endpoint protection, anti-malware and security monitoring systems. Conducting vulnerability scans and assisting with remediation activities. Ensuring systems are patched and updated in line with security standards. Supporting incident response, backups, disaster recovery … independently and as part of a team. A relevant IT, networking or cybersecurity qualification, or equivalent experience. Experience with firewalls, Microsoft Azure, SIEM platforms, vulnerability management tools or backup and disaster recovery technologies would be advantageous. Certifications such as CCNA, CompTIA Network+ or CompTIA Security+ are desirable ...

supporting major technology transformation programmes. If you're an experienced leader with expertise across service operations, cloud infrastructure, cyber security, and IT service management, we'd love to hear from you. The Role Reporting to the Head of ICT & Digital Services, you'll provide strategic and operational leadership across … Desk, Infrastructure, Cloud and Security teams. Strong experience managing Microsoft Azure cloud environments and enterprise infrastructure. Excellentoperationalcyber security knowledge including: Security monitoring Incident response Vulnerability management Endpoint protection Experience managing enterprise networking, end user computing and modern workplace technologies. Strong supplier and contract management experience. Experience delivering ...

scoping, implementing, and supporting complex IT solutions for clients and internal systems. You will combine technical consultancy, infrastructure design, project delivery, and major incident management, acting as a trusted advisor to clients and colleagues. Key Responsibilities Technical Consultancy & Solution Design Engage with clients to understand business objectives, requirements … cloud migrations Ensure projects are delivered on time, within scope, and to high technical standards Produce detailed implementation documentation and handover materials Major Incident Management Act as technical lead for Priority 1 and business-critical incidents Take ownership of complex escalations from Service Desk and Engineering teams Coordinate technical ...