Manager, Security Threat, Vulnerability and Testing (m/f/d)

Reference: yq1og2i68tpt6mcjzbkn

We are seeking an experienced Manager, Security Threat, Vulnerability and Testing (m/f/d) to lead the development and operation of a comprehensive information security testing and vulnerability management capability. In this role, you will help protect critical systems, applications and data by identifying security weaknesses, assessing emerging threats and ensuring that appropriate remediation measures are implemented. You will work closely with technology, infrastructure, software development, risk and compliance teams to strengthen security resilience across the organisation.

Your responsibilities will include managing vulnerability scanning, penetration testing, security assessments and threat-informed testing activities across on-premises and cloud environments. You will define testing strategies, standards and procedures, prioritise findings based on risk, and oversee the timely tracking and resolution of vulnerabilities. You will coordinate internal and external security testing providers, review technical reports, validate remediation activities and prepare clear management information for senior stakeholders. You will also monitor the evolving threat landscape, support incident and risk assessments, contribute to security architecture reviews, and continuously improve processes, tools and reporting. Where appropriate, you will help establish meaningful metrics and promote secure-by-design practices throughout the technology lifecycle.

You bring several years of professional experience in vulnerability management, penetration testing, security engineering, threat analysis or a related discipline, ideally with experience leading teams or complex cross-functional programmes. Strong knowledge of common security frameworks and standards, such as ISO 27001, NIST, CIS or OWASP, is expected, together with practical understanding of network, application, cloud and endpoint security. Relevant certifications such as CISSP, CISM, OSCP, CEH or comparable qualifications are advantageous. You are analytical, well organised and confident communicating technical risk to both specialist and non-specialist audiences. A proactive leadership style, sound judgement, strong stakeholder management skills and professional proficiency in English are essential; knowledge of an additional European language is beneficial.

COMPETITIVE SALARY
Added 07/09/2026
Reference: yq1og2i68tpt6mcjzbkn

Manager, Security Threat, Vulnerability and Testing (m/f/d)

London, England, United Kingdom Permanent Threat Management

Other similar jobs

Cyber Threat and Vulnerability Analyst

Added 13/10/2026

We are seeking a Cyber Threat and Vulnerability Analyst to help identify, assess and reduce cyber risks across a complex technology environment. You will monitor the threat landscape, analyse security events and vulnerability intelligence, and support the organisation in prioritising and addressing weaknesses before they can be exploited. This role is suited to an analytical professional who can combine technical investigation with clear communication and practical risk management. Key responsibilities will include conducting vulnerability assessments, reviewing scan results and validating findings; monitoring threat intelligence sources for emerging risks, indicators of compromise and relevant attack techniques; investigating security alerts and supporting...

Learn more

Vice President, Threat and Vulnerability Management Engineer

Added 12/10/2026

We are seeking a Vice President, Threat and Vulnerability Management Engineer to lead the strategy, architecture, and execution of enterprise-wide cyber risk reduction initiatives. This senior role will combine technical leadership with programme ownership, overseeing the identification, assessment, prioritisation, and remediation of vulnerabilities across infrastructure, applications, cloud environments, endpoints, and emerging technologies. The successful candidate will establish a risk-based vulnerability management framework aligned with business objectives, regulatory expectations, and industry best practice. Responsibilities will include directing vulnerability discovery and assessment activities, improving scanning and validation capabilities, and developing effective remediation processes with technology and business teams. You will define risk...

Learn more

Assistant Manager - Cybersecurity Controls Testing Analyst – Global

Added 25/09/2026

We are seeking an Assistant Manager – Cybersecurity Controls Testing Analyst to support the assessment of technology and information security controls across a complex, global environment. In this role, you will help plan and deliver risk-based testing programmes covering areas such as access management, vulnerability management, change management, security operations, data protection, third-party risk and regulatory requirements. You will work with stakeholders across multiple regions and functions to understand control objectives, define testing approaches, gather evidence and evaluate whether controls are appropriately designed and operating effectively. Your responsibilities will include preparing testing plans and workpapers, performing walkthroughs and sample-based testing,...

Learn more

Security Architect (Threat & Vulnerability)

Added 07/10/2026

We are seeking an experienced Security Architect (Threat & Vulnerability) to strengthen the organisation’s cyber security capability and help protect critical systems, applications, data, and infrastructure. In this role, you will provide expert guidance on threat modelling, vulnerability management, security architecture, and risk reduction across complex technology environments. You will work closely with engineering, infrastructure, cloud, application, and governance teams to ensure security is built into the design, delivery, and operation of services. Your responsibilities will include assessing emerging and existing threats, identifying vulnerabilities and weaknesses, and recommending practical, risk-based remediation strategies. You will define and maintain security architecture principles,...

Learn more

Cyber Threat & Vulnerability Analyst

Added 22/10/2026

We are seeking a Cyber Threat & Vulnerability Analyst to help identify, assess and reduce cyber security risks across a complex technology environment. This is an opportunity to contribute to the protection of critical systems, applications and data by turning threat intelligence and vulnerability information into practical, prioritised action. You will monitor and analyse emerging cyber threats, vulnerabilities and attack techniques, assessing their potential impact on the organisation’s infrastructure and services. Working with security, infrastructure, application and risk teams, you will coordinate vulnerability identification, validation, remediation and reporting. You will also support the investigation of suspicious activity and contribute to...

Learn more

Cyber Threat & Vulnerability Analyst

Added 22/10/2026

We are seeking a Cyber Threat & Vulnerability Analyst to help identify, assess and reduce cyber security risks across a complex technology environment. This is an opportunity to join a collaborative security function where your analysis will support informed decision-making, strengthen resilience and help protect critical information and services. You will monitor and investigate threat intelligence, security alerts and vulnerability data, assessing potential impact and prioritising remediation activity. Working with infrastructure, application, cloud and service teams, you will coordinate vulnerability management from identification through to resolution, validating fixes and escalating significant risks where required. You will also contribute to threat...

Learn more

Head of Threat & Vulnerability Management

Added 06/10/2026

We are seeking a strategic and technically accomplished Head of Threat & Vulnerability Management to lead the development and delivery of an enterprise-wide capability that identifies, assesses and reduces cyber risk. This role will provide expert direction across threat intelligence, vulnerability assessment, security testing and remediation, ensuring that risks are understood, prioritised and addressed in line with business objectives and regulatory expectations. You will work closely with technology, infrastructure, application, risk and governance teams to embed secure-by-design principles and strengthen organisational resilience. Key responsibilities will include setting the strategy, policies, standards and operating model for threat and vulnerability management; leading...

Learn more

Vulnerability, Threat & Exposure Management Analyst

Added 25/09/2026

We are seeking a Vulnerability, Threat & Exposure Management Analyst to strengthen the organisation’s ability to identify, assess and reduce cyber risk across its technology estate. In this role, you will support the continuous management of vulnerabilities, threats and external exposures, helping security and technology teams prioritise remediation based on business impact, exploitability and threat intelligence. You will work with stakeholders across infrastructure, applications, cloud, networks and business operations to promote effective risk reduction and resilient security practices. Key responsibilities will include coordinating vulnerability scanning and exposure assessments, validating findings, analysing trends and producing clear risk-based reports for technical and...

Learn more

Cyber Security Penetration Testing Consultant

Added 13/10/2026

We are seeking a Cyber Security Penetration Testing Consultant to assess, challenge and improve the security of systems, applications, networks and cloud environments. You will plan and deliver penetration tests, vulnerability assessments and red-team style engagements, identifying weaknesses that could be exploited by malicious actors and providing clear, practical recommendations to reduce risk. The role involves working across varied client environments and translating complex technical findings into concise reports suitable for both technical and non-technical stakeholders. Your responsibilities will include scoping and executing web application, mobile application, infrastructure, wireless, API and cloud penetration tests; conducting reconnaissance, threat modelling and manual...

Learn more

Cyber Security Penetration Testing Consultant

Added 13/10/2026

We are seeking a Cyber Security Penetration Testing Consultant to assess, challenge and improve the security of applications, infrastructure, networks and cloud environments. You will plan and deliver penetration tests across a range of technologies, identifying vulnerabilities that could affect confidentiality, integrity or availability. The role requires a methodical, curious and risk-aware professional who can translate technical findings into clear, practical recommendations for both technical and non-technical stakeholders. Your responsibilities will include defining testing scopes and rules of engagement, conducting reconnaissance and vulnerability assessments, and performing manual and automated testing of web applications, APIs, mobile applications, internal and external networks,...

Learn more

Head of OT & ICS Security Testing

Added 05/10/2026

We are seeking an experienced Head of OT & ICS Security Testing to lead the strategy, governance and delivery of security testing across operational technology (OT), industrial control systems (ICS) and critical infrastructure environments. This senior role will provide technical leadership for penetration testing, vulnerability assessments, red team exercises, threat-led testing and security validation activities across complex, safety-sensitive environments. You will establish a robust testing framework that reflects relevant industry standards, regulatory expectations and the unique operational requirements of industrial systems. You will define and maintain the OT and ICS security testing roadmap, prioritising activity according to business risk, threat...

Learn more

Penetration Testing Consultant (Cyber Security)

Added 30/09/2026

We are seeking a Penetration Testing Consultant (Cyber Security) to assess the security of applications, infrastructure, networks and cloud environments. You will plan and deliver penetration tests, vulnerability assessments and security reviews, identifying weaknesses before they can be exploited. The role involves conducting tests across web applications, APIs, mobile platforms, internal and external networks, wireless environments and cloud services, using a combination of industry-standard tools and manual testing techniques. You will be expected to assess business risk, validate findings and provide practical recommendations that support effective remediation. Key responsibilities include defining test scopes and methodologies, gathering intelligence, performing controlled exploitation,...

Learn more

Offensive Security & Advanced Testing

Added 29/09/2026

We are seeking an experienced Offensive Security & Advanced Testing professional to identify, assess and help address security weaknesses across applications, infrastructure, networks, cloud environments and emerging technologies. You will plan and deliver authorised penetration tests, red-team engagements, adversary simulations and security assessments, using both established methodologies and creative attack techniques. The role will involve translating technical findings into clear business risks, prioritising remediation and working closely with engineering, architecture, risk and operations teams to strengthen overall security resilience. Responsibilities will include scoping and executing web, mobile, API, network, wireless, cloud and embedded-device assessments; developing bespoke tooling, scripts and proof-of-concept...

Learn more

Cyber Security Consultant (Penetration Testing)

Added 23/09/2026

We are seeking a Cyber Security Consultant (Penetration Testing) to assess, challenge and improve the security of applications, infrastructure, networks and cloud environments. In this role, you will plan and deliver penetration tests and vulnerability assessments across a range of technologies, identifying weaknesses that could be exploited by real-world attackers. You will define test scopes, gather and analyse technical information, select appropriate testing methodologies, and conduct manual and automated testing in accordance with agreed standards and rules of engagement. Your responsibilities will include producing clear, accurate and risk-based reports that explain technical findings, business impact and practical remediation actions. You...

Learn more

Security Testing Consultant (Penetration Tester) Hybrid

Added 15/09/2026

We are seeking a Security Testing Consultant (Penetration Tester) to join a collaborative cyber security team in a hybrid working environment. In this role, you will plan and deliver authorised penetration tests across web applications, mobile applications, APIs, networks, cloud environments and infrastructure. You will work with technical and business stakeholders to understand testing objectives, identify attack paths, assess risk and provide practical recommendations that improve overall security resilience. Your responsibilities will include scoping engagements, developing test plans, conducting manual and automated security assessments, validating vulnerabilities and maintaining accurate evidence throughout each assignment. You will prepare clear, professional reports that...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.