Job Search

We are seeking an experienced Security Advisor to provide practical, risk-based guidance that supports the protection of people, information, systems, and physical assets. Working with stakeholders across the business, you will help identify security risks, recommend proportionate controls, and promote a strong culture of security awareness. This role will suit someone who can combine sound professional judgement with the ability to communicate clearly with both technical and non-technical audiences.

Your responsibilities will include conducting security assessments, reviewing existing controls, and advising on the management of risks, vulnerabilities, incidents, and compliance requirements. You will contribute to the development and maintenance of security policies, standards, procedures, and guidance, ensuring they remain aligned with relevant legislation, regulations, and recognised industry practice. You will support incident response activities, assist with investigations and post-incident reviews, and track remediation actions through to completion. The role will also involve preparing reports, delivering briefings and awareness sessions, supporting audits, and contributing to security improvement projects and business continuity planning.

Applicants should have demonstrable experience in a security, risk, assurance, compliance, or related advisory role, together with a strong understanding of security principles, risk management, and control frameworks. Experience of working with information security, physical security, operational resilience, or incident management would be advantageous. You will need excellent analytical, writing, influencing, and stakeholder-management skills, as well as the ability to prioritise effectively and work independently in a changing environment. Relevant professional qualifications or certifications are desirable, but equivalent practical experience will be considered. A high level of integrity, discretion, and attention to detail is essential, along with a proactive approach to identifying and resolving security issues.

We are seeking a Cyber Security Consultant – Associate Network to support the design, implementation and maintenance of secure network environments. In this role, you will work with experienced security professionals and technical stakeholders to assess network risks, identify vulnerabilities and help deliver practical security improvements across infrastructure, applications and cloud-connected services. This is an excellent opportunity for someone developing a career in cyber security who is keen to build broad consulting, technical and client-facing experience.

Key responsibilities will include assisting with network security assessments, configuration reviews and vulnerability management activities; monitoring security controls and investigating potential incidents; supporting the implementation of firewalls, intrusion detection and prevention systems, secure remote access, network segmentation and endpoint protection; and contributing to security architecture reviews and risk assessments. You will help produce clear technical reports, recommendations and remediation plans, maintain accurate documentation, and track actions through to completion. The role may also involve supporting security testing, participating in incident response exercises, and keeping current with emerging threats, vulnerabilities, regulatory expectations and industry good practice.

Applicants should have a foundational understanding of networking principles, including TCP/IP, DNS, routing, switching, VPNs and common network protocols, together with an awareness of cyber security concepts such as identity and access management, vulnerability assessment, threat modelling and security monitoring. Practical experience with network security technologies, SIEM platforms, vulnerability scanners or cloud environments would be beneficial. Relevant qualifications or certifications, such as CompTIA Security+, Network+, Cisco certifications or equivalent study, are welcomed. You should be analytical, methodical and confident communicating technical information to both technical and non-technical audiences. A collaborative approach, strong attention to detail, professional integrity and a willingness to learn are essential.

We are seeking a Cyber Security Analyst – Enterprise Markets to help protect critical platforms, applications and data across a complex, highly regulated environment. This role will contribute to the delivery of effective security operations, risk management and resilience practices, working closely with technology, business and third-party teams. You will support the identification, assessment and treatment of cyber risks while helping to strengthen security controls across enterprise market services.

Your responsibilities will include monitoring and investigating security events, supporting incident response activities and coordinating the remediation of identified vulnerabilities. You will conduct security assessments, review control effectiveness and contribute to threat modelling, risk assessments and audit preparation. The role will also involve analysing security logs and alerts, maintaining accurate documentation, tracking actions to completion and producing clear reports for technical and non-technical stakeholders. You will help develop and improve security procedures, standards and awareness materials, ensuring they remain aligned with relevant policies, regulatory expectations and industry good practice.

The successful candidate will have experience in cyber security operations, information security, risk, vulnerability management or a related discipline, ideally within financial services, enterprise technology or another regulated environment. You should be comfortable working with security monitoring and ticketing tools, interpreting technical findings and prioritising actions according to business impact. Knowledge of security frameworks, incident management, identity and access management, network security and cloud technologies would be advantageous. Strong analytical, communication and problem-solving skills are essential, together with the ability to collaborate effectively, manage competing priorities and explain complex security matters clearly. Relevant professional certifications or formal qualifications in cyber security, information technology or risk management are desirable.

We are seeking an experienced Technical Leader to shape and deliver a modern security monitoring capability centred on Splunk and related security technologies. In this role, you will provide technical direction across the design, implementation, and continuous improvement of security information and event management services. You will work closely with cybersecurity, infrastructure, cloud, application, and risk teams to ensure security data is collected effectively, analysed accurately, and translated into meaningful action.

Your responsibilities will include defining technical standards and architecture, leading the development of detection use cases, improving alert quality, and establishing effective processes for threat monitoring, incident investigation, and response. You will oversee the onboarding and management of data sources, including cloud platforms, endpoints, networks, applications, and identity services. You will also guide the creation of dashboards, reports, correlation searches, automation, and operational metrics that support both security teams and senior stakeholders. A key part of the role will be mentoring engineers and analysts, coordinating delivery across technical teams, and promoting consistent engineering and documentation practices.

You will bring substantial experience working with Splunk in a security operations, detection engineering, or cyber defence environment, together with a strong understanding of SIEM architecture, log management, threat detection, and incident response. Experience with Splunk Enterprise Security, SPL, data onboarding, alert tuning, and security automation is highly desirable. Knowledge of cloud security, identity and access management, network security, vulnerability management, and relevant security frameworks will be valuable. You should be comfortable leading technical discussions, influencing stakeholders, managing competing priorities, and communicating complex issues clearly to both technical and non-technical audiences. Relevant certifications in Splunk, cybersecurity, cloud, or security operations are advantageous.

We are seeking a Digital & Cyber Resilience Manager to lead the development and continuous improvement of capabilities that protect critical services, technology, information and business operations from disruption. This role will provide strategic direction and practical expertise across cyber resilience, operational resilience, business continuity, disaster recovery and technology risk. You will work with senior stakeholders, technology teams, security specialists and business leaders to ensure that important services can withstand, respond to and recover from cyber incidents and other operational disruptions.

Key responsibilities will include defining and maintaining resilience strategies, policies, standards and frameworks; conducting service and business impact assessments; identifying critical processes, dependencies, vulnerabilities and recovery requirements; and overseeing the development and testing of business continuity and disaster recovery plans. You will coordinate scenario exercises, simulations and post-incident reviews, ensuring that lessons learned are translated into measurable improvements. The role will also monitor resilience risks, maintain management information and reporting, support regulatory or audit activity, and provide clear recommendations to senior leadership. You will promote a culture of resilience through awareness, guidance and constructive challenge, while helping teams embed effective controls throughout the design and delivery of digital services.

The successful candidate will have substantial experience in cyber resilience, technology risk, operational resilience, business continuity, disaster recovery or a related discipline, gained in a complex or highly regulated environment. You should be confident interpreting risk, translating technical issues for non-technical audiences and influencing stakeholders at all levels. Knowledge of recognised resilience, information security or risk management standards and frameworks is desirable, together with experience of incident management, exercising and third-party risk. Strong analytical, communication, organisational and report-writing skills are essential. Relevant professional qualifications or equivalent practical experience will be valued. This is an opportunity to shape a mature, enterprise-wide resilience approach and make a visible contribution to the reliability and security of essential services.

We are seeking a Data Protection Engineer to help design, implement and maintain secure, resilient solutions that protect personal and sensitive information across a complex technology environment. You will work closely with security, infrastructure, software engineering, compliance and data teams to strengthen privacy controls, reduce risk and support the responsible use of data. This role offers the opportunity to contribute to high-impact technical initiatives while helping embed data protection principles into platforms, applications and operational processes.

Your responsibilities will include developing and maintaining data protection, encryption, key management, access control, data loss prevention and monitoring capabilities. You will assess systems and data flows, identify vulnerabilities, support privacy and security impact assessments, and recommend practical improvements. You will also help define technical standards, automate compliance and security controls, investigate incidents, support remediation activities and maintain clear documentation for audits and internal governance. The role may involve contributing to data retention, deletion, classification, pseudonymisation and secure transfer solutions, as well as reviewing new technologies and architectures for privacy and security risks.

We are looking for experience in data protection engineering, information security, cloud security, privacy engineering or a related discipline. You should have a strong understanding of encryption, identity and access management, secure software development, network security and data governance, together with hands-on experience using cloud platforms, security tooling, scripting or infrastructure-as-code. Familiarity with relevant privacy and security frameworks and regulations, such as GDPR, ISO 27001 or NIST, would be advantageous. Strong analytical, communication and problem-solving skills are essential, along with the ability to explain technical risks clearly to both specialist and non-specialist audiences. A relevant degree or equivalent practical experience is preferred.

We are seeking a Java Software Engineer to contribute to the development of secure, resilient and high-performance software supporting security and intelligence capabilities. You will work as part of a multidisciplinary engineering team, designing, implementing, testing and maintaining Java-based applications that process complex data and support mission-critical decision-making. The role offers the opportunity to work across the full software development lifecycle, from requirements analysis and technical design through to deployment, monitoring and continuous improvement.

Your responsibilities will include developing clean, maintainable and well-tested code; integrating applications with databases, APIs, messaging platforms and distributed systems; and investigating technical issues across development, test and production environments. You will contribute to architectural discussions, code reviews, automated testing, documentation and secure development practices. You may also support the enhancement of existing systems, identify opportunities to improve performance and reliability, and collaborate with analysts, product specialists, DevOps engineers and other stakeholders to deliver effective technical solutions.

Applicants should have professional experience developing software in Java and a strong understanding of object-oriented design, data structures, algorithms and software engineering principles. Experience with frameworks such as Spring or Spring Boot, relational and non-relational databases, RESTful services, unit and integration testing, and version control systems such as Git is highly desirable. Familiarity with containerisation, CI/CD pipelines, cloud technologies, Linux environments or secure coding practices would be advantageous. You should be comfortable working with sensitive information, able to communicate clearly, and capable of balancing independent problem-solving with collaborative delivery. A methodical approach, attention to detail and a genuine interest in security, intelligence and emerging technology are essential.

We are seeking a Cloud Information Specialist Threat Modeler to strengthen the security and resilience of cloud-based platforms, applications, and information services. In this role, you will identify and assess threats across cloud environments, translate business and technical risks into practical security requirements, and support teams in designing effective controls. You will work closely with architects, developers, engineers, governance specialists, and operational stakeholders to ensure that security is embedded throughout the solution lifecycle.

Your responsibilities will include conducting structured threat modelling and risk assessments for cloud services, data flows, APIs, applications, and infrastructure; documenting attack paths, vulnerabilities, assumptions, and recommended mitigations; and maintaining threat models as systems, technologies, and risks evolve. You will review solution designs and security architectures, advise on identity and access management, encryption, network segmentation, logging, monitoring, and data protection, and help prioritise remediation activities. You will also contribute to security standards, design patterns, assurance processes, and clear reporting for both technical and non-technical audiences.

The successful candidate will have experience in cloud security, information security, threat modelling, security architecture, or a related discipline. Practical knowledge of major cloud concepts, shared responsibility models, secure software development, and common threat modelling frameworks such as STRIDE, attack trees, or data flow analysis is required. Familiarity with cloud-native services, DevSecOps, infrastructure as code, vulnerability management, and relevant data protection or security standards would be advantageous. You should be analytical, collaborative, and confident challenging assumptions constructively, with the ability to explain complex risks clearly and recommend proportionate, achievable solutions. Relevant professional certifications or equivalent experience are welcome.

We are seeking a Product Security Engineer to help build secure, resilient products from design through deployment. In this role, you will work closely with software engineering, architecture, infrastructure, quality assurance, and product teams to identify security risks early and ensure that security is embedded throughout the development lifecycle. You will contribute to practical, scalable security solutions that protect customer data, business systems, and product functionality.

Your responsibilities will include conducting threat modelling and security reviews, assessing application and system designs, and advising teams on secure coding and architecture principles. You will help define and maintain security requirements, standards, and engineering guidelines, while supporting vulnerability management, penetration testing, dependency analysis, and remediation activities. You will investigate security findings, prioritise risks based on business impact, and work with development teams to implement effective corrective actions. You may also contribute to security tooling, automation, security testing in CI/CD pipelines, incident response, and the continuous improvement of product security processes.

We are looking for experience in product, application, or software security, together with a strong understanding of common vulnerabilities, secure development practices, authentication and authorisation, data protection, and cloud or distributed systems. Familiarity with security frameworks such as OWASP, threat modelling methodologies, source code analysis, and modern DevSecOps practices is highly desirable. You should be comfortable communicating technical risks to both technical and non-technical audiences, influencing without direct authority, and balancing security requirements with usability and delivery goals. A curious, collaborative, and pragmatic approach is essential, along with the ability to manage multiple priorities and work effectively in a changing environment. Relevant professional experience, certifications, or a degree in computer science, cybersecurity, or a related discipline will be valued.

We are seeking a Member of Technical Staff (Software Engineer, Security) to help design, build, and maintain secure, reliable software systems. In this role, you will work across engineering teams to identify security risks, improve application and infrastructure security, and deliver practical solutions that protect products, services, and customer data. You will contribute throughout the software development lifecycle, from technical design and threat modelling through implementation, testing, deployment, and ongoing improvement.

Your responsibilities will include developing security tools, services, libraries, and automation; reviewing code and architecture for vulnerabilities; investigating security issues; and partnering with engineers to remediate findings. You will help establish secure coding practices, strengthen authentication, authorization, secrets management, logging, monitoring, and vulnerability management capabilities. You may also support incident response, security assessments, penetration testing, and the development of engineering standards and documentation. The role requires the ability to balance security goals with usability, performance, scalability, and delivery timelines.

The successful candidate will have professional experience developing software in one or more languages such as Go, Python, Java, C++, or JavaScript, along with a strong understanding of software security principles and common vulnerabilities. Experience with cloud platforms, distributed systems, operating systems, networking, containers, CI/CD pipelines, or infrastructure as code is highly valued. You should be comfortable reviewing technical designs, communicating risk to varied audiences, and influencing secure engineering practices without relying solely on formal authority. Strong analytical, problem-solving, and communication skills are essential, as is a collaborative approach to working with teams across the organisation. Experience in application security, product security, security engineering, or vulnerability research is desirable.