76 to 100 of 157 Vulnerability Management Jobs in the UK excluding London

OWASP Top 10 and OWASP API Security Top 10. Knowledge of HTTP/S, REST APIs and application layer attack mitigation. Experience with vulnerability management, Qualys and attack surface monitoring tools. Understanding of patch management and vulnerability remediation. Strong stakeholder engagement and communication skills. Reasonable Adjustments ...

implementations, architect integrated defence-in-depth solutions, and ensure compliance with stringent MOD security requirements. This role demands exceptional expertise in security architecture, risk management and defence security standards. Key Responsibilities Security Strategy & Architecture Design holistic security architectures incorporating people, process and technology security. Develop enterprise-wide security strategies … data and endpoint layers. Lead security architecture reviews and technical security assessments. Design zero-trust security models and continuous verification frameworks. Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures. Lead security risk assessments and vulnerability management programmes. Design incident response, threat ...

implementations, architect integrated defence-in-depth solutions, and ensure compliance with stringent MOD security requirements. This role demands exceptional expertise in security architecture, risk management and defence security standards. Key Responsibilities Security Strategy & Architecture Design holistic security architectures incorporating people, process and technology security. Develop enterprise-wide security strategies … data and endpoint layers. Lead security architecture reviews and technical security assessments. Design zero-trust security models and continuous verification frameworks. Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures. Lead security risk assessments and vulnerability management programmes. Design incident response, threat ...

Role: Cyber Vulnerability Manager Location: Cardiff (hybrid) Salary: Band 7 Pension : 20% The Opportunity: Digital Health and Care Wales vision is to provide world leading digital services, empowering people to live healthier lives, and transforming health and care for everyone in Wales. It is a multi-award-winning organisation … twice voted the UK's Best Place to Work in IT. Job Summary A Cyber Vulnerability Manager is responsible for identifying and managing the risks posed by vulnerabilities in the IT systems and applications used by the NHS in Wales. Duties: Act independently using own initiative within established parameters ...

more and ultimately, be more fulfilled. To learn more about how we can supercharge progress for you, visit www.hcltech.com Job Title: Senior Network Patch Management Engineer Location: London/Birmingham 5 days work from office This is Fixed term contract role Experience : 3 – 6 years in network engineering/… operations Education : B.Tech (Electronics & Communication/Computer Science) or equivalent ROLE SUMMARY The L2 Senior Network Patch Management Engineer owns the firmware and software lifecycle across a multi-vendor network estate (LAN, WAN, data centre fabrics, firewalls, load balancers, and wireless). Responsibilities include risk assessment, automated patching workflows ...

security risks across the software delivery lifecycle. Understanding of secure design principles, common web/API vulnerabilities, authentication/authorization models, secrets management and secure SDLC practices. Ability to work with development teams to improve application security posture and shift security left. 3. SIEM Experience Hands-on experience with … compliance, awareness, third-party risk and operational security. Experience translating business and regulatory requirements into practical security controls and improvement plans. 5. Identity & Access Management (IAM) Hands-on experience with identity and access management principles including RBAC, least privilege, privileged access, federation/SSO, MFA and access governance. ...

EMEA) to join our growing team. Reporting to the Global Security Manager, you will be responsible for supporting and enhancing information security, compliance, risk management, and business resilience activities across our UK and European operations. This is an excellent opportunity for a security professional who enjoys balancing technical security … Checks. Conduct internal audits, control reviews, and risk assessments. Maintain and monitor the organisational risk register. Support business continuity and resilience planning activities. Coordinate vulnerability scanning, penetration testing, and remediation programmes. Assist with the investigation and resolution of information security incidents. Deliver security awareness initiatives, user training, and phishing ...

aligned with defence and wider government standards. Act as the Saab UK representative on the Global Cyber Council. Lead risk assessments, threat modelling, and vulnerability management within Saab Uk process. Manage incident response and coordinate with other company parties. Lead on the compliance of Cyber controls including DefStan … cyber threat awareness on a company global scale and bespoke to the organisation. Oversee security within network architecture, encryption protocols, and identity/access management for restricted environments. Direct cyber security audits and penetration testing across defence platforms and supply chains. Provide cyber security training and awareness programs tailored ...

undertake occasional travel across the UK, including London and customer sites, as required. Essential Skills and Experience Proven experience delivering Information Assurance, risk management, and security assurance within Defence, Government, Intelligence, or other highly regulated environments. Strong understanding of NIST RMF/CSF, ISO 27001, and Government security frameworks … artefacts such as SyOPs, RMADs, Security Impact Assessments, risk assessments, and accreditation evidence. Experience leading assurance initiatives, audits, control assessments, incident response activity, and vulnerability management using tools such as Nessus, Trivy, Tenable, or similar platforms. Ability to brief and influence senior stakeholders, mentor assurance practitioners, prioritise competing ...

within this role.This role will focus primarily around the two areas below in bold, but will have crossover into other areas:Threat & Exposure Management (eg. Red Teaming, Penetration Testing, CTEM, VM, OT)Security Operations and Governance (eg. SIEM, GRC, TPRM, Workshops and Assessments)Identity and Access Management (eg. … communications with internal and external stakeholders.Cyber Security technical focusApply learned experience within CyberSecurity to identify suitable opportunities. Knowledge around an area of; Penetration Testing, Vulnerability Management, CVE scoring, Exposure and Risk Management are key to this role.Understand the context of customer engagements as it pertains to good ...

risk and software provenance, with reference to recognised standards. Familiarity with tools used for continuous compliance monitoring, automated controls testing, or cloud security posture management (for example, CSPM tooling, SIEM platforms, or vulnerability management tools). Evidence of actively shaping your own development - a T-shaped specialism ...

self-service models. Security, Risk & Compliance Ensure secure-by-design principles are embedded in all platform architectures. Guide platform-level security controls, identity management, and compliance requirements. Oversee vulnerability management strategies and platform hardening approaches. Align platform design with regulatory and organisational compliance standards. Skills & Experience Essential … frameworks and continuous compliance tooling. Experience with large-scale or enterprise platform transformation initiatives. Exposure to GitOps and modern platform engineering practices. Strong stakeholder management and customer engagement experience. What Success Looks Like You define and deliver a coherent platform strategy that supports scalable, secure, and efficient delivery. ...

Strengthen and manage the organisation's cyber security posture . Detect, investigate, and respond to cyber threats and security incidents . Administer Identity & Access Management (IAM) across Microsoft , Azure , AWS , and SaaS platforms. Deploy and optimise Microsoft Defender , Microsoft Sentinel , and Microsoft Purview . Drive vulnerability management … security or information security role. Strong technical expertise in Microsoft Entra ID , Microsoft Defender Suite , Microsoft Sentinel , and Microsoft Purview . Proven experience managing vulnerability scanning and penetration testing programmes. Experience supporting ISO 27001 compliance and coordinating Cyber Essentials and Cyber Essentials Plus certifications. Strong analytical, problem-solving ...

controls into CI/CD pipelines Develop secure Infrastructure as Code (Terraform, Bicep, ARM, Ansible) Design secure Azure, AWS and hybrid cloud environments Implement vulnerability management, security monitoring and automated compliance Support threat modelling, security architecture reviews and risk assessments Drive adoption of Secure Software Development Lifecycle (SSDLC … Code experience (Terraform, Bicep, ARM Templates or Ansible) Experience securing Kubernetes and containerised environments Knowledge of Zero Trust Architecture, IAM, RBAC and Privileged Access Management (PAM) Experience implementing SAST, DAST, SCA, container scanning and secrets management Strong scripting skills with PowerShell, Python or Bash Experience with SIEM, SOAR ...

Information Security Vulnerability Engineer , Staffordshire ( Qualys, Rapid7, Nessus, Tanium, CrowdStrike) Our well-established client is seeking an Information Security Vulnerability Engineer to join their growing team in Staffordshire. In this role, you will play a key part in identifying, assessing, and mitigating security vulnerabilities across IT, OT, cloud … interested in candidates who have built strong technical foundations within Technical Support, Service Desk, or Infrastructure environments and have gained hands-on experience in vulnerability management, patching, and remediation activities. Experience managing and resolving security vulnerabilities through patch management, tooling and automation, system hardening, and working collaboratively ...

would be great if you also have: Experience working as an Incident Responder Experience developing detection rules, automation workflows or SOAR playbooks Knowledge of vulnerability management and remediation processes Understanding of HMG security standards and processes Microsoft certifications such ...

enjoy solving problems, collaborating with experts, and making a real impact on cybersecurity, this could be the perfect opportunity for you. You'll monitor vulnerability and threat intelligence sources, translating complex security information into clear, actionable insights for technical teams. You'll conduct internal IT Health Checks (ITHCs), working … technical outputs, reports, and documentation from IT, network, and security systems. Practical knowledge of networking technologies, including IP and Ethernet. Experience with application configuration, management, and troubleshooting. Understanding of security technologies such as Nessus, firewalls, intrusion prevention systems (IPS), and vulnerability management tools. A proactive problem solver ...

Manage and enhance the organisation's cyber security posture . Monitor, investigate, and respond to security threats and vulnerabilities . Administer Identity and Access Management (IAM) across Microsoft , Microsoft Azure , Amazon Web Services (AWS) , and Software as a Service (SaaS) platforms. Implement and maintain Microsoft Defender , Microsoft Sentinel , Microsoft … Purview , and other security technologies . Lead vulnerability management and coordinate penetration testing activities. Secure Microsoft 365 services, including Exchange Online , SharePoint Online , OneDrive , and Microsoft Teams . Implement data protection controls, including Data Loss Prevention (DLP) , Sensitivity Labels , and encryption . Manage security awareness training and phishing ...

runbooks and investigation workflows.Build clear timelines of activity and maintain accurate investigation notes.Escalate complex cases to Senior and Lead Analysts with appropriate context.Review vulnerability management output and provide basic prioritisation insight. Hunt and improveTake part in directed threat hunting activities.Suggest improvements to detections, dashboards and runbooks.Support testing ...

pipeline design, integration of security scanning tools, and automation of security controls. Strong knowledge and understanding of service mesh, cryptography, network security, application security, vulnerability management, and risk management. Demonstrable ability to conduct threat modelling, platform security assessments, and gap analysis. Experience building and implementing maturity models, frameworks … roadmaps in complex enterprise environments. Strong stakeholder management skills, with the ability to influence senior leadership and drive change across federated technology teams. Excellent communication skills, with the ability to translate technical risk into business impact. Professional certifications such as CISSP, CISM, CCSK, CCSP, or equivalent. Hands-on knowledge ...

pipelines Perform security code reviews and provide secure coding guidance Define security requirements and support engineering teams with secure-by-design practices Drive vulnerability management, particularly across Kubernetes and container images Triage and validate vulnerabilities, including developing PoCs where appropriate Manage IAM and key management controls Support … OWASP, NIST, ISO 27001 and CIS Excellent communication skills with the ability to work closely with developers and technical stakeholders Desirable Experience with: Vulnerability research/exploit development Manual penetration testing Cloud, web, embedded or mobile security Splunk/OSQuery AI/ML security Distributed systems AWS Security Specialty ...

impact. What you will be doing Monitor, develop and optimise SIEM and threat detection systems Investigate security incidents, coordinating response, containment and escalation Conduct vulnerability scanning and support remediation across the IT estate Work closely with infrastructure and technical teams to implement secure configurations Support and maintain security policies … experience in a cyber security or infrastructure security role Strong understanding of security principles, threat detection and risk-based thinking Experience with SIEM platforms, vulnerability management tools and detection response technologies such as EDR, XDR or MDR Knowledge of cyber security frameworks such as ISO 27001 or NIST ...

Online, Teams, SharePoint, and OneDrive Manage Microsoft Entra ID, including user lifecycle, MFA, and Conditional Access policies Support and maintain Microsoft Intune for device management and compliance Manage Azure cloud resources and ensure security best practices are followed Configure and support Microsoft Purview data governance and compliance controls Participate … security incident response and vulnerability management activities Contribute to digital transformation projects and continuous improvements in IT infrastructure What we are looking for We seek a dedicated professional with hands-on experience in administering Microsoft cloud technologies, complemented by a proactive approach to security and process improvement. ...

evolving threat landscape while maintaining operational resilience. Main duties of the job Leads the Trust's cyber security operations, including monitoring, incident response, and vulnerability management; ensures alignment with national NHS cyber services; drives risk reduction and threat-informed improvements; and provides leadership, governance, performance reporting, and strategic … best practice (e.g.: ISO 27001/2, Essentials) ITIL Qualification Knowledge Essential Proven and significant security operations leadership experience and/or formal management qualification Demonstrated expertise in an IT Security environment. A significant practical knowledge of best use of security technologies, such as: SIEM, SOAR, VM, Firewalls ...

ensure the IT environment remains secure, resilient, compliant and fit for purpose. The successful candidate will combine strong technical knowledge with excellent commercial, vendor management and service delivery skills. You will also play a significant role in IT projects, cyber security, disaster recovery, audit, change management and major … providers where required. Direct and oversee outsourced IT support resources and ensure contractual service performance is maintained. Support incident, problem, request fulfilment and access management activities. Develop and test disaster recovery arrangements and ensure appropriate resilience across the IT estate. Oversee vulnerability management, patching and remediation activities. ...