36 Senior Cybersecurity Positions jobs in London

Cybersecurity Vulnerability Lead - £700 per day - Inside IR35 - Remote - 6 Months initial contract.

Our client, the UKs leading producer of Zero Carbon energy, is looking for a Cybersecurity Vulnerability Lead to join them on a contract basis. 

This is a senior role with responsibility for the organisation’s vulnerability management programme across multiple business units, technologies, and regulatory environments.

The organisation has made significant investment in Tenable as its core vulnerability management platform. You’ll be expected to lead its strategic and day-to-day usage, ensuring vulnerabilities are accurately identified, prioritised, and remediated while driving continuous improvement in how the platform is integrated and utilised.

Candidates with strong Tenable expertise, particularly those who have embedded it at scale in large or regulated environments such as financial services, will be especially attractive for this role.

Security Clearance -

Due to the sensitive nature of the work, candidates must be eligible for SC clearance.

• Candidates with active or recently lapsed SC clearance will be prioritised.

• Applicants without clearance must be willing and eligible to undergo vetting.

The Role -

As Cybersecurity Vulnerability Lead, you will:

• Own the end-to-end vulnerability management programme, with Tenable One at the core.

• Define and deliver the strategy, policies, SLAs, and operating rhythm.

• Lead on risk-based prioritisation using exploit intelligence, asset criticality, and business impact.

• Translate scan data into clear, actionable remediation plans for technical teams.

• Build dashboards and executive reports (ServiceNow, Power BI).

• Provide rapid risk assessments and emergency patch governance during incidents.

• Support audits and regulatory compliance (ISO27001, CE+, GDPR, NIS2, ONR).

• Drive automation, integrating tools and workflows to improve efficiency.

• Act as subject matter expert for Tenable and related tooling, ensuring platforms are fully leveraged.

• Mentor analysts and security champions, building maturity across the team.

About You - 

You will bring experience leading vulnerability management at enterprise scale, ideally in financial services or similarly regulated industries.

You should also have hands-on knowledge of the following:

Core Vulnerability Management -

• Tenable One (Exposure Management, Attack Surface Management, Attack Paths, Identity)

• AWS Inspector

• Agent-based and network-based scanning

• Cloud integrations (AWS, Azure, GCP)

• Dashboards and risk-based prioritisation

Patch & Endpoint Management -

• Microsoft Intune / SCCM / WSUS

• Jamf

Workflow & ITSM Integration - 

• ServiceNow (dashboards, SOAR)

• Jira

Cloud & Application Security -

• AWS Security Hub

• Azure Defender for Cloud

• Veracode

Threat Intelligence & Exploit Context -

• Tenable Threat Intelligence

• Exploit DB

• Metasploit

SIEM, SOAR & Monitoring - 

• Microsoft Sentinel

• SOAR platforms (ServiceNow SOAR)

Automation & Scripting - 

• Python, PowerShell, Bash, Ansible

Reporting & Metrics -

• Power BI

• ServiceNow dashboards

• Excel (advanced analysis)

Frameworks & Standards -

• NIST CSF, ISO 27001, OWASP, CE / CE+, GDPR, NIS2, ONR

Security Domains / Capabilities -

• Identity and Access Management (IAM)

• Network Security

• Data Protection

• Cloud Security Controls

• Application Security

• Security Monitoring

Processes & Practices -

• Vulnerability Management Programmes

• Incident Response and Threat Assessment

• Emergency Patch Governance

• Risk-based Prioritisation (CVEs, exploit intelligence, asset criticality, business impact)

• Audit Support (internal assurance, penetration test follow-ups, external audits)

• Exception and exemption management

• Automation of manual tasks

• Dashboarding for risk and SLA metrics

What's on Offer -

• A leadership role with significant influence across a major UK organisation.
• Opportunity to work with a forward-thinking Cyber Services function pushing boundaries in vulnerability management.

Cybersecurity Vulnerability Lead - £700 per day - Inside IR35 - Remote - 6 Months initial contract.

Our client, the UKs leading producer of Zero Carbon energy, is looking for a Cybersecurity Vulnerability Lead to join them on a contract basis. 

This is a senior role with responsibility for the organisation’s vulnerability management programme across multiple business units, technologies, and regulatory environments.

The organisation has made significant investment in Tenable as its core vulnerability management platform. You’ll be expected to lead its strategic and day-to-day usage, ensuring vulnerabilities are accurately identified, prioritised, and remediated while driving continuous improvement in how the platform is integrated and utilised.

Candidates with strong Tenable expertise, particularly those who have embedded it at scale in large or regulated environments such as financial services, will be especially attractive for this role.

Security Clearance -

Due to the sensitive nature of the work, candidates must be eligible for SC clearance.

• Candidates with active or recently lapsed SC clearance will be prioritised.

• Applicants without clearance must be willing and eligible to undergo vetting.

The Role -

As Cybersecurity Vulnerability Lead, you will:

• Own the end-to-end vulnerability management programme, with Tenable One at the core.

• Define and deliver the strategy, policies, SLAs, and operating rhythm.

• Lead on risk-based prioritisation using exploit intelligence, asset criticality, and business impact.

• Translate scan data into clear, actionable remediation plans for technical teams.

• Build dashboards and executive reports (ServiceNow, Power BI).

• Provide rapid risk assessments and emergency patch governance during incidents.

• Support audits and regulatory compliance (ISO27001, CE+, GDPR, NIS2, ONR).

• Drive automation, integrating tools and workflows to improve efficiency.

• Act as subject matter expert for Tenable and related tooling, ensuring platforms are fully leveraged.

• Mentor analysts and security champions, building maturity across the team.

About You - 

You will bring experience leading vulnerability management at enterprise scale, ideally in financial services or similarly regulated industries.

You should also have hands-on knowledge of the following:

Core Vulnerability Management -

• Tenable One (Exposure Management, Attack Surface Management, Attack Paths, Identity)

• AWS Inspector

• Agent-based and network-based scanning

• Cloud integrations (AWS, Azure, GCP)

• Dashboards and risk-based prioritisation

Patch & Endpoint Management -

• Microsoft Intune / SCCM / WSUS

• Jamf

Workflow & ITSM Integration - 

• ServiceNow (dashboards, SOAR)

• Jira

Cloud & Application Security -

• AWS Security Hub

• Azure Defender for Cloud

• Veracode

Threat Intelligence & Exploit Context -

• Tenable Threat Intelligence

• Exploit DB

• Metasploit

SIEM, SOAR & Monitoring - 

• Microsoft Sentinel

• SOAR platforms (ServiceNow SOAR)

Automation & Scripting - 

• Python, PowerShell, Bash, Ansible

Reporting & Metrics -

• Power BI

• ServiceNow dashboards

• Excel (advanced analysis)

Frameworks & Standards -

• NIST CSF, ISO 27001, OWASP, CE / CE+, GDPR, NIS2, ONR

Security Domains / Capabilities -

• Identity and Access Management (IAM)

• Network Security

• Data Protection

• Cloud Security Controls

• Application Security

• Security Monitoring

Processes & Practices -

• Vulnerability Management Programmes

• Incident Response and Threat Assessment

• Emergency Patch Governance

• Risk-based Prioritisation (CVEs, exploit intelligence, asset criticality, business impact)

• Audit Support (internal assurance, penetration test follow-ups, external audits)

• Exception and exemption management

• Automation of manual tasks

• Dashboarding for risk and SLA metrics

What's on Offer -

• A leadership role with significant influence across a major UK organisation.
• Opportunity to work with a forward-thinking Cyber Services function pushing boundaries in vulnerability management.

• Design and architect comprehensive cybersecurity solutions, including network security, endpoint security, cloud security, and data protection strategies.
• Develop and implement security policies, standards, and procedures aligned with industry best practices (e.g., ISO 27001, NIST CSF, GDPR).
• Evaluate and recommend security technologies, tools, and services to enhance the organization's defense capabilities.
• Conduct regular security risk assessments, vulnerability analyses, and penetration testing to identify and remediate potential weaknesses.
• Lead incident response efforts, investigating security breaches, and developing remediation plans to prevent recurrence.
• Collaborate with IT infrastructure and development teams to integrate security controls throughout the system development lifecycle (SDLC).
• Provide expert guidance and mentorship to junior security analysts and engineers.
• Stay abreast of the latest cybersecurity threats, trends, and technologies, and proactively adapt security strategies accordingly.
• Develop and deliver security awareness training to employees across the organization.
• Ensure compliance with all relevant legal, regulatory, and contractual security requirements.

• Master's degree or equivalent experience in Computer Science, Cybersecurity, or a related field.
• Minimum of 8 years of progressive experience in cybersecurity, with a strong emphasis on security architecture and design.
• Demonstrated expertise in designing and implementing security solutions across on-premises, cloud (AWS, Azure, GCP), and hybrid environments.
• In-depth knowledge of network protocols, security technologies (firewalls, IDS/IPS, SIEM, WAFs), and encryption standards.
• Experience with security frameworks and compliance standards such as ISO 27001, NIST, GDPR, and PCI DSS.
• Proven ability to conduct threat modeling, risk assessments, and develop effective mitigation strategies.
• Excellent analytical, problem-solving, and decision-making skills.
• Strong communication and presentation skills, with the ability to articulate complex technical concepts to both technical and non-technical audiences.
• Relevant security certifications such as CISSP, CISM, or GIAC are highly desirable.

• Design and maintain the organization's cybersecurity architecture and roadmap.
• Define security standards, best practices, and guidelines.
• Evaluate and recommend security technologies and solutions.
• Lead security architecture reviews for new systems and applications.
• Develop and implement security controls for cloud environments (AWS, Azure, GCP).
• Oversee identity and access management (IAM) strategies.
• Collaborate with development teams to integrate security into the SDLC (DevSecOps).
• Conduct threat modeling and risk assessments.
• Develop and manage security incident response plans.
• Provide technical leadership and mentorship to security engineers and architects.
• Stay current with emerging cybersecurity threats and technologies.

• Bachelor's or Master's degree in Computer Science, Cybersecurity, or a related field.
• Minimum of 7 years of experience in cybersecurity, with a focus on architecture and design.
• In-depth knowledge of security domains: network security, cryptography, IAM, cloud security, application security.
• Experience designing and implementing security solutions in cloud environments.
• Familiarity with relevant security frameworks (e.g., NIST, ISO 27001).
• Strong understanding of DevSecOps principles and practices.
• Excellent analytical, problem-solving, and strategic thinking skills.
• Superior communication and interpersonal skills, with the ability to influence stakeholders.
• Proven ability to lead projects and mentor technical staff.
• Relevant certifications such as CISSP, CISM, or cloud security certifications are highly desirable.
• Ability to thrive in a fully remote work environment.

• Design, implement, and manage security infrastructure (firewalls, VPNs, IDS/IPS).
• Conduct regular security audits, vulnerability assessments, and penetration testing.
• Develop and refine incident response procedures and playbooks.
• Monitor security alerts and investigate potential breaches.
• Ensure compliance with relevant security standards and regulations.
• Provide technical guidance and mentorship to junior security personnel.
• Collaborate with cross-functional teams to integrate security into system design.
• Stay abreast of the latest cybersecurity threats, trends, and technologies.

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 5+ years of experience in cybersecurity engineering.
• Proficiency with security tools and technologies (SIEM, EDR, vulnerability scanners).
• Strong understanding of networking protocols and security architecture.
• Excellent analytical and problem-solving skills.
• Relevant certifications (CISSP, CISM, CEH) are highly desirable.
• Experience with cloud security (AWS, Azure, GCP) is a plus.
• Excellent communication and interpersonal skills.

• Monitor security alerts and logs from various security tools (SIEM, IDS/IPS, EDR) to identify and investigate potential security incidents.
• Lead and coordinate incident response activities, including containment, eradication, and recovery.
• Perform in-depth analysis of security incidents, root cause analysis, and develop remediation strategies.
• Conduct regular vulnerability assessments and penetration testing, and manage the remediation process.
• Develop and maintain security policies, procedures, and standards in line with industry best practices and regulatory requirements.
• Design and implement security controls to protect networks, systems, and data.
• Stay up-to-date with the latest cybersecurity threats, trends, and technologies.
• Provide expert advice and guidance on cybersecurity best practices to internal stakeholders.
• Develop and deliver cybersecurity awareness training programs for employees.
• Collaborate with IT teams to ensure security is integrated into system design and deployment lifecycles.
• Contribute to the development and maintenance of the organization's security architecture.

• Lead and manage the day-to-day operations of the cybersecurity monitoring and incident response teams.
• Develop, implement, and maintain advanced threat detection strategies using SIEM, IDS/IPS, and EDR solutions.
• Conduct in-depth investigations of security incidents, perform root cause analysis, and develop remediation plans.
• Oversee vulnerability scanning and penetration testing efforts, prioritizing and tracking remediation activities.
• Design and implement security controls for cloud environments (AWS, Azure, GCP).
• Stay current with the latest threat intelligence, attack vectors, and security best practices.
• Develop and document security policies, procedures, and incident response playbooks.
• Mentor and guide junior cybersecurity analysts, fostering their professional development.
• Collaborate with IT infrastructure, application development, and business teams to ensure security is integrated into all aspects of the organization.
• Participate in security awareness training initiatives.
• Prepare regular reports on security posture, incident trends, and key performance indicators for senior management.

• Bachelor's degree in Computer Science, Information Security, or a related field; Master's degree preferred.
• Minimum of 7 years of experience in cybersecurity, with at least 2 years in a lead or senior analyst role.
• In-depth knowledge of security principles, protocols, and technologies (TCP/IP, firewalls, VPNs, encryption, authentication mechanisms).
• Hands-on experience with SIEM platforms (e.g., Splunk, QRadar), EDR solutions, and vulnerability management tools.
• Strong understanding of cloud security concepts and best practices for AWS, Azure, or GCP.
• Experience with incident response methodologies and digital forensics.
• Relevant certifications such as CISSP, CISM, CEH, or GSEC are highly desirable.
• Excellent analytical and problem-solving skills, with the ability to think critically under pressure.
• Strong leadership, communication, and interpersonal skills.
• Ability to work effectively in a hybrid team environment.