Vulnerability and Exposure Response Manager Job at Vodafone (Newbury)

Head of cyber threat exposure and attack surface management

Lead the enterprise-wide Continuous Threat Exposure Management (CTEM) strategy, ...

Location

United Kingdom , Knutsford

Salary:

Not provided

Barclays

Expiration Date

Until further notice

Requirements

Experience in cybersecurity with direct exposure to vulnerability management, red teaming, or threat exposure reduction
Proven track record leading programs integrating CSPM, SSPM, ASM, BAS, or exposure correlation technologies
Strong understanding of attack paths, adversary emulation, and continuous validation concepts

Job Responsibility

Own and drive the global CTEM strategy, establishing a continuous, threat-driven exposure management lifecycle aligned with NIST, MITRE, and CISA Secure-by-Design principles
Lead and develop a high-performing CTEM team, fostering collaboration, technical excellence, and an outcome-driven culture
Integrate and oversee key exposure management technologies, including Cloud Security Posture Management (CSPM), SaaS Security Posture Management (SSPM), Attack Surface Management (ASM), Breach & Attack Simulation (BAS), and other exposure correlation platforms
Correlate assets, identity, vulnerability, and configuration to identify high-impact, exploitable attack paths and inform prioritized remediation strategies
Collaborate with Application Security, Vulnerability Management, Red Team, and Security Operations to synchronize discovery, validation, and remediation of exposures across the enterprise
Align CTEM outputs with real-world adversary behaviors, leveraging Red Team and Threat Intelligence input to validate attack paths and focus on exploitable conditions
Drive automation and AI-enabled analytics to continuously map, assess, and measure reductions in the organization’s attack surface
Translate technical findings into business risk language, enabling senior leadership and risk committees to make data-driven investment decisions
Define and lead CTEM governance and operating models, ensuring exposure assessments, validation, and remediation tracking are embedded in operational processes
Establish clear KRIs and maturity metrics that demonstrate continuous improvement in visibility, validation, and response effectiveness

What we offer

Competitive holiday allowance
Life assurance
Private medical care
Pension contribution

Fulltime

Senior Information Security Engineer

This role is your opportunity to lead the charge in maturing e2Open’s security p...

Location

India , Bangalore

Salary:

Not provided

Blume Global

Expiration Date

Until further notice

Requirements

A proven track record in SIEM operations, vulnerability management, and incident response
Hands-on experience configuring and running security tools
Strong automation skills (e.g., scripting, orchestration)
The ability to lead through influence, guiding teams to adopt better practices
Experience navigating the challenges of complex, fast-changing environments (M&A exposure a plus)
Formal qualifications (CISSP, CISM, or equivalent) are valued

Job Responsibility

Configure, tune, and operate SIEM platforms to improve detection, response, and visibility
Lead vulnerability scanning and remediation
Take point in managing security incidents — from detection through investigation and resolution
Run and maintain key security tools
Drive automation-first approaches
Collaborate with engineering and IT teams to embed security into operations and culture
Help shape the roadmap for security maturity within e2Open

Security Engineer II

The Security Engineer II is an individual contributor who will participate and m...

Location

United States , Fountain Valley

Salary:

83940.00 - 120032.00 USD / Year

Hyundai AutoEver America

Expiration Date

Until further notice

Requirements

Bachelor’s Degree in Computer Science, Information Systems, or related field, or equivalent experience
Minimum 3 years of IT relevant experience or equivalent combination of experience plus at least 1 year of experience performing Security Engineering/Planning/Operations, preferably with SIEM or vulnerability management
Experience in medium to complex computing environments, with advanced knowledge in security technologies and services
Hands-on experience with at least two or more of the following Enterprise Security Technologies: Network Intrusion Prevention/Detection
Virtual Private Networks
SSL, IPSec, and Site-to-Site
Enterprise-Class Stateful Inspection Firewalls
Network Access Controls in context to Identity Management
Windows Server OS & Desktop OS
Network Packet Inspection

Job Responsibility

Design, build, test, and deploy new security technologies, which include the development of the operational manual and run books
Provides technical security operations engineering services to support and update existing security systems and works to automate processes related to security implementations, monitoring, and enforcement
Investigates, recommends, evaluates, deploys, and integrates operational security tools (e.g., SIEM, vulnerability scanning) and techniques to enhance protection of corporate assets and infrastructure
Participate in technical risk assessments and security exposure analyses of systems, networks, and business applications
Analyzes network security elements and overall network security architectural designs to ensure secure and optimal system and network performance and cost-effectiveness
Oversees the installation, configuration, and supportive processes of security technologies
Participate in or lead the Incident Response activities
Interacts with internal and external clients on security operations requirements, identifies security processes, and develops strategies/solutions to security issues
Keeps fully abreast of trends and changing technologies as they relate to IT, Network Engineering, and Information Security fields
Lead or assist in periodic or ad-hoc security reports that provide relevant situational awareness to our senior stakeholders

Fulltime

Security Incident Management Analyst

The Security Incident Management Analyst is an intermediate level position respo...

Location

Singapore , Singapore

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Relevant professional certifications issued by GIAC, AWS, etc., preferably GCCC, GCIH, CEH, ECSA
General Industry knowledge of reporting obligations pertaining to local and national laws and regulatory bodies such as OCC, SEC, ECB, MAS
Working knowledge of common security models (Defense-in-Depth) and frameworks (MITRE Attack, Cyber Kill Chain, STIX)
Working knowledge of VERIS taxonomy
Working knowledge of OSI model
Working knowledge of security and/or incident response in cloud environments
Working knowledge of software development best practices, including agile methods
Familiar with Atlassian tools
Previous experience working in highly regulated environment
Previous experience in a fusion center and/or exposure to large scale incident response

Job Responsibility

Work as part of a best in class ‘follow the sun’ security incident response team
Lead and manage incident response activities to ensure that requisite triage, containment, and eradication are completed within targeted timeframes
Ensure that the security incident record is complete, accurate and fit for purpose
Collect and analyze evidence including investigative findings and prepare to coordinate with internal and external compliance and audit personnel
Execute incident response meetings and communicate complex security topics
exhibit good judgment and discretion when initiating escalations to all levels of the organization
Ensure that controls are utilized daily and that non-compliance remediation is addressed by appropriate selection
Provide IS consulting services, including interpreting and/or clarifying information security policy, procedures, standards or concepts
Assist with defining and implementing information security standards to align procedures and practices in pursuit of compliance with Citigroup standards
Validate compliance with information security policies, practices, and procedures, and resolve a variety of information security related issues in coordination with the relevant business(es)

Fulltime

End Point Security Senior Engineer

Senior Engineer role focused on endpoint security implementation and maintenance...

Location

India , Noida

Salary:

Not provided

Sopra Steria

Expiration Date

Until further notice

Requirements

Hands-on experience with EDR/XDR platforms such as Microsoft Defender for Endpoint or Sentinel One
Familiarity with vulnerability management tools
Knowledge of endpoint technologies including BitLocker, Application control, Endpoint privilege management, Windows Defender Firewall
Understanding of endpoint threat intelligence and ability to analyze threat data
Scripting or automation experience using PowerShell or other scripting languages
Total Experience Expected: 02-06 years
B.tech/BE/BCA qualification

Job Responsibility

Implement and maintain endpoint security solutions such as EDR, antivirus, encryption, and application control tools
Monitor, analyze, and respond to security alerts and incidents originating from workstations and endpoints
Apply and manage workstation hardening standards, including adherence to security baselines
Conduct vulnerability assessments on endpoints and coordinate timely remediation activities
Manage patch deployment for operating systems and applications to ensure compliance with internal policies and reduce exposure to threats
Ensure endpoint systems comply with security policies, standards, and regulatory frameworks
Actively participate in incident response efforts related to endpoint breaches or malware incidents
Contribute to risk assessments and provide input during security architecture reviews related to endpoints
Maintain a strong understanding of Windows and macOS operating systems from a security perspective

Fulltime

New

Vector Command Specialist

As a Vector Command Specialist, you will work with a team of offensive security ...

Location

United States

Salary:

89300.00 - 120800.00 USD / Year

Rapid7

Expiration Date

Until further notice

Requirements

3+ years in an active technical security role
Excellent written and verbal communication skills
Previous technical security consulting experience
Knowledge of modern penetration testing tools and methods
Knowledge of external attack surface reconnaissance techniques to identify customer’s internet facing exposures
Strong knowledge of network, web-based application, and IEEE 802.11 security concepts
Knowledge of Windows/Linux/UNIX internals and the Internet protocol suite
Experience using scripting languages such as Python and PowerShell
Experience with social engineering techniques and tactics related to reconnaissance and OSINT gathering
A Bachelor’s degree in Computer Science, MIS, CIS or a related field, or equivalent experience

Job Responsibility

Support Vector Command customers by conducting external attack surface analysis, exposure reconnaissance, account and tool integrations, preparing monthly red team report deliverables, and prioritizing customer requests
Work daily with Rapid7’s Vector Command Red Team operators, assisting with ongoing red team exercises and staying up to date on the latest vulnerabilities, customer attack surface changes, and exposures within customer environments
Onboard customers to the Vector Command platform and technologies
Oversee and ensure the completeness of customer report deliverables
Serve as the primary point of contact for customer inquiries related to testing operations, alerts, or general Vector Command questions associated with Red Team activities
Coordinate and host monthly Vector Command Red Team update calls in conjunction with a Rapid7 Red Team lead
Translate technical concepts and communicate them effectively to non-security personnel
Coordinate communications between internal Rapid7 services on behalf of customers, including the Managed Detection and Response (MDR) and Managed Vulnerability Management (MVM) teams
Provide monthly written summaries of each customer’s attack surface and Vector Command Red Team operations
Analyze each customer’s exposures and attack surface within the Vector Command platform

Fulltime

New

Chief Information Security Officer

We are seeking an experienced Chief Information Security Officer to lead our inf...

Location

United Kingdom , London

Salary:

Not provided

Sokin

Expiration Date

Until further notice

Requirements

10+ years in information security with 5+ years in senior security leadership roles
Experience in regulated financial services (payments, banking, or fintech)
Track record of building and leading security teams in scale-up environments
Experience with FCA regulation, PCI-DSS compliance, and financial services audits
Hands-on experience with security incident response and crisis management
Deep knowledge of AWS security services (GuardDuty, Security Hub, WAF, KMS, CloudTrail, Config)
Experience with containerised environments (EKS/Kubernetes) and serverless security
Strong understanding of network security, zero trust architecture, and micro-segmentation
Proficiency with SIEM platforms (Splunk, Datadog Security, or equivalent)
Knowledge of application security tools: Wiz, SonarQube, Burp Suite, OWASP ZAP

Job Responsibility

Define and execute the enterprise information security strategy aligned with business objectives
Establish and maintain the Information Security Management System (ISMS) to support constant certification readiness with PCI DSS, ISO 27001 and SOC2
Own security policies, standards, and procedures across the organisation
Report to the Board and senior leadership on security posture, risk exposure and programme maturity
Manage security budget and resource allocation
Lead enterprise security risk assessments and maintain the infosec item on the risk register
Ensure compliance with FCA operational resilience requirements and SYSC guidelines
Maintain PCI-DSS Level 1 compliance across payment processing infrastructure
Oversee GDPR, UK Data Protection Act, and international privacy compliance
Manage relationships with external auditors, penetration testers, and regulatory bodies

What we offer

Competitive salary and equity participation
Hybrid working with flexibility
Private healthcare
Pension contribution
Professional development budget
Opportunity to shape security strategy at a high-growth fintech

New

Platform SecOps Engineer

We are seeking a hands-on Platform SecOps Engineer to implement and operate secu...

Location

India

Salary:

30.00 - 32.00 INR / Year

NorthBay

Expiration Date

Until further notice

Requirements

7–9 years of experience in Platform Security / SecOps / Infrastructure Security
Strong hands-on experience operating SIEM, EDR, and CSPM platforms in production environments
Practical expertise in Linux/Windows hardening, endpoint/server security, and baseline enforcement
Solid understanding of vulnerability management lifecycle (scan → triage → remediation → verification)
Exposure to hybrid/on-prem environments including virtualization (VMware/Hyper-V) and core network security fundamentals
Ability to write clear runbooks and work effectively across operations, infrastructure, and security stakeholders

Job Responsibility

Operate and continuously improve security controls across hybrid and on-prem platforms (compute, virtualization, OS, network services)
Administer and tune security tooling including SIEM, EDR, and CSPM
drive alert quality improvements and reduce noise
Implement and enforce secure configuration baselines (CIS or equivalent), hardening standards, and patching/upgrade coordination
Manage security logging strategy: log onboarding, parsing, normalization, correlation rules, dashboards, and alerting use-cases
Perform vulnerability scanning, exposure management, and remediation tracking with clear SLAs and risk-based prioritization
Support incident response activities (triage, containment support, evidence collection, escalation) and post-incident improvements
Strengthen identity and access controls for platform administration (least privilege, privileged access patterns, access reviews)
Maintain security runbooks, SOPs, and operational documentation
contribute to audit evidence preparation for ISO 27001/SOC 2, etc.

Fulltime

Vulnerability and Exposure Response Manager

Vodafone

Location:
United Kingdom , Newbury

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
January 22, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Vulnerability and Exposure Response Manager