76 to 100 of 504 Vulnerability Management Jobs in the UK excluding London

ensure rapid detection, escalation and remediation of security events.Driving our threat monitoring capability, identifying emerging risks that could impact our business, customers or reputation.Overseeing vulnerability management across on-premise and cloud environments, ensuring weaknesses are identified, prioritised and remediated effectively.Developing and continually improving security incident response processes, including … outsourced environments.Strong technical expertise across modern security tooling, including Microsoft Defender, Microsoft E5 Security, Sentinel, AWS, Azure, Purview, SIEM, XDR/EDR, CSPM and vulnerability management platforms.Experience leading technical incident response, problem management and security investigations.A solid understanding of enterprise, network, cloud and SaaS/IaaS security.Experience ...

oversee cybersecurity across corporate IT, Operational Technology (OT), and manufacturing environments. Supported by the IT Infrastructure team, you will lead threat detection and response, vulnerability and patch management, security awareness, and compliance. You'll also own the organisation's patching strategy, champion security best practices, and help shape … life assurance Key responsibilities Act as the technical lead for cyber security across IT and Operational Technology (OT) environments Lead the end-to-end management of security incidents, from investigation and containment through to remediation and post-incident review Monitor, triage and respond to security threats using EDR, SIEM ...

identify and mitigate risk.Perform requirements analysis, security audits, and provide detailed mitigation recommendations specifically for Cloud and Container environments.Design, review, and enforce Key Management and Identity and Access Management (IAM) controls.Support the engineering teams on definition on detailed security requirements to meet compliance requirements and industry best practices.Perform … cases to check for vulnerabilities or broken/missing security controls.Recommend improvements to existing security scanning tools and processes, and propose new ones.Vulnerability ManagementDrive vulnerability management with a strong focus on Kubernetes (K8s) infrastructure and container images.Periodically triage the findings from the automated security scanning tools.Validate potential security ...

compliance with enterprise cybersecurity standards. The manager will drive platform standardisation, enhance developer experience, and align DevSecOps initiatives with Avnet’s broader security operations, vulnerability management, and monitoring capabilities.This is an exciting opportunity to lead a talented team while helping shape the future of security engineering at Avnet.What … container security scanningImplement policy-as-code and pipeline enforcement mechanisms (e.g., blocking invalid dependencies)Align DevSecOps initiatives with enterprise risk reduction frameworks and exposure management processesPlatform Engineering and Automation:Lead the security consolidation and optimization of SCM and CI/CD platforms (e.g., GitHub, GitLab)Assist in designing reusable ...

security is embedded throughout the entire product lifecycle. The Staff Product Security Engineer serves as a recognized security subject matter expert, partnering with product management, engineering leadership, certification teams, and executive stakeholders to establish security roadmaps, enhance security capabilities, and address emerging threats. This role combines deep technical expertise … into product design, development, deployment, and maintenance processes. Lead threat modeling activities for critical systems, products, and architectures. Conduct and oversee advanced security assessments, vulnerability investigations, attack surface analyses, and risk evaluations. Design, implement, and review security controls, cryptographic protections, and system hardening mechanisms. Lead investigations of critical security ...

cutting-edge, cloud-based solutions. This is a key opportunity for an Azure DevOps Engineer (for example) to assist in the design, deployment, and management of cloud infrastructure on Azure. The role will be reporting to the IT Technical Services Lead and IT Infrastructure Services Manager. As part … servicesDesigning Cloud Architecture: Planning and developing cloud structures that meet organisation strategies, focusing on scalability, performance and security Manage and maintain the firm’s vulnerability management solutions and remediate vulnerabilities in line with the firm’s policies.Ensure that all Server infrastructure is patched in line with the firm ...

looking for a Wiz Security Engineer to focus on implementing threat modeling, asset/vulnerability management, prioritising patching along with the ability to integrate with Servicnow and other products. This is a hands on role where you will have expereince of: Asset management and audit Prioritising patch … management Integration with Servicenow and other products Experince of Tenable for Asset and Vulnerabiity management is a distinct advantage Threat Modeling: Lead security reviews and map attack surfaces across cloud infrastructure and products. Security Automation: Build policy-as-code and developer tooling to integrate security into CI/ ...

Skills and Qualifications:Bachelor’s degree in cybersecurity, information systems, or a related technical field, or equivalent practical experience.Experience across multiple cybersecurity domains, including vulnerability management, incident response, identity and access management, network security, risk analysis, security operations, and security engineering.Demonstrated success operating as a senior individual … hands-on experience designing secure solutions and partnering with infrastructure and engineering teams to implement them.Deep familiarity with enterprise security tools, including endpoint protection, vulnerability management, and logging or SIEM platforms.Experience with AI security and governance, including policy, risk, and enablement of cyber monitoring, detection, and response capabilities.Experience ...

organisation's security roadmap and controls framework Acting as the senior escalation point for security-related issues Overseeing security operations, incident response and vulnerability management Supporting secure Azure and AWS environments Managing and optimising security tooling including SIEM, EDR and related platforms Reviewing projects, infrastructure changes and technical … guidance across the wider business Skill required Security operations and cyber defence Azure and AWS security Enterprise infrastructure and networking Identity and access management Threat detection and incident response Vulnerability management Security governance, risk and compliance Secure development and DevSecOps practices Experience with Splunk Enterprise Security would ...

Azure, M365, and preferably Google Cloud Platforms (GCP). Aside from infrastructure, the candidate should have experience and working knowledge of SIEM and vulnerability management platforms. The role will cover elements of cyber incident response, so a background in supporting a wider incident response function is a necessity.Key … Cloud.Offer guidance on improving threat detection, monitoring, and response for cloud-based resources.Access Control & Conditional Access:Assess and improve Conditional Access policies and identity management strategies, enforcing zero trust and least privilege principles.Provide expert advice on configuring and managing identity and access management (IAM) solutions for secure cloud ...

Ensure proper monitoring and response plans are in place for customer (AWS) environments to enable the timely and effective response to, and management of, incidents, alarms, notifications, calls, and other activities related to the RSO and new cyber threats. Lead the vulnerability management process to ensure that … teams in relation to identifying and patching vulnerabilities. Develop processes, procedures and playbooks to improve the operational effectiveness and efficiency of the vulnerability management process. Analyse lessons learned and produce thorough documentation on complex incidents focusing on the improvements that can be made to processes, playbooks, and tooling. ...

users. This role combines ownership of security awareness initiatives and KnowBe4 administration with hands-on cyber security operations, including incident investigation, threat analysis, vulnerability management, and Microsoft Defender-based security monitoring. Client Details This company operates within the property industry. Description Administer and manage the KnowBe4 platform … phishing simulation programmes Create targeted security awareness campaigns for different user groups Monitor training completion, engagement metrics, and programme effectiveness Produce compliance reports and management information Develop engaging cyber awareness content across multiple communication channels Deliver security awareness training to technical and non-technical audiences Support security incident investigations ...

ensuring security is embedded throughout the entire product lifecycle.The Staff Product Security Engineer serves as a recognized security subject matter expert, partnering with product management, engineering leadership, certification teams, and executive stakeholders to establish security roadmaps, enhance security capabilities, and address emerging threats. This role combines deep technical expertise … security requirements into product design, development, deployment, and maintenance processes.Lead threat modeling activities for critical systems, products, and architectures.Conduct and oversee advanced security assessments, vulnerability investigations, attack surface analyses, and risk evaluations.Design, implement, and review security controls, cryptographic protections, and system hardening mechanisms.Lead investigations of critical security issues ...

# 24166 Job description Connect to your IndustryCyber security is critical to every organisation. We are shaping strategies and transforming the management of cyber risk, and we need you to join us. You’ll build strong relationships as one of the areas of our cyber practice with over … They bring an ability to apply a robust understanding of security principles and technologies to support clients with varying risk appetite in the pragmatic management of cyber risk.Cyber Security Skills:Strong skills in areas such as cyber strategy, cyber risk, cyber maturity, security architecture, cyber transformation and regulatory compliance ...

# 24166 Job description Connect to your IndustryCyber security is critical to every organisation. We are shaping strategies and transforming the management of cyber risk, and we need you to join us. You’ll build strong relationships as one of the areas of our cyber practice with over … They bring an ability to apply a robust understanding of security principles and technologies to support clients with varying risk appetite in the pragmatic management of cyber risk.Cyber Security Skills:Strong skills in areas such as cyber strategy, cyber risk, cyber maturity, security architecture, cyber transformation and regulatory compliance ...

# 24166 Job description Connect to your IndustryCyber security is critical to every organisation. We are shaping strategies and transforming the management of cyber risk, and we need you to join us. You’ll build strong relationships as one of the areas of our cyber practice with over … They bring an ability to apply a robust understanding of security principles and technologies to support clients with varying risk appetite in the pragmatic management of cyber risk.Cyber Security Skills:Strong skills in areas such as cyber strategy, cyber risk, cyber maturity, security architecture, cyber transformation and regulatory compliance ...

security operations. Drive compliance with ISO 27001, NIST and CBEST frameworks. Review new infrastructure and cloud-based services, ensuring they meet security standards. Conduct vulnerability management activities and coordinate external penetration testing. Work alongside outsourced SOC and security partners to investigate and respond to security incidents. Ensure comprehensive …/3, OSPF and VPNs. Network security controls including Cisco ISE, TACACS, IPS and endpoint protection. Security monitoring and incident response within SIEM environments. Vulnerability management and penetration testing. Security governance aligned to ISO 27001, NIST and risk management frameworks. Developing security policies, conducting audits and managing ...

security operations. Drive compliance with ISO 27001, NIST and CBEST frameworks. Review new infrastructure and cloud‐based services, ensuring they meet security standards. Conduct vulnerability management activities and coordinate external penetration testing. Work alongside outsourced SOC and security partners to investigate and respond to security incidents. Ensure comprehensive …/3, OSPF and VPNs. Network security controls including Cisco ISE, TACACS, IPS and endpoint protection. Security monitoring and incident response within SIEM environments. Vulnerability management and penetration testing. Security governance aligned to ISO 27001, NIST and risk management frameworks. Developing security policies, conducting audits and managing ...

keep everything in top shape. Want to come and be a part of it? What will you be doing? Youll have day to day management of the OSS suite of services and underlying infrastructure as part of a 2nd Line team supporting services that underpin Critical National Infrastructure Youll … proactive and Reactive within Incident and Problem Management Youll carry out Access Management & Vulnerability Management System Governance to ensure the effective operation of the services Providing Out of Hours Support via an On-Call Rota. What youll bring? Youll bring experience with supporting OSS systems ...

professional IT experience, including a minimum of 5 years of dedicated information security experience.Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience managing … analytics, featuring recent experience in technical design and architecture.Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance.Proven experience acting as a technical leader, mentor, or subject matter expert in consulting or architectural roles.Excellent communication ...

professional IT experience, including a minimum of 5 years of dedicated information security experience.Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience managing … analytics, featuring recent experience in technical design and architecture.Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance.Proven experience acting as a technical leader, mentor, or subject matter expert in consulting or architectural roles.Excellent communication ...

professional IT experience, including a minimum of 5 years of dedicated information security experience.Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience managing … analytics, featuring recent experience in technical design and architecture.Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance.Proven experience acting as a technical leader, mentor, or subject matter expert in consulting or architectural roles.Excellent communication ...

professional IT experience, including a minimum of 5 years of dedicated information security experience.Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience managing … analytics, featuring recent experience in technical design and architecture.Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance.Proven experience acting as a technical leader, mentor, or subject matter expert in consulting or architectural roles.Excellent communication ...

professional IT experience, including a minimum of 5 years of dedicated information security experience.Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience managing … analytics, featuring recent experience in technical design and architecture.Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance.Proven experience acting as a technical leader, mentor, or subject matter expert in consulting or architectural roles.Excellent communication ...

professional IT experience, including a minimum of 5 years of dedicated information security experience.Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience managing … analytics, featuring recent experience in technical design and architecture.Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance.Proven experience acting as a technical leader, mentor, or subject matter expert in consulting or architectural roles.Excellent communication ...