76 to 100 of 209 Vulnerability Management Jobs in the UK excluding London

your new role you will take ownership of information security governance, assurance and the ongoing development of an ISO 27001-aligned Information Security Management System for a high profile programme of work. Alongside this you will oversee security controls across corporate and project systems, manage security assessments and supplier … assurance, maintain audit documentation and support incident response. As the onsite expert you will also cover Microsoft 365 security, identity and access management, endpoint protection, vulnerability management, SIEM monitoring and collaborate with managed security partners. What you will need to succeed: Experience in information security assurance ...

frameworks (MoD and HMG experiences helpful) ● Cloud-based cyber security principles and architecture points ● Boundary controls, network segmentation and access control ● Identity and Access Management (including RBAC and A/PBAC, permissions management), ● Cryptographic techniques and implementations ● IT asset management and tracking ● Vulnerability Management ...

frameworks (MoD and HMG experiences helpful) ● Cloud-based cyber security principles and architecture points ● Boundary controls, network segmentation and access control ● Identity and Access Management (including RBAC and A/PBAC, permissions management), ZTA ● Cryptographic techniques and implementations ● IT asset management and tracking ● Vulnerability Management ...

upgrading enterprise server and storage hardware Providing internal support for office hardware including, PCs, laptops, mobile devices (Windows OS, iOS, MacOS and Android) Vulnerability management using scanning tools such as Nessus Remediation/automation of software rollout using Ninite/PDQ Configuring and monitoring of Anti-virus software … Mobile Device Management Firewall/Switch management Configuration, patching and upgrading Administering Microsoft Active Directory, Exchange Server & Office 365 Achieving recognised Cyber Security accreditation Management of video conferencing Management of enterprise level phone system Monitoring and managing the availability and scalability of resources, including CPU usage ...

upgrading enterprise server and storage hardware • Providing internal support for office hardware including, PCs, laptops, mobile devices (Windows OS, iOS, MacOS and Android) • Vulnerability management using scanning tools such as Nessus • Remediation/automation of software rollout using Ninite/PDQ • Configuring and monitoring of Anti-virus software … Mobile Device Management • Firewall/Switch management – Configuration, patching and upgrading • Administering Microsoft Active Directory, Exchange Server & Office 365 • Achieving recognised Cyber Security accreditation • Management of video conferencing • Management of enterprise level phone system • Monitoring and managing the availability and scalability of resources, including CPU usage ...

implementations, architect integrated defence-in-depth solutions, and ensure compliance with stringent MOD security requirements. This role demands exceptional expertise in security architecture, risk management and defence security standards. Key Responsibilities Security Strategy & Architecture Design holistic security architectures incorporating people, process and technology security. Develop enterprise-wide security strategies … data and endpoint layers. Lead security architecture reviews and technical security assessments. Design zero-trust security models and continuous verification frameworks. Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures. Lead security risk assessments and vulnerability management programmes. Design incident response, threat ...

implementations, architect integrated defence-in-depth solutions, and ensure compliance with stringent MOD security requirements. This role demands exceptional expertise in security architecture, risk management and defence security standards. Key Responsibilities Security Strategy & Architecture Design holistic security architectures incorporating people, process and technology security. Develop enterprise-wide security strategies … data and endpoint layers. Lead security architecture reviews and technical security assessments. Design zero-trust security models and continuous verification frameworks. Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures. Lead security risk assessments and vulnerability management programmes. Design incident response, threat ...

implementations, architect integrated defence-in-depth solutions, and ensure compliance with stringent MOD security requirements. This role demands exceptional expertise in security architecture, risk management and defence security standards. Key Responsibilities Security Strategy & Architecture Design holistic security architectures incorporating people, process and technology security. Develop enterprise-wide security strategies … data and endpoint layers. Lead security architecture reviews and technical security assessments. Design zero-trust security models and continuous verification frameworks. Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures. Lead security risk assessments and vulnerability management programmes. Design incident response, threat ...

real difference. Your responsibilities will include: Leading the investigation and resolution of security incidents, working closely with internal teams and external security partners. Driving vulnerability management, ensuring security risks are identified, prioritised and remediated effectively. Managing and continually improving security technologies including endpoint protection, Microsoft 365 security, email … security, Data Loss Prevention and user awareness programmes. Strengthening identity and access management across Active Directory, Microsoft Entra ID and Intune. Supporting the secure operation of core infrastructure including servers, networking, cloud services and endpoint management. Playing an active role in infrastructure and security projects, helping embed security into ...

data, and endpoint layers. Lead security architecture reviews and technical security assessments. Design zero‐trust security models and continuous verification frameworks. Cyber Threat & Risk Management – Assess cyber threat landscape and design threat‐informed security architectures. Lead security risk assessments and vulnerability management programmes. Design incident response, threat ...

dependency scanning, secrets detection Enable self-serve security tooling for development teams Ability to set up development environment Cloud Security Own cloud security posture management using Wiz (or similar CSPM) Define and enforce cloud security baselines, guardrails, and policies in AWS Implement and maintain IaC security scanning for Terraform … Manage IAM policies, network segmentation, and secrets management Configure and tune SIEM (or similar) for cloud-focused detection Establish logging, monitoring, and alerting requirements based on threat modelling Investigate and respond to cloud security events Risk & Compliance Identify, articulate, and escalate security risks to senior leadership with mitigation plans ...

within our clients. As a Managing Consultant – Risk, Cyber & Resilience Transformation, you will help clients build secure, compliant and resilient enterprises by transforming risk management, security operations and governance processes using ServiceNow. You will act as a techno-functional SME across ServiceNow Security and Risk capabilities, helping organisations strengthen … Regulatory compliance AI governance and responsible AI Translate business requirements into integrated risk and security solutions Risk & Compliance Transformation Support implementation of: Integrated Risk Management (IRM) Controls, compliance and audit processes Enterprise risk management frameworks Align solutions to industry and regulatory standards Security Operations Transformation Support implementation ...

resilience, and ensure security best practices are embedded across the organisation. Key Responsibilities: Monitor, investigate, and respond to cyber security threats and incidents. Manage vulnerability remediation, patching, and endpoint security. Implement and maintain secure cloud, network, and endpoint environments. Support security governance, audits, compliance, and reporting. Contribute to compliance … business. About You: Experience in a Cyber Security or Security Engineering role. Knowledge of enterprise security technologies, including firewalls, SIEM, EDR, Microsoft Defender, and vulnerability management tools. Experience securing Microsoft Azure environments. Strong analytical, problem-solving, and stakeholder management skills. Experience with security incident response and risk ...

large organisation. Ability to work closely with ICT Security Lead, Identity & Access Administrator, and other stakeholders including colleagues across MKCC. Practical experience with asset management systems and experience securing Microsoft 365 services (e.g. SharePoint, Teams, Copilot). Evidenced knowledge and understanding of security frameworks, standards and best practices … Cyber Essentials, NIST, ISO27001). Proven familiarity with modern network, cloud and identity security concepts such as authentication, firewalls, endpoint protection, email security, vulnerability management, logging, monitoring and security controls. Continuous Learning and Adaptability: Commitment to staying updated on Microsoft security technologies, threat trends, and best practices. ...

with secondary support for AWS The ideal candidate will bring deep expertise in Terraformbased Infrastructure as Code CICD Kubernetes DevSecOps Nexusbased artifact management and platform reliability with strong alignment to security compliance and governance standards in regulated environments such as banking and financial services Hybrid working: The places that … CICD pipelines using Azure DevOps GitHub Actions Jenkins and cloudnative tooling Build reusable Infrastructure as Code modules and standards using Terraform with strong state management and deployment governance Deploy and manage container platforms and workloads across AKS and GKE as primary targets with practical support for EKS Own enterprise ...

/IP, DNS, firewalls, and proxies. Experience within a SOC, NOC, or 24/7 operational environment. Familiarity with MITRE ATT&CK, CVEs, and vulnerability management. Exposure to cloud security monitoring across Azure, AWS, or Microsoft 365. Desirable Certifications Microsoft SC-200 CompTIA Security+/CySA+ ISC2 ...

continuously improve DevSecOps practices across the delivery teams, including:Secure, automated CI/CD pipelinesSecurity scanning integrated into build, test and deployment workflowsVulnerability lifecycle management, including allowlist processes and risk acceptance where required and secrets management and identity/access management;Policy enforcement for workloads, container images … leading others):CI/CD and GitOps (e.g. GitHub Actions, Argo CD, Argo Rollouts)Security and compliance tooling (e.g. Trivy scanning and vulnerability management, HashiCorp Vault, cert-manager)Containers and orchestration (e.g. Docker, AWS EKS) ; Infrastructure as Code (e.g. Terraform)Observability (e.g. Grafana, Loki) ;Scripting and automation (e.g. ...

Drive security-by-design principles and integrate security controls into cloud services, Infrastructure-as-Code (IaC), automation frameworks, and CI/CD pipelines Own vulnerability management, threat modelling, exposure management, and remediation governance across AWS and Azure platforms, ensuring security findings are remediated within agreed timelines ...

Drive security-by-design principles and integrate security controls into cloud services, Infrastructure-as-Code (IaC), automation frameworks, and CI/CD pipelines Own vulnerability management, threat modelling, exposure management, and remediation governance across AWS and Azure platforms, ensuring security findings are remediated within agreed timelines ...

improve the organisation's security posture across cloud and technology environments. This role has a strong focus on platform security assessments, cloud security posture management (CSPM), and the use of security tools to detect misconfigurations, vulnerabilities, and control gaps. The successful candidate will work closely with engineering, infrastructure … secure-by-design practices. Key Responsibilities: Conduct security assessments of platforms, applications, and cloud environments to identify risks, misconfigurations, and control weaknesses. Use CSPM, vulnerability management, and related security tools to continuously monitor cloud and platform security posture. Review configurations across cloud services, infrastructure, identity, networking, containers ...

Monitoring security tools and threat intelligence sources to assess security posture and identify risks Investigating and responding to security incidents, alerts and vulnerabilities Conducting vulnerability assessments and recommending security improvements Designing, building and supporting security solutions including SIEM and IDS/IPS technologies Providing cybersecurity expertise to internal engineering … teams Producing and maintaining security documentation, procedures and technical standards Supporting incident management processes and acting as an escalation point for complex security issues Delivering guidance, training and awareness activities across the wider business What We're Looking For We're interested in hearing from candidates with: At least ...

risk and software provenance, with reference to recognised standards. Familiarity with tools used for continuous compliance monitoring, automated controls testing, or cloud security posture management (for example, CSPM tooling, SIEM platforms, or vulnerability management tools). Evidence of actively shaping your own development - a T-shaped specialism ...

controls into CI/CD pipelines Develop secure Infrastructure as Code (Terraform, Bicep, ARM, Ansible) Design secure Azure, AWS and hybrid cloud environments Implement vulnerability management, security monitoring and automated compliance Support threat modelling, security architecture reviews and risk assessments Drive adoption of Secure Software Development Lifecycle (SSDLC … Code experience (Terraform, Bicep, ARM Templates or Ansible) Experience securing Kubernetes and containerised environments Knowledge of Zero Trust Architecture, IAM, RBAC and Privileged Access Management (PAM) Experience implementing SAST, DAST, SCA, container scanning and secrets management Strong scripting skills with PowerShell, Python or Bash Experience with SIEM, SOAR ...

enterprise and business‐aligned security initiatives end‐to‐end. Provide expert security guidance across concurrent IT, engineering, and business projects. Oversee security assessments including vulnerability management, penetration testing, and third‐party risk. Translate security findings into prioritized, actionable remediation plans with clear ownership. Provide security input into solution … security frameworks and regulations (NIST, ISO 27001, CIS, GDPR, etc.). Ability to translate technical risk into clear, business‐relevant language. Strong stakeholder management skills with the ability to influence without authority. Bachelor's degree in Engineering, Computer Science, or equivalent experience, plus relevant certifications (CISSP, CISM, GIAC ...

security and quality gates into the SDLC. Cloud Security & Compliance: Enforce cloud security best practices, including least privilege, encryption at rest/in transit, vulnerability scanning, and automated remediation. Support ITGC, audit, and regulatory requirements by implementing controls, monitoring, and evidence collection for cloud environments. Respond to security incidents …/CD & DevOps: Strong knowledge of CI/CD tools, containerization (Docker, Kubernetes), and orchestration Security: Solid understanding of cloud security frameworks, IAM, encryption, vulnerability management, and compliance (ISO, NIST, CIS) Networking: Expertise in cloud networking, VPNs, load balancers, DNS, CDN, and hybrid connectivity Monitoring & Observability: Experience with ...