Senior/Principal AI Engineer | Up to £130k + Hybrid (2 Days On-Site, London) A fast-growing cybersecurity company is looking for a Senior or Principal AI Engineer to drive the design and deployment of robust, explainable, production-grade AI systems. You'll collaborate across technical teams to deliver solutions and leverage advanced ML, deep learning, and statistical methods. Your work will span from prototyping to deploying AI services in production with a strong focus on performance, explainability, and cost-efficiency. What You'll Bring: Deep applied experience in ML/DL , with bonus points for work in threat detection , phishing , or abuse detection Proven ability to design and deploy full-stack AI pipelines in production Strong experience in Back End engineering , ideally with Go and ML frameworks like PyTorch or TensorFlow Familiarity with MLOps , cloud infrastructure (AWS) , Kubernetes , and Terraform Experience evaluating and deploying models (including anomaly detection, RAG, and clustering) in noisy, evolving data environments Nice to Have: Experience with Perl Knowledge of threat intelligence integration and MCP architectures Location: Hybrid - 2 days a week on-site in Central London Salary: Up to £130,000 , depending on experience RSG Plc is acting as an Employment Agency in relation to this vacancy.
01/07/2025
Full time
Senior/Principal AI Engineer | Up to £130k + Hybrid (2 Days On-Site, London) A fast-growing cybersecurity company is looking for a Senior or Principal AI Engineer to drive the design and deployment of robust, explainable, production-grade AI systems. You'll collaborate across technical teams to deliver solutions and leverage advanced ML, deep learning, and statistical methods. Your work will span from prototyping to deploying AI services in production with a strong focus on performance, explainability, and cost-efficiency. What You'll Bring: Deep applied experience in ML/DL , with bonus points for work in threat detection , phishing , or abuse detection Proven ability to design and deploy full-stack AI pipelines in production Strong experience in Back End engineering , ideally with Go and ML frameworks like PyTorch or TensorFlow Familiarity with MLOps , cloud infrastructure (AWS) , Kubernetes , and Terraform Experience evaluating and deploying models (including anomaly detection, RAG, and clustering) in noisy, evolving data environments Nice to Have: Experience with Perl Knowledge of threat intelligence integration and MCP architectures Location: Hybrid - 2 days a week on-site in Central London Salary: Up to £130,000 , depending on experience RSG Plc is acting as an Employment Agency in relation to this vacancy.
Technical Infrastructure Manager/Linux Systems Administrator/Team Lead Candidates MUST come from a Highly Technical Linux Systems Administrators Background and still be Hands On with a minimum of 3 years' experience either a Manager or a Team Leader looking for the next step up. The successful candidate will be responsible for leading and managing the day-to-day operations of a mission-critical Linux infrastructure team, including both the Linux Support Desk staff along with senior-level system administrators. Previous Financial/Banking experience in a Low Latency environment would be highly beneficial but not essential. Responsibilities and Duties The successful candidate will manage both the Linux internal support team as well as a senior sysadmin team of experienced professionals. These teams oversee the entire company's Linux estate including development, QA and multiple production trading systems including some belonging to third party clients. Collaborate with development, networks, ops and product teams on strategic IT initiatives. Assist with planning, management and resource allocation of inter-departmental projects alongside the company's PM team. Oversee incident management, root cause analysis, and rapid resolution of system outages or performance degradation. Ensure compliance of company procedures such as change management, patch management and security and audit processes. Assist in the maintenance of these procedures. Support regular security audits and penetration tests, addressing findings and oversee any remediation work. Improve system monitoring, alerting, documentation, operating procedures and incident response processes. Manage, mentor, plan and coordinate the activities of both teams. Required Skills/Experience 7+ years Linux system administration experience with at least 3 years in a managerial or team lead role. Strong expertise with RHEL-based systems, including installation, ongoing management, monitoring, performance tuning, system security hardening, etc. Proven track record of managing geographically distributed teams, including senior engineers and tier-1/2 support staff including on-call and rota scheduling. Experience in managing complex IT projects, including system migrations and infrastructure upgrades. Strong understanding of cybersecurity principles and experience implementing security measures in a regulated environment. Ability to coach, mentor, and upskill staff; develop career paths and ensure team resilience. Experience undertaking root cause analysis including prevention orientated solution reporting. Working experience with deployment tools (eg GitLab pipelines) and rollback strategies. Proficiency in managing bare-metal Servers, virtualization platforms such as VMware, containerised systems as well as familiarity with hybrid cloud environments and DevOPS practices. Familiarity with incident/problem management and change control workflows a plus. Previous experience with low latency systems or financial experience desirable. Excellent verbal and written communication skills, with the ability to interface with operations desks, application developers, compliance teams, and executive leadership. Benefits Include 25 days annual leave - not including bank holidays Private medical insurance Flexible working hours Company pension Group Policies - Life Assurance, Income Protection and Critical Illness Discretionary bonus Share Incentive Plan Electric Car Scheme Enhanced Maternity and Paternity Policy
01/07/2025
Full time
Technical Infrastructure Manager/Linux Systems Administrator/Team Lead Candidates MUST come from a Highly Technical Linux Systems Administrators Background and still be Hands On with a minimum of 3 years' experience either a Manager or a Team Leader looking for the next step up. The successful candidate will be responsible for leading and managing the day-to-day operations of a mission-critical Linux infrastructure team, including both the Linux Support Desk staff along with senior-level system administrators. Previous Financial/Banking experience in a Low Latency environment would be highly beneficial but not essential. Responsibilities and Duties The successful candidate will manage both the Linux internal support team as well as a senior sysadmin team of experienced professionals. These teams oversee the entire company's Linux estate including development, QA and multiple production trading systems including some belonging to third party clients. Collaborate with development, networks, ops and product teams on strategic IT initiatives. Assist with planning, management and resource allocation of inter-departmental projects alongside the company's PM team. Oversee incident management, root cause analysis, and rapid resolution of system outages or performance degradation. Ensure compliance of company procedures such as change management, patch management and security and audit processes. Assist in the maintenance of these procedures. Support regular security audits and penetration tests, addressing findings and oversee any remediation work. Improve system monitoring, alerting, documentation, operating procedures and incident response processes. Manage, mentor, plan and coordinate the activities of both teams. Required Skills/Experience 7+ years Linux system administration experience with at least 3 years in a managerial or team lead role. Strong expertise with RHEL-based systems, including installation, ongoing management, monitoring, performance tuning, system security hardening, etc. Proven track record of managing geographically distributed teams, including senior engineers and tier-1/2 support staff including on-call and rota scheduling. Experience in managing complex IT projects, including system migrations and infrastructure upgrades. Strong understanding of cybersecurity principles and experience implementing security measures in a regulated environment. Ability to coach, mentor, and upskill staff; develop career paths and ensure team resilience. Experience undertaking root cause analysis including prevention orientated solution reporting. Working experience with deployment tools (eg GitLab pipelines) and rollback strategies. Proficiency in managing bare-metal Servers, virtualization platforms such as VMware, containerised systems as well as familiarity with hybrid cloud environments and DevOPS practices. Familiarity with incident/problem management and change control workflows a plus. Previous experience with low latency systems or financial experience desirable. Excellent verbal and written communication skills, with the ability to interface with operations desks, application developers, compliance teams, and executive leadership. Benefits Include 25 days annual leave - not including bank holidays Private medical insurance Flexible working hours Company pension Group Policies - Life Assurance, Income Protection and Critical Illness Discretionary bonus Share Incentive Plan Electric Car Scheme Enhanced Maternity and Paternity Policy
We're working with a large scale organisation in Glasgow currently going through an ambitious digital transformation, modernising their infrastructure estate and moving from a heavily onprem setup to a more scalable, cloud first model. As part of this evolution, they're hiring a 3rd Line Infrastructure Engineer with strong Microsoft experience to support and lead key projects across Azure, Intune, and endpoint security. This role is ideal for someone who thrives in a hands on technical environment and enjoys balancing BAU escalations with impactful project delivery. You'll play a key role as part of a small internal IT team, working closely with first line support, key stakeholders across the business, and external vendors to help deliver a wide range of infrastructure improvements. From migrating to Azure AD and Intune, to rolling out Defender across the business and helping push toward Cyber Essentials Plus and ISO 27001 compliance; there's a lot going on, and you'll be in the thick of it. Alongside cloud migration work, you'll also be involved in troubleshooting Server Side issues, maintaining core infrastructure services, and making sure everything runs smoothly behind the scenes. Responsibilities: You'll support and lead 3rd line infrastructure activities across onprem and cloud services, resolving escalated issues while contributing to a variety of internal projects. You'll work within an ITIL aligned environment, helping improve system performance, network reliability, and cyber security posture. Collaborating across support functions and with senior leadership, you'll take ownership of your technical space, from endpoint security to server virtualisation and cloud platform improvements. It'd be great if you have Strong Microsoft knowledge; Azure AD, Intune, Entra, O365, Endpoint Manager Experience supporting server platforms (Windows Server, Exchange, SharePoint) Virtualisation (VMware, Hyper V, or Proxmox) and Scripting (PowerShell) Solid networking knowledge - DNS, DHCP, routing, Firewalls, web filtering Experience supporting telephony platforms in a business environment Exposure to cloud migrations, ideally Azure (some AWS experience also fine) Experience supporting enterprise platforms like IIS & SQL Familiarity with compliance standards (ISO 27001, Cyber Essentials, NIST) There's no on call requirement, though some flexibility around out of hours work may occasionally be needed. This is a genuinely varied and collaborative environment, one where you can roll up your sleeves and get involved in modernising systems that underpin the wider business. In return, they're able to offer a salary of around £40,000 depending on experience, with a bonus, pension, 28 days' holiday plus public, and hybrid working. The business has offices across the globe, but this role is based in Glasgow (typically three days in the office each week, a little more at the beginning during onboarding). If you're a technically capable infrastructure engineer ready to take on cloud first transformation projects, we'd love to hear from you. Apply now or get in touch with Lewis at Cathcart Technology for more information.
30/06/2025
Full time
We're working with a large scale organisation in Glasgow currently going through an ambitious digital transformation, modernising their infrastructure estate and moving from a heavily onprem setup to a more scalable, cloud first model. As part of this evolution, they're hiring a 3rd Line Infrastructure Engineer with strong Microsoft experience to support and lead key projects across Azure, Intune, and endpoint security. This role is ideal for someone who thrives in a hands on technical environment and enjoys balancing BAU escalations with impactful project delivery. You'll play a key role as part of a small internal IT team, working closely with first line support, key stakeholders across the business, and external vendors to help deliver a wide range of infrastructure improvements. From migrating to Azure AD and Intune, to rolling out Defender across the business and helping push toward Cyber Essentials Plus and ISO 27001 compliance; there's a lot going on, and you'll be in the thick of it. Alongside cloud migration work, you'll also be involved in troubleshooting Server Side issues, maintaining core infrastructure services, and making sure everything runs smoothly behind the scenes. Responsibilities: You'll support and lead 3rd line infrastructure activities across onprem and cloud services, resolving escalated issues while contributing to a variety of internal projects. You'll work within an ITIL aligned environment, helping improve system performance, network reliability, and cyber security posture. Collaborating across support functions and with senior leadership, you'll take ownership of your technical space, from endpoint security to server virtualisation and cloud platform improvements. It'd be great if you have Strong Microsoft knowledge; Azure AD, Intune, Entra, O365, Endpoint Manager Experience supporting server platforms (Windows Server, Exchange, SharePoint) Virtualisation (VMware, Hyper V, or Proxmox) and Scripting (PowerShell) Solid networking knowledge - DNS, DHCP, routing, Firewalls, web filtering Experience supporting telephony platforms in a business environment Exposure to cloud migrations, ideally Azure (some AWS experience also fine) Experience supporting enterprise platforms like IIS & SQL Familiarity with compliance standards (ISO 27001, Cyber Essentials, NIST) There's no on call requirement, though some flexibility around out of hours work may occasionally be needed. This is a genuinely varied and collaborative environment, one where you can roll up your sleeves and get involved in modernising systems that underpin the wider business. In return, they're able to offer a salary of around £40,000 depending on experience, with a bonus, pension, 28 days' holiday plus public, and hybrid working. The business has offices across the globe, but this role is based in Glasgow (typically three days in the office each week, a little more at the beginning during onboarding). If you're a technically capable infrastructure engineer ready to take on cloud first transformation projects, we'd love to hear from you. Apply now or get in touch with Lewis at Cathcart Technology for more information.
*Hybrid, 3 days onsite, 2 days remote* *We are unable to sponsor as this is a permanent Full time role* A prestigious company is looking for a Senior Associate, Internal Audit IT & Security. This internal auditor will need 2+ years of experience conducting risk-based information technology and security audits. This is a highly regulated financial environment, and these audits will follow AICPA, IIA, IPPF, COBIT, NIST, and CSF standards/frameworks. Responsibilities: Support the team on delivery of assigned audits within the annual audit plan. Support the team confirming a professional auditee experience. Owning the audit quality, accuracy of results, and delivery in a timely manner. Proactively identify regulatory, operational, and/or strategic risks to the organization and bring them to your engagement team. Evaluate exceptions or inefficient practices for root causes and propose advice and recommendations for achievable solutions. Leading audits related to organization changes including business requirements definitions, technology implementations (eg, change management, security), engagement and alignment of change initiatives to business objectives. Maintaining an understanding of policies, procedures, standards, and supporting technologies, and educating staff accordingly, to effectively identify potential risks and alternatives to mitigate risk exposure leveraging leading practices. Ability to understand professional principles and standards (eg, AICPA, IIA IPPF, COBIT, NIST CSF) and the relevancy to risk management and impact on policies and procedures. In addition, leveraging these principles and standards to test and evaluate corporate risk management processes and control. Keeping current on best practices and emerging risks within the financial services industry and making recommendations for improvements as necessary. Qualifications Bachelor's degree (or equivalent) in Information Technology, Computer Science, Computer Engineering, Accounting, Finance, Business Administration, or related field. 2+ years of experience (audit-related) in conducting risk-based Information Technology and Security audits and projects, cyber security reviews, and internal audits. Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certification in Risk Management Assurance (CRMA), Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or equivalent. Consulting and/or accounting firm experience. Experience in Financial Services/Security Industry and working with regulations such as Regulation Systems Compliance and Integrity (Reg SCI). Experience using the principles, practices, and techniques involved in conducting audits in accordance with the requirements set forth in the International Standards for the Professional Practice of Internal Auditing published by the Institute of Internal Auditors (IIA). Microsoft Office applications Proficiency using Archer or other audit or Governance Risk and Compliance (GRC) software
27/06/2025
Full time
*Hybrid, 3 days onsite, 2 days remote* *We are unable to sponsor as this is a permanent Full time role* A prestigious company is looking for a Senior Associate, Internal Audit IT & Security. This internal auditor will need 2+ years of experience conducting risk-based information technology and security audits. This is a highly regulated financial environment, and these audits will follow AICPA, IIA, IPPF, COBIT, NIST, and CSF standards/frameworks. Responsibilities: Support the team on delivery of assigned audits within the annual audit plan. Support the team confirming a professional auditee experience. Owning the audit quality, accuracy of results, and delivery in a timely manner. Proactively identify regulatory, operational, and/or strategic risks to the organization and bring them to your engagement team. Evaluate exceptions or inefficient practices for root causes and propose advice and recommendations for achievable solutions. Leading audits related to organization changes including business requirements definitions, technology implementations (eg, change management, security), engagement and alignment of change initiatives to business objectives. Maintaining an understanding of policies, procedures, standards, and supporting technologies, and educating staff accordingly, to effectively identify potential risks and alternatives to mitigate risk exposure leveraging leading practices. Ability to understand professional principles and standards (eg, AICPA, IIA IPPF, COBIT, NIST CSF) and the relevancy to risk management and impact on policies and procedures. In addition, leveraging these principles and standards to test and evaluate corporate risk management processes and control. Keeping current on best practices and emerging risks within the financial services industry and making recommendations for improvements as necessary. Qualifications Bachelor's degree (or equivalent) in Information Technology, Computer Science, Computer Engineering, Accounting, Finance, Business Administration, or related field. 2+ years of experience (audit-related) in conducting risk-based Information Technology and Security audits and projects, cyber security reviews, and internal audits. Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certification in Risk Management Assurance (CRMA), Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or equivalent. Consulting and/or accounting firm experience. Experience in Financial Services/Security Industry and working with regulations such as Regulation Systems Compliance and Integrity (Reg SCI). Experience using the principles, practices, and techniques involved in conducting audits in accordance with the requirements set forth in the International Standards for the Professional Practice of Internal Auditing published by the Institute of Internal Auditors (IIA). Microsoft Office applications Proficiency using Archer or other audit or Governance Risk and Compliance (GRC) software
SOLUTONS ARCHITECT - DV CLEARED BRAND NEW PERMANENT OPPORTUNITY AVAILABLE WITHIN A LEADING COMPANY FOR A SENIOR SOUTIONS ARCHITECT WITH DV CLEARANCE * Permanent opportunity for a Solutions Architect with DV Clearance. * Industry leading company supporting UK national security and Defence projects. * Salary up to £100,000 DOE * Staffordshire based in an easily accessible location. * To apply please call or email (see below) WHO ARE WE? We are recruiting Solutions Architects with a strong background in defence and national security work for our client with office locations in and Staffordshire. The expertise of our engineers drives us forward, and we're looking for talented individuals to join us. Due to the nature of these clients, you must hold DV Clearance. WE NEED THE SENIOR SOLUTIONS ARCHITECT TO HAVE - DV Clerance - Experience delivering complex solutions in the Defence/secure Government space. - Familiarity with cloud platforms (AWS, GCP, Azure) - Strong communication skills, with past experience managing stakeholders. - Proficiency in architecture modelling tools and enterprise frameworks (like TOGAF). TO BE CONSIDERED Please either apply by clicking online or emailing me directly to (see below) For further information please call me on . I can make myself available outside of normal working hours to suit from 7am until 10pm. If unavailable, please leave a message and either myself or one of my colleagues will respond. By applying for this role, you give express consent for us to process & submit (subject to required skills) your application to our client in conjunction with this vacancy only. Also feel free to connect with me on LinkedIn, just search Laura Jackson. I look forward to hearing from you. SENIOR SOFTWARE DEVELOPER - SC CLEARED KEY SKILLS: SOLUTIONS ARCHITECT/DV CLEARED/SECURE COLLABORATION/DEFENCE ARCHITECT/CLOUD ARCHITECTURE/AWS/AZURE/GCP/CYBER SECURITY/SECURE COMMS/ENTERPRISE ARCHITECTURE/TOGAF/NATO SECRET/NATIONAL SECURITY/DV CLEARED/DV CLEARANCE/DEVELOPPED VETTING/DEVELOPED VETTED/DEEP VETTING/DEEP VETTED/SC CLEARED/SC CLEARANCE/SECURITY CLEARED/SECURITY CLEARANCE
27/06/2025
Full time
SOLUTONS ARCHITECT - DV CLEARED BRAND NEW PERMANENT OPPORTUNITY AVAILABLE WITHIN A LEADING COMPANY FOR A SENIOR SOUTIONS ARCHITECT WITH DV CLEARANCE * Permanent opportunity for a Solutions Architect with DV Clearance. * Industry leading company supporting UK national security and Defence projects. * Salary up to £100,000 DOE * Staffordshire based in an easily accessible location. * To apply please call or email (see below) WHO ARE WE? We are recruiting Solutions Architects with a strong background in defence and national security work for our client with office locations in and Staffordshire. The expertise of our engineers drives us forward, and we're looking for talented individuals to join us. Due to the nature of these clients, you must hold DV Clearance. WE NEED THE SENIOR SOLUTIONS ARCHITECT TO HAVE - DV Clerance - Experience delivering complex solutions in the Defence/secure Government space. - Familiarity with cloud platforms (AWS, GCP, Azure) - Strong communication skills, with past experience managing stakeholders. - Proficiency in architecture modelling tools and enterprise frameworks (like TOGAF). TO BE CONSIDERED Please either apply by clicking online or emailing me directly to (see below) For further information please call me on . I can make myself available outside of normal working hours to suit from 7am until 10pm. If unavailable, please leave a message and either myself or one of my colleagues will respond. By applying for this role, you give express consent for us to process & submit (subject to required skills) your application to our client in conjunction with this vacancy only. Also feel free to connect with me on LinkedIn, just search Laura Jackson. I look forward to hearing from you. SENIOR SOFTWARE DEVELOPER - SC CLEARED KEY SKILLS: SOLUTIONS ARCHITECT/DV CLEARED/SECURE COLLABORATION/DEFENCE ARCHITECT/CLOUD ARCHITECTURE/AWS/AZURE/GCP/CYBER SECURITY/SECURE COMMS/ENTERPRISE ARCHITECTURE/TOGAF/NATO SECRET/NATIONAL SECURITY/DV CLEARED/DV CLEARANCE/DEVELOPPED VETTING/DEVELOPED VETTED/DEEP VETTING/DEEP VETTED/SC CLEARED/SC CLEARANCE/SECURITY CLEARED/SECURITY CLEARANCE
Wireless Network Engineer Location: Greenford, Middlesex (Office-Based) Travel: Approximately 40% across EMEA Employment Type: Full-Time, Permanent A leading professional services organisation is seeking an experienced Wireless Network Engineer to join their delivery team. This role is ideal for someone who is passionate about enterprise networking, enjoys working in dynamic environments, and is confident delivering customer-facing projects across the UK and wider EMEA region. About the Role You will be responsible for the design, deployment, and support of wireless and wired network infrastructure for a range of enterprise customers, primarily across the Financial Services, Retail, and Legal sectors. The position is based at the Greenford office with regular travel (approx. 40%) depending on project needs. Some weeks may require travel within the UK or multiple countries in EMEA-flexibility is key. Key Responsibilities Perform wireless site surveys, RF analysis, and heat mapping (primarily using Ekahau). Design and implement tailored wired and wireless network solutions. Configure and manage LAN/WAN infrastructure, including Routers, Switches, Firewalls, and VPNs. Troubleshoot wireless performance issues, interference, and roaming challenges. Implement wireless security protocols such as WPA2/WPA3, RADIUS, and network segmentation. Collaborate with cybersecurity and infrastructure teams to ensure integrated solutions. Participate in pre-sales activities, including scoping and client consultations. Document technical configurations, network designs, and resolution procedures. Essential Requirements 3-5+ years of hands-on wireless networking experience. Wireless CCNP certification is required. Experience with enterprise wireless vendors (Cisco, Aruba, Meraki, Mist, Arista, etc.). Strong understanding of RF principles, wireless security, and enterprise network architecture. Proficiency in VLANs, routing (OSPF/BGP), DHCP, DNS, and IP Addressing. Background in working with or for a VAR, MSP, or systems integrator. Proven experience in customer-facing engineering roles. Desirable Skills Additional certifications such as CWNA, CWDP, or CCNP Enterprise. Familiarity with secure wireless authentication models (eg 802.1X, RADIUS). Knowledge of Scripting and automation tools (eg Python, Ansible). Experience with network monitoring platforms like SolarWinds. What's on Offer Exposure to a wide range of enterprise clients and technologies. Career progression opportunities into senior and design-focused roles. Annual training and development budget to support technical growth. Supportive, values-led working culture focused on trust and integrity. Involvement in both independent and team-based project delivery. Additional Information This is an office-based role in Greenford. Travel across EMEA is a regular requirement based on project demands. Visa sponsorship is not available. Candidates must have the right to work in the UK and be able to travel freely within EMEA.
26/06/2025
Full time
Wireless Network Engineer Location: Greenford, Middlesex (Office-Based) Travel: Approximately 40% across EMEA Employment Type: Full-Time, Permanent A leading professional services organisation is seeking an experienced Wireless Network Engineer to join their delivery team. This role is ideal for someone who is passionate about enterprise networking, enjoys working in dynamic environments, and is confident delivering customer-facing projects across the UK and wider EMEA region. About the Role You will be responsible for the design, deployment, and support of wireless and wired network infrastructure for a range of enterprise customers, primarily across the Financial Services, Retail, and Legal sectors. The position is based at the Greenford office with regular travel (approx. 40%) depending on project needs. Some weeks may require travel within the UK or multiple countries in EMEA-flexibility is key. Key Responsibilities Perform wireless site surveys, RF analysis, and heat mapping (primarily using Ekahau). Design and implement tailored wired and wireless network solutions. Configure and manage LAN/WAN infrastructure, including Routers, Switches, Firewalls, and VPNs. Troubleshoot wireless performance issues, interference, and roaming challenges. Implement wireless security protocols such as WPA2/WPA3, RADIUS, and network segmentation. Collaborate with cybersecurity and infrastructure teams to ensure integrated solutions. Participate in pre-sales activities, including scoping and client consultations. Document technical configurations, network designs, and resolution procedures. Essential Requirements 3-5+ years of hands-on wireless networking experience. Wireless CCNP certification is required. Experience with enterprise wireless vendors (Cisco, Aruba, Meraki, Mist, Arista, etc.). Strong understanding of RF principles, wireless security, and enterprise network architecture. Proficiency in VLANs, routing (OSPF/BGP), DHCP, DNS, and IP Addressing. Background in working with or for a VAR, MSP, or systems integrator. Proven experience in customer-facing engineering roles. Desirable Skills Additional certifications such as CWNA, CWDP, or CCNP Enterprise. Familiarity with secure wireless authentication models (eg 802.1X, RADIUS). Knowledge of Scripting and automation tools (eg Python, Ansible). Experience with network monitoring platforms like SolarWinds. What's on Offer Exposure to a wide range of enterprise clients and technologies. Career progression opportunities into senior and design-focused roles. Annual training and development budget to support technical growth. Supportive, values-led working culture focused on trust and integrity. Involvement in both independent and team-based project delivery. Additional Information This is an office-based role in Greenford. Travel across EMEA is a regular requirement based on project demands. Visa sponsorship is not available. Candidates must have the right to work in the UK and be able to travel freely within EMEA.
Senior IT Support Engineer, 2nd Line/3rd Line Location: Bristol Salary Range: £30000- 50000 + Benefits Your Role: Lead, Troubleshoot, Enable As our Senior IT Support Engineer , you'll be the escalation expert-leading on all things infrastructure and supporting mission-critical systems. You'll be managing everything from Windows desktops and Servers to cloud integrations and enterprise networking, ensuring impeccable uptime and operational excellence. Core Responsibilities: Windows Desktop & Server Management : Covering ADDS, DHCP, DNS, File Services, RDS, IIS; user provisioning, server buildout, and troubleshooting. Virtualisation : Design, deploy, and manage with VMware ESXi/vCentre and Hyper?V; clustering is a strong advantage Backup & DR : Champion backup strategies and disaster recovery operations-Veeam or equivalent. Cloud & M365/Azure : Own administration of Microsoft?365, Azure, and Intune. Scripting & Automation : Build and adapt scripts in PowerShell and other languages to automate processes. Networking & Security : Configure Routers, VLANs, ACLs, VPN/IPsec tunnels, wireless with RADIUS, VOIP systems, and Firewalls (Sophos XG/Cisco). Cross-Platform Systems : Support Linux (patching, security), MacOS (JumpCloud, ACMT), SQL Server, and IOS. Mentorship & Projects : Lead migrations, deliver junior staff coaching, contribute to IT strategy and documentation. ? You'll Stand Out With: Certifications: MSCE, VMware VCP, Cisco, Apple ACMT, and ITIL V3/V4. Cloud migration/project experience (Azure, Oracle, M365, server-to-cloud). Experience with AutoTask, Datto RMM, and Cyber Essentials compliance. Containerisation know-how (Docker, Kubernetes). Excellent communication skills and proven leadership potential with an interest in stepping up to Team Lead roles ? What We Offer: Growth & Recognition : Structured training, certification support, and career progression. Modern Work Environment : Collaborative culture, flexible working, and access to the latest tools and platforms. Impact & Influence : Be central to key infrastructure projects and security initiatives that shape our future success. Competitive Package : Strong base salary, performance bonuses, healthcare, and pension plan.
26/06/2025
Full time
Senior IT Support Engineer, 2nd Line/3rd Line Location: Bristol Salary Range: £30000- 50000 + Benefits Your Role: Lead, Troubleshoot, Enable As our Senior IT Support Engineer , you'll be the escalation expert-leading on all things infrastructure and supporting mission-critical systems. You'll be managing everything from Windows desktops and Servers to cloud integrations and enterprise networking, ensuring impeccable uptime and operational excellence. Core Responsibilities: Windows Desktop & Server Management : Covering ADDS, DHCP, DNS, File Services, RDS, IIS; user provisioning, server buildout, and troubleshooting. Virtualisation : Design, deploy, and manage with VMware ESXi/vCentre and Hyper?V; clustering is a strong advantage Backup & DR : Champion backup strategies and disaster recovery operations-Veeam or equivalent. Cloud & M365/Azure : Own administration of Microsoft?365, Azure, and Intune. Scripting & Automation : Build and adapt scripts in PowerShell and other languages to automate processes. Networking & Security : Configure Routers, VLANs, ACLs, VPN/IPsec tunnels, wireless with RADIUS, VOIP systems, and Firewalls (Sophos XG/Cisco). Cross-Platform Systems : Support Linux (patching, security), MacOS (JumpCloud, ACMT), SQL Server, and IOS. Mentorship & Projects : Lead migrations, deliver junior staff coaching, contribute to IT strategy and documentation. ? You'll Stand Out With: Certifications: MSCE, VMware VCP, Cisco, Apple ACMT, and ITIL V3/V4. Cloud migration/project experience (Azure, Oracle, M365, server-to-cloud). Experience with AutoTask, Datto RMM, and Cyber Essentials compliance. Containerisation know-how (Docker, Kubernetes). Excellent communication skills and proven leadership potential with an interest in stepping up to Team Lead roles ? What We Offer: Growth & Recognition : Structured training, certification support, and career progression. Modern Work Environment : Collaborative culture, flexible working, and access to the latest tools and platforms. Impact & Influence : Be central to key infrastructure projects and security initiatives that shape our future success. Competitive Package : Strong base salary, performance bonuses, healthcare, and pension plan.
*Remote But not allowed in the following States: Alaska, North Dakota, Nebraska, Hawaii, Oklahoma, Vermont, Maine, West Virginia, Wyoming, New Hampshire, Puerto Rico.* A prestigious company is looking for a Manager, Cyber Risk Vulnerability. This manager will lead a team with focus on vulnerability management and discovery, risk based prioritization, cloud/on-prem vulnerability, CVSS, Vulnerability scanning, Automation, etc. Responsibilities: Leads, coaches, and develops a team of engineers responsible for vulnerability discovery, assessment, risk-based prioritization, and remediation tracking across cloud, on-premises, and hybrid environments Envisions, defines, designs, builds, staffs, and delivers vulnerability management processes and capabilities Leads and supports the planning and execution of team goals and projects, including setting long-term strategy and making decisions about tools, technology, and staffing needs Partners closely with stakeholders across technology, including architecture, engineering, infrastructure, application development, and cyber risk management teams to facilitate vulnerability communications, support remediation activities, and provide continuous reporting. Collaborates with enterprise risk, compliance, and threat intelligence teams to ensure vulnerability management aligns with the organization's overall risk management strategy. Ensures all project deliverables meet high standards for accuracy, completeness, and impact, and are delivered on time to support team and organizational objectives Represents the vulnerability management program to senior leadership, delivering concise, risk-informed insights and recommendations Manages program metrics, reporting, and performance indicators to demonstrate business value, operational maturity, and continuous improvement Qualifications 8+ years w/Bachelor's degree; 1+ years supervisory/management Industry certifications such as CISSP, GSEC, OSCP, or comparable security-related credentials are strongly preferred Proven experience managing enterprise-scale vulnerability management programs and tools Proven expertise in developing, mentoring, and retaining high-performing teams while fostering a mindful, inclusive, and trust-based team culture Demonstrated background in strategic planning, service/program development, capability assessment, and building strong narratives to drive decision-making and create change Deep understanding of risk-based vulnerability management. Knowledge of vulnerability scoring systems (CVSS), security benchmarks (CIS, NIST), and risk quantification techniques Proficiency in selecting, implementing, and managing vulnerability scanning tools (eg, SAST, SCA, IAST, DAST, Network/Infrastructure, Cloud, etc.) across the technology stack Experience designing and implementing automation for vulnerability management processes using generative AI, agent-based systems, large language models (LLMs), or machine learning to improve efficiency, effectiveness, and scalability Skilled in analysing business and technical requirements and translating them into effective solutions, technical plans, roadmaps, budgets, and proposals that support cyber program growth and align with cyber and organizational goals
25/06/2025
Full time
*Remote But not allowed in the following States: Alaska, North Dakota, Nebraska, Hawaii, Oklahoma, Vermont, Maine, West Virginia, Wyoming, New Hampshire, Puerto Rico.* A prestigious company is looking for a Manager, Cyber Risk Vulnerability. This manager will lead a team with focus on vulnerability management and discovery, risk based prioritization, cloud/on-prem vulnerability, CVSS, Vulnerability scanning, Automation, etc. Responsibilities: Leads, coaches, and develops a team of engineers responsible for vulnerability discovery, assessment, risk-based prioritization, and remediation tracking across cloud, on-premises, and hybrid environments Envisions, defines, designs, builds, staffs, and delivers vulnerability management processes and capabilities Leads and supports the planning and execution of team goals and projects, including setting long-term strategy and making decisions about tools, technology, and staffing needs Partners closely with stakeholders across technology, including architecture, engineering, infrastructure, application development, and cyber risk management teams to facilitate vulnerability communications, support remediation activities, and provide continuous reporting. Collaborates with enterprise risk, compliance, and threat intelligence teams to ensure vulnerability management aligns with the organization's overall risk management strategy. Ensures all project deliverables meet high standards for accuracy, completeness, and impact, and are delivered on time to support team and organizational objectives Represents the vulnerability management program to senior leadership, delivering concise, risk-informed insights and recommendations Manages program metrics, reporting, and performance indicators to demonstrate business value, operational maturity, and continuous improvement Qualifications 8+ years w/Bachelor's degree; 1+ years supervisory/management Industry certifications such as CISSP, GSEC, OSCP, or comparable security-related credentials are strongly preferred Proven experience managing enterprise-scale vulnerability management programs and tools Proven expertise in developing, mentoring, and retaining high-performing teams while fostering a mindful, inclusive, and trust-based team culture Demonstrated background in strategic planning, service/program development, capability assessment, and building strong narratives to drive decision-making and create change Deep understanding of risk-based vulnerability management. Knowledge of vulnerability scoring systems (CVSS), security benchmarks (CIS, NIST), and risk quantification techniques Proficiency in selecting, implementing, and managing vulnerability scanning tools (eg, SAST, SCA, IAST, DAST, Network/Infrastructure, Cloud, etc.) across the technology stack Experience designing and implementing automation for vulnerability management processes using generative AI, agent-based systems, large language models (LLMs), or machine learning to improve efficiency, effectiveness, and scalability Skilled in analysing business and technical requirements and translating them into effective solutions, technical plans, roadmaps, budgets, and proposals that support cyber program growth and align with cyber and organizational goals
*Hybrid, 3 days onsite, 2 days remote* *We are unable to sponsor as this is a permanent Full time role* A prestigious company is looking for a Senior Associate, Internal Audit IT & Security. This internal auditor will need 2+ years of experience conducting risk-based information technology and security audits. This is a highly regulated financial environment, and these audits will follow AICPA, IIA, IPPF, COBIT, NIST, and CSF standards/frameworks. Responsibilities: Support the team on delivery of assigned audits within the annual audit plan. Support the team confirming a professional auditee experience. Owning the audit quality, accuracy of results, and delivery in a timely manner. Proactively identify regulatory, operational, and/or strategic risks to the organization and bring them to your engagement team. Evaluate exceptions or inefficient practices for root causes and propose advice and recommendations for achievable solutions. Leading audits related to organization changes including business requirements definitions, technology implementations (eg, change management, security), engagement and alignment of change initiatives to business objectives. Maintaining an understanding of policies, procedures, standards, and supporting technologies, and educating staff accordingly, to effectively identify potential risks and alternatives to mitigate risk exposure leveraging leading practices. Ability to understand professional principles and standards (eg, AICPA, IIA IPPF, COBIT, NIST CSF) and the relevancy to risk management and impact on policies and procedures. In addition, leveraging these principles and standards to test and evaluate corporate risk management processes and control. Keeping current on best practices and emerging risks within the financial services industry and making recommendations for improvements as necessary. Qualifications Bachelor's degree (or equivalent) in Information Technology, Computer Science, Computer Engineering, Accounting, Finance, Business Administration, or related field. 2+ years of experience (audit-related) in conducting risk-based Information Technology and Security audits and projects, cyber security reviews, and internal audits. Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certification in Risk Management Assurance (CRMA), Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or equivalent. Consulting and/or accounting firm experience. Experience in Financial Services/Security Industry and working with regulations such as Regulation Systems Compliance and Integrity (Reg SCI). Experience using the principles, practices, and techniques involved in conducting audits in accordance with the requirements set forth in the International Standards for the Professional Practice of Internal Auditing published by the Institute of Internal Auditors (IIA). Microsoft Office applications Proficiency using Archer or other audit or Governance Risk and Compliance (GRC) software
25/06/2025
Full time
*Hybrid, 3 days onsite, 2 days remote* *We are unable to sponsor as this is a permanent Full time role* A prestigious company is looking for a Senior Associate, Internal Audit IT & Security. This internal auditor will need 2+ years of experience conducting risk-based information technology and security audits. This is a highly regulated financial environment, and these audits will follow AICPA, IIA, IPPF, COBIT, NIST, and CSF standards/frameworks. Responsibilities: Support the team on delivery of assigned audits within the annual audit plan. Support the team confirming a professional auditee experience. Owning the audit quality, accuracy of results, and delivery in a timely manner. Proactively identify regulatory, operational, and/or strategic risks to the organization and bring them to your engagement team. Evaluate exceptions or inefficient practices for root causes and propose advice and recommendations for achievable solutions. Leading audits related to organization changes including business requirements definitions, technology implementations (eg, change management, security), engagement and alignment of change initiatives to business objectives. Maintaining an understanding of policies, procedures, standards, and supporting technologies, and educating staff accordingly, to effectively identify potential risks and alternatives to mitigate risk exposure leveraging leading practices. Ability to understand professional principles and standards (eg, AICPA, IIA IPPF, COBIT, NIST CSF) and the relevancy to risk management and impact on policies and procedures. In addition, leveraging these principles and standards to test and evaluate corporate risk management processes and control. Keeping current on best practices and emerging risks within the financial services industry and making recommendations for improvements as necessary. Qualifications Bachelor's degree (or equivalent) in Information Technology, Computer Science, Computer Engineering, Accounting, Finance, Business Administration, or related field. 2+ years of experience (audit-related) in conducting risk-based Information Technology and Security audits and projects, cyber security reviews, and internal audits. Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certification in Risk Management Assurance (CRMA), Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or equivalent. Consulting and/or accounting firm experience. Experience in Financial Services/Security Industry and working with regulations such as Regulation Systems Compliance and Integrity (Reg SCI). Experience using the principles, practices, and techniques involved in conducting audits in accordance with the requirements set forth in the International Standards for the Professional Practice of Internal Auditing published by the Institute of Internal Auditors (IIA). Microsoft Office applications Proficiency using Archer or other audit or Governance Risk and Compliance (GRC) software
Request Technology - Craig Johnson
Oakland, California
*We are unable to sponsor for this permanent Full time role* *Position is bonus eligible* Prestigious Enterprise Company is currently seeking a Manager of Cyber Security Risk and Vulnerabilities. Candidate will be responsible for developing and leading a high-performing team focused on vulnerability management, including vulnerability discovery, risk-based prioritization, and enterprise remediation coordination. This role oversees the design, delivery, and continuous improvement of services that reduce technology risk through scalable vulnerability identification and tracking processes, platform ownership, and stakeholder collaboration. The successful candidate will build strong relationships with key enterprise partners - including architecture, engineering, infrastructure, and application teams - to ensure vulnerabilities are understood, prioritized appropriately, and addressed in alignment with business risk tolerance. Through technical expertise and operational leadership, the manager will advance the maturity of the organization's vulnerability management program and its integration with broader cyber risk functions. The ideal candidate will balance strong technical fluency with people leadership, operational execution, and the ability to inspire a high-performing team in a dynamic cybersecurity landscape. Responsibilities: Leads, coaches, and develops a team of engineers responsible for vulnerability discovery, assessment, risk-based prioritization, and remediation tracking across cloud, on-premises, and hybrid environments Envisions, defines, designs, builds, staffs, and delivers vulnerability management processes and capabilities Leads and supports the planning and execution of team goals and projects, including setting long-term strategy and making decisions about tools, technology, and staffing needs Partners closely with stakeholders across technology, including architecture, engineering, infrastructure, application development, and cyber risk management teams to facilitate vulnerability communications, support remediation activities, and provide continuous reporting. Collaborates with enterprise risk, compliance, and threat intelligence teams to ensure vulnerability management aligns with the organization's overall risk management strategy. Ensures all project deliverables meet high standards for accuracy, completeness, and impact, and are delivered on time to support team and organizational objectives Represents the vulnerability management program to senior leadership, delivering concise, risk-informed insights and recommendations Manages program metrics, reporting, and performance indicators to demonstrate business value, operational maturity, and continuous improvement Supports the organization's processes/methodologies, structure, culture, skills/experience, process support tools, knowledge resources, and other components Contributes to team culture by modelling integrity, inclusivity, accountability, and collaboration This list is not all-inclusive and you are expected to perform other duties as requested or assigned Qualifications: 8+ experience years with a Bachelor's degree; strong hands-on Supervisory/Management experience Industry certifications such as CISSP, GSEC, OSCP, or comparable security-related credentials are strongly preferred Proven experience managing enterprise-scale vulnerability management programs and tools Proven expertise in developing, mentoring, and retaining high-performing teams while fostering a mindful, inclusive, and trust-based team culture Strong ability to build trust, partnerships, and mutual support across many diverse teams Excellent communication and presentation skills, with the ability to convey technical concepts to diverse audiences and a strong emphasis on listening and understanding stakeholder needs Proven record of complex and creative problem-solving, and the desire to build, influence, and improve systems, programs, and processes Demonstrated background in strategic planning, service/program development, capability assessment, and building strong narratives to drive decision-making and create change Ability to understand how individual and team efforts align with broader organizational objectives, and to make decisions with enterprise-wide impact in mind Strong commitment to craftsmanship, with a focus on quality, accuracy, and clarity of work Technical & Domain Expertise: Deep understanding of risk-based vulnerability management. Knowledge of vulnerability scoring systems (CVSS), security benchmarks (CIS, NIST), and risk quantification techniques Proficiency in selecting, implementing, and managing vulnerability scanning tools (eg, SAST, SCA, IAST, DAST, Network/Infrastructure, Cloud, etc.) across the technology stack Experience designing and implementing automation for vulnerability management processes using generative AI, agent-based systems, large language models (LLMs), or machine learning to improve efficiency, effectiveness, and scalability Skilled in analysing business and technical requirements and translating them into effective solutions, technical plans, roadmaps, budgets, and proposals that support cyber program growth and align with cyber and organizational goals Commitment to continuous learning with the ability to research and enhance technical and domain-specific knowledge to support rapidly changing environments Skilled in coordinating multiple concurrent projects with a clear understanding of the project life cycle, prioritization frameworks, and delivery expectations
25/06/2025
Full time
*We are unable to sponsor for this permanent Full time role* *Position is bonus eligible* Prestigious Enterprise Company is currently seeking a Manager of Cyber Security Risk and Vulnerabilities. Candidate will be responsible for developing and leading a high-performing team focused on vulnerability management, including vulnerability discovery, risk-based prioritization, and enterprise remediation coordination. This role oversees the design, delivery, and continuous improvement of services that reduce technology risk through scalable vulnerability identification and tracking processes, platform ownership, and stakeholder collaboration. The successful candidate will build strong relationships with key enterprise partners - including architecture, engineering, infrastructure, and application teams - to ensure vulnerabilities are understood, prioritized appropriately, and addressed in alignment with business risk tolerance. Through technical expertise and operational leadership, the manager will advance the maturity of the organization's vulnerability management program and its integration with broader cyber risk functions. The ideal candidate will balance strong technical fluency with people leadership, operational execution, and the ability to inspire a high-performing team in a dynamic cybersecurity landscape. Responsibilities: Leads, coaches, and develops a team of engineers responsible for vulnerability discovery, assessment, risk-based prioritization, and remediation tracking across cloud, on-premises, and hybrid environments Envisions, defines, designs, builds, staffs, and delivers vulnerability management processes and capabilities Leads and supports the planning and execution of team goals and projects, including setting long-term strategy and making decisions about tools, technology, and staffing needs Partners closely with stakeholders across technology, including architecture, engineering, infrastructure, application development, and cyber risk management teams to facilitate vulnerability communications, support remediation activities, and provide continuous reporting. Collaborates with enterprise risk, compliance, and threat intelligence teams to ensure vulnerability management aligns with the organization's overall risk management strategy. Ensures all project deliverables meet high standards for accuracy, completeness, and impact, and are delivered on time to support team and organizational objectives Represents the vulnerability management program to senior leadership, delivering concise, risk-informed insights and recommendations Manages program metrics, reporting, and performance indicators to demonstrate business value, operational maturity, and continuous improvement Supports the organization's processes/methodologies, structure, culture, skills/experience, process support tools, knowledge resources, and other components Contributes to team culture by modelling integrity, inclusivity, accountability, and collaboration This list is not all-inclusive and you are expected to perform other duties as requested or assigned Qualifications: 8+ experience years with a Bachelor's degree; strong hands-on Supervisory/Management experience Industry certifications such as CISSP, GSEC, OSCP, or comparable security-related credentials are strongly preferred Proven experience managing enterprise-scale vulnerability management programs and tools Proven expertise in developing, mentoring, and retaining high-performing teams while fostering a mindful, inclusive, and trust-based team culture Strong ability to build trust, partnerships, and mutual support across many diverse teams Excellent communication and presentation skills, with the ability to convey technical concepts to diverse audiences and a strong emphasis on listening and understanding stakeholder needs Proven record of complex and creative problem-solving, and the desire to build, influence, and improve systems, programs, and processes Demonstrated background in strategic planning, service/program development, capability assessment, and building strong narratives to drive decision-making and create change Ability to understand how individual and team efforts align with broader organizational objectives, and to make decisions with enterprise-wide impact in mind Strong commitment to craftsmanship, with a focus on quality, accuracy, and clarity of work Technical & Domain Expertise: Deep understanding of risk-based vulnerability management. Knowledge of vulnerability scoring systems (CVSS), security benchmarks (CIS, NIST), and risk quantification techniques Proficiency in selecting, implementing, and managing vulnerability scanning tools (eg, SAST, SCA, IAST, DAST, Network/Infrastructure, Cloud, etc.) across the technology stack Experience designing and implementing automation for vulnerability management processes using generative AI, agent-based systems, large language models (LLMs), or machine learning to improve efficiency, effectiveness, and scalability Skilled in analysing business and technical requirements and translating them into effective solutions, technical plans, roadmaps, budgets, and proposals that support cyber program growth and align with cyber and organizational goals Commitment to continuous learning with the ability to research and enhance technical and domain-specific knowledge to support rapidly changing environments Skilled in coordinating multiple concurrent projects with a clear understanding of the project life cycle, prioritization frameworks, and delivery expectations
Manager, Vulnerability Management Salary: Open + Bonus Location: Remote *We are unable to provide sponsorship for this role* Qualifications Bachelor's degree 8+ years of related experience At least 1 year of management experience Proven experience managing enterprise-scale vulnerability management programs and tools Deep understanding of risk-based vulnerability management. Knowledge of vulnerability scoring systems (CVSS), security benchmarks (CIS, NIST), and risk quantification techniques Proficiency in selecting, implementing, and managing vulnerability scanning tools (eg, SAST, SCA, IAST, DAST, Network/Infrastructure, Cloud, etc.) across the technology stack Experience designing and implementing automation for vulnerability management processes using generative AI, agent-based systems, large language models (LLMs), or machine learning to improve efficiency, effectiveness, and scalability Responsibilities Leads, coaches, and develops a team of engineers responsible for vulnerability discovery, assessment, risk-based prioritization, and remediation tracking across cloud, on-premises, and hybrid environments Envisions, defines, designs, builds, staffs, and delivers vulnerability management processes and capabilities Leads and supports the planning and execution of team goals and projects, including setting long-term strategy and making decisions about tools, technology, and staffing needs Partners closely with stakeholders across technology, including architecture, engineering, infrastructure, application development, and cyber risk management teams to facilitate vulnerability communications, support remediation activities, and provide continuous reporting. Collaborates with enterprise risk, compliance, and threat intelligence teams to ensure vulnerability management aligns with the organization's overall risk management strategy. Ensures all project deliverables meet high standards for accuracy, completeness, and impact, and are delivered on time to support team and organizational objectives Represents the vulnerability management program to senior leadership, delivering concise, risk-informed insights and recommendations
25/06/2025
Full time
Manager, Vulnerability Management Salary: Open + Bonus Location: Remote *We are unable to provide sponsorship for this role* Qualifications Bachelor's degree 8+ years of related experience At least 1 year of management experience Proven experience managing enterprise-scale vulnerability management programs and tools Deep understanding of risk-based vulnerability management. Knowledge of vulnerability scoring systems (CVSS), security benchmarks (CIS, NIST), and risk quantification techniques Proficiency in selecting, implementing, and managing vulnerability scanning tools (eg, SAST, SCA, IAST, DAST, Network/Infrastructure, Cloud, etc.) across the technology stack Experience designing and implementing automation for vulnerability management processes using generative AI, agent-based systems, large language models (LLMs), or machine learning to improve efficiency, effectiveness, and scalability Responsibilities Leads, coaches, and develops a team of engineers responsible for vulnerability discovery, assessment, risk-based prioritization, and remediation tracking across cloud, on-premises, and hybrid environments Envisions, defines, designs, builds, staffs, and delivers vulnerability management processes and capabilities Leads and supports the planning and execution of team goals and projects, including setting long-term strategy and making decisions about tools, technology, and staffing needs Partners closely with stakeholders across technology, including architecture, engineering, infrastructure, application development, and cyber risk management teams to facilitate vulnerability communications, support remediation activities, and provide continuous reporting. Collaborates with enterprise risk, compliance, and threat intelligence teams to ensure vulnerability management aligns with the organization's overall risk management strategy. Ensures all project deliverables meet high standards for accuracy, completeness, and impact, and are delivered on time to support team and organizational objectives Represents the vulnerability management program to senior leadership, delivering concise, risk-informed insights and recommendations
