76 to 100 of 182 Vulnerability Management Jobs in the UK excluding London

real difference. Your responsibilities will include: Leading the investigation and resolution of security incidents, working closely with internal teams and external security partners. Driving vulnerability management, ensuring security risks are identified, prioritised and remediated effectively. Managing and continually improving security technologies including endpoint protection, Microsoft 365 security, email … security, Data Loss Prevention and user awareness programmes. Strengthening identity and access management across Active Directory, Microsoft Entra ID and Intune. Supporting the secure operation of core infrastructure including servers, networking, cloud services and endpoint management. Playing an active role in infrastructure and security projects, helping embed security into ...

data, and endpoint layers. Lead security architecture reviews and technical security assessments. Design zero‐trust security models and continuous verification frameworks. Cyber Threat & Risk Management – Assess cyber threat landscape and design threat‐informed security architectures. Lead security risk assessments and vulnerability management programmes. Design incident response, threat ...

dependency scanning, secrets detection Enable self-serve security tooling for development teams Ability to set up development environment Cloud Security Own cloud security posture management using Wiz (or similar CSPM) Define and enforce cloud security baselines, guardrails, and policies in AWS Implement and maintain IaC security scanning for Terraform … Manage IAM policies, network segmentation, and secrets management Configure and tune SIEM (or similar) for cloud-focused detection Establish logging, monitoring, and alerting requirements based on threat modelling Investigate and respond to cloud security events Risk & Compliance Identify, articulate, and escalate security risks to senior leadership with mitigation plans ...

resilience, and ensure security best practices are embedded across the organisation. Key Responsibilities: Monitor, investigate, and respond to cyber security threats and incidents. Manage vulnerability remediation, patching, and endpoint security. Implement and maintain secure cloud, network, and endpoint environments. Support security governance, audits, compliance, and reporting. Contribute to compliance … business. About You: Experience in a Cyber Security or Security Engineering role. Knowledge of enterprise security technologies, including firewalls, SIEM, EDR, Microsoft Defender, and vulnerability management tools. Experience securing Microsoft Azure environments. Strong analytical, problem-solving, and stakeholder management skills. Experience with security incident response and risk ...

large organisation. Ability to work closely with ICT Security Lead, Identity & Access Administrator, and other stakeholders including colleagues across MKCC. Practical experience with asset management systems and experience securing Microsoft 365 services (e.g. SharePoint, Teams, Copilot). Evidenced knowledge and understanding of security frameworks, standards and best practices … Cyber Essentials, NIST, ISO27001). Proven familiarity with modern network, cloud and identity security concepts such as authentication, firewalls, endpoint protection, email security, vulnerability management, logging, monitoring and security controls. Continuous Learning and Adaptability: Commitment to staying updated on Microsoft security technologies, threat trends, and best practices. ...

/IP, DNS, firewalls, and proxies. Experience within a SOC, NOC, or 24/7 operational environment. Familiarity with MITRE ATT&CK, CVEs, and vulnerability management. Exposure to cloud security monitoring across Azure, AWS, or Microsoft 365. Desirable Certifications Microsoft SC-200 CompTIA Security+/CySA+ ISC2 ...

Drive security-by-design principles and integrate security controls into cloud services, Infrastructure-as-Code (IaC), automation frameworks, and CI/CD pipelines Own vulnerability management, threat modelling, exposure management, and remediation governance across AWS and Azure platforms, ensuring security findings are remediated within agreed timelines ...

Drive security-by-design principles and integrate security controls into cloud services, Infrastructure-as-Code (IaC), automation frameworks, and CI/CD pipelines Own vulnerability management, threat modelling, exposure management, and remediation governance across AWS and Azure platforms, ensuring security findings are remediated within agreed timelines ...

Monitoring security tools and threat intelligence sources to assess security posture and identify risks Investigating and responding to security incidents, alerts and vulnerabilities Conducting vulnerability assessments and recommending security improvements Designing, building and supporting security solutions including SIEM and IDS/IPS technologies Providing cybersecurity expertise to internal engineering … teams Producing and maintaining security documentation, procedures and technical standards Supporting incident management processes and acting as an escalation point for complex security issues Delivering guidance, training and awareness activities across the wider business What We're Looking For We're interested in hearing from candidates with: At least ...

risk and software provenance, with reference to recognised standards. Familiarity with tools used for continuous compliance monitoring, automated controls testing, or cloud security posture management (for example, CSPM tooling, SIEM platforms, or vulnerability management tools). Experience contributing reusable assets playbooks, templates, tooling, or patterns back into ...

risk and software provenance, with reference to recognised standards. Familiarity with tools used for continuous compliance monitoring, automated controls testing, or cloud security posture management (for example, CSPM tooling, SIEM platforms, or vulnerability management tools). Evidence of actively shaping your own development - a T-shaped specialism ...

controls into CI/CD pipelines Develop secure Infrastructure as Code (Terraform, Bicep, ARM, Ansible) Design secure Azure, AWS and hybrid cloud environments Implement vulnerability management, security monitoring and automated compliance Support threat modelling, security architecture reviews and risk assessments Drive adoption of Secure Software Development Lifecycle (SSDLC … Code experience (Terraform, Bicep, ARM Templates or Ansible) Experience securing Kubernetes and containerised environments Knowledge of Zero Trust Architecture, IAM, RBAC and Privileged Access Management (PAM) Experience implementing SAST, DAST, SCA, container scanning and secrets management Strong scripting skills with PowerShell, Python or Bash Experience with SIEM, SOAR ...

security and quality gates into the SDLC. Cloud Security & Compliance: Enforce cloud security best practices, including least privilege, encryption at rest/in transit, vulnerability scanning, and automated remediation. Support ITGC, audit, and regulatory requirements by implementing controls, monitoring, and evidence collection for cloud environments. Respond to security incidents …/CD & DevOps: Strong knowledge of CI/CD tools, containerization (Docker, Kubernetes), and orchestration Security: Solid understanding of cloud security frameworks, IAM, encryption, vulnerability management, and compliance (ISO, NIST, CIS) Networking: Expertise in cloud networking, VPNs, load balancers, DNS, CDN, and hybrid connectivity Monitoring & Observability: Experience with ...

platforms, Logic Apps, Python and APIs. Conduct proactive threat hunting and perform root cause analysis following security incidents. Support endpoint security, identity protection and vulnerability management initiatives. Requirements Experience within a SOC environment. Strong knowledge of SIEM, EDR and SOAR platforms. Hands-on experience with platforms such … Darktrace or similar security technologies. Experience monitoring and securing Azure and AWS environments. Knowledge of ISO 27001 and Cyber Essentials. Excellent communication and stakeholder management skills. Desirable Skills CISSP and/or Microsoft Security certifications (SC-200, SC-300 or SC-400). Experience working within ...

hands-on technical background in operational cyber security spanning endpoint & EDR, identity & Active Directory, Microsoft 365 & Azure, network/ZTNA, and SIEM/log management - able to act as a senior technical authority within the team. Tools: Azure, Active Directory, CrowdStrike Falcon, Zscaler, Vulnerability Management (Qualys, Tenable … execution of globally-prioritised work to agreed quality, pace and outcomes. Drive London-side delivery of in-flight initiatives through completion. Track and chase vulnerability remediation and patching on London-managed systems, escalating blockers. 3 days on site required in central London Cyber Operations & Incident Response Lead, Cloud, Security ...

security frameworks. Lead the end‐to‐end delivery of complex consultancy engagements across SOC/SIEM/SOAR, XDR/EDR, identity, cloud security, vulnerability management and related services, ensuring delivery to agreed scope, quality and timelines. Serve as a senior technical authority and escalation point for high … consultancy engagements within an MSSP or managed services environment, covering SOC design and deployment, SIEM/SOAR, XDR/EDR, identity, cloud security and vulnerability management. Proven capability designing and implementing enterprise security architectures across Microsoft and mixed-vendor environments, including SaaS platforms and hybrid cloud estates. Deep hands ...

security posture through practical and risk-based approaches to information assurance. Key Responsibilities Identify, assess, and advise on cyber security risks using recognised risk management methodologies. Conduct security assurance reviews against industry standards and compliance frameworks. Produce assurance reports and security evidence for key stakeholders. Undertake Privacy Impact Assessments … Information Assurance, Governance, Risk & Compliance (GRC), or Cyber Security Consultancy roles. Strong understanding of information security standards and frameworks, including ISO standards and security management systems. Experience conducting security risk assessments and compliance reviews. Familiarity with cloud technologies, including at least one major cloud platform such ...

security posture through practical and risk-based approaches to information assurance. Key Responsibilities Identify, assess, and advise on cyber security risks using recognised risk management methodologies. Conduct security assurance reviews against industry standards and compliance frameworks. Produce assurance reports and security evidence for key stakeholders. Undertake Privacy Impact Assessments … Information Assurance, Governance, Risk & Compliance (GRC), or Cyber Security Consultancy roles. Strong understanding of information security standards and frameworks, including ISO standards and security management systems. Experience conducting security risk assessments and compliance reviews. Familiarity with cloud technologies, including at least one major cloud platform such ...

Manage and enhance the organisation's cyber security posture . Monitor, investigate, and respond to security threats and vulnerabilities . Administer Identity and Access Management (IAM) across Microsoft , Microsoft Azure , Amazon Web Services (AWS) , and Software as a Service (SaaS) platforms. Implement and maintain Microsoft Defender , Microsoft Sentinel , Microsoft … Purview , and other security technologies . Lead vulnerability management and coordinate penetration testing activities. Secure Microsoft 365 services, including Exchange Online , SharePoint Online , OneDrive , and Microsoft Teams . Implement data protection controls, including Data Loss Prevention (DLP) , Sensitivity Labels , and encryption . Manage security awareness training and phishing ...

Continuous Deployment, Deployment Automation, Git, GitHub, GitLab, Kubernetes, EKS, ECS, Containers, Docker, Container Orchestration, Helm, Autoscaling, Infrastructure Automation, DevSecOps, Security Scanning, Checkov, Trivy, Snyk, Vulnerability Management, Least Privilege, Access Management, CloudFormation, AWS CDK, GitOps, ArgoCD, Flux, Monitoring, Observability, Logging, Alerting, Incident Response, Reliability Engineering, Grafana, Datadog ...

experience implementing and assuring Security by Design across the full technology lifecycle. Experience working with cloud, infrastructure, and application security technologies Strong understanding of vulnerability management, security controls, and risk management practices Demonstrated ability to engage effectively with technical and non-technical stakeholders Excellent communication, influencing ...

observability standards (SLOs, tracing, dashboards) Embed security into pipelines (SAST, SCA, DAST, secrets, IaC scanning) Govern "Golden Path" templates and adoption Operational Oversight & Risk Management Oversee reliability, performance, and security of platforms and pipelines Lead vulnerability management and remediation Support incident response and post-incident reviews Integrate … policy-as-code Ensure audit-ready pipeline outputs Run recovery and resilience testing (game days) What Were Looking For Strong leadership and people management experience Deep expertise in CI/CD, DevSecOps, and security integration Strong cloud, containerisation, and IaC knowledge Proven ability to improve DORA and engineering performance ...

recommend improvements. Support the Infrastructure Team with threat and risk intelligence from the Managed SOC. Investigate and respond to security alerts and incidents. Support vulnerability management and security remediation activities. Assist with Microsoft Defender and Microsoft Sentinel security operations. Promote and enhance the organisation's cyber security culture. … programmes. Experience managing phishing simulation campaigns. Security awareness compliance reporting experience. Microsoft Defender Suite. Microsoft Sentinel. Security Operations (SOC). Incident Response. Threat Intelligence. Vulnerability Management. Excellent communication and stakeholder engagement skills. Desirable Experience ISO 27001. Cyber Essentials. Microsoft Intune. Security awareness programme development. Working with Managed Security Service ...

Board (CAB) and leadership of an Information Security governance forum. Oversee security operations and technical controls across SIEM, firewalls, endpoint protection, identity and access management, and secure configuration. Manage cyber security across cloud and hybrid environments (Microsoft 365/Azure), including patching assurance, disaster recovery and business continuity testing. … Lead vulnerability management and security testing activity (internal scanning, external testing, remediation tracking, evidence gathering). Manage and coordinate incident response, investigation, reporting and post-incident improvement actions. Maintain compliance and evidence for key standards/frameworks, including (as applicable) PSN, PCI-DSS, Cyber Essentials Plus, GDPR ...

house and needs a hands-on Technical Lead to take the technical reins. This is a solo contractor engagement with no formal line management, but you'll be the working technical authority for a team of four (1 infrastructure engineer, 3 Java software engineers) and the key point … production-scale Java codebase Owning AWS cloud infrastructure (EC2/Node-based; Azure also fine) Directing and coordinating a small team without formal line management Supporting DevOps and integration capability moving in-house Second-line technical escalation during a defined cover period Essential Proven experience as a Technical Lead ...