Job Search

We are seeking an experienced IT Consultant specialising in IT management, cloud computing and cyber security to support organisations in designing, improving and securing their technology environments. The successful candidate will provide strategic and practical advice across infrastructure, systems, cloud services, governance and information security, helping clients align technology with operational objectives, regulatory requirements and business continuity needs.

Responsibilities will include assessing existing IT environments, identifying risks and opportunities, and developing effective technology strategies and improvement plans. You will advise on cloud adoption, migration and optimisation across platforms such as Microsoft Azure or Amazon Web Services, while considering scalability, resilience, performance and cost control. The role will also involve reviewing IT policies, processes and controls; supporting infrastructure and service management improvements; conducting cyber security assessments; and recommending measures to protect systems, networks, applications and data. You may contribute to incident response, vulnerability management, disaster recovery planning, security awareness initiatives and compliance reviews. Clear documentation, risk reporting and communication with technical and non-technical stakeholders will be essential.

Applicants should have proven experience in IT consultancy, IT management, cloud technology and cyber security, with a strong understanding of infrastructure, networks, identity and access management, endpoint protection, backup solutions and security principles. Experience with cloud governance, service management frameworks, risk management and relevant security or technology standards will be advantageous. Professional certifications in areas such as cloud platforms, information security, IT service management or project delivery are desirable. You should be analytical, commercially aware and confident working independently or collaboratively. Strong communication, presentation, problem-solving and stakeholder management skills are required, together with the ability to translate complex technical issues into clear, practical recommendations. A proactive approach, commitment to professional development and high standards of confidentiality are essential.

We are seeking a reliable and vigilant Relief Security Operations Centre Operator to support a busy security control room in Cambridge, CB21. This role is responsible for monitoring site security systems, responding to incidents and maintaining a calm, professional approach in a fast-paced environment. You will work as part of a wider security team, providing operational cover across a range of shifts, including days, nights, weekends and public holidays.

Key responsibilities will include monitoring CCTV, alarms, access control systems and other security technology; receiving and assessing incident reports; contacting relevant emergency services or on-site personnel when required; and accurately recording all activity in daily occurrence logs and electronic reporting systems. You will manage communications professionally, follow agreed escalation procedures, conduct regular system checks and help ensure that all security incidents are handled promptly and appropriately. The role may also involve issuing instructions to mobile officers, coordinating responses, monitoring access and assisting with investigations by reviewing footage or producing incident information.

Applicants should have previous experience in a security, control room, monitoring or customer-focused operational environment, although full training may be provided for candidates who demonstrate the right skills and attitude. A valid security licence appropriate to control room duties is desirable, along with experience using CCTV, radio communication and computer-based reporting systems. You must have strong attention to detail, clear written and verbal communication skills, good IT ability and the confidence to make sound decisions under pressure. Flexibility, reliability and a professional approach are essential, as is the ability to maintain confidentiality and follow procedures consistently. Successful candidates will be required to complete relevant screening and background checks before appointment.

We are seeking a Security Assurance Analyst to support the organisation’s information security, risk management and compliance objectives. In this role, you will help assess the effectiveness of security controls across systems, applications, suppliers and business processes. You will work with stakeholders across technology and operations to identify risks, recommend practical improvements and help ensure that security requirements are understood and consistently applied.

Your responsibilities will include planning and conducting security assurance reviews, documenting findings and tracking remediation activities through to completion. You will maintain risk and control registers, support internal and external audits, and contribute evidence for regulatory, contractual and governance requirements. You will also review security policies, standards and procedures, assist with third-party and supplier assessments, and help evaluate areas such as access management, vulnerability management, incident response, data protection and business continuity. Clear reporting will be essential, including the preparation of concise updates, risk summaries and recommendations for senior stakeholders.

The successful candidate will have experience in information security, IT risk, assurance, audit, governance or a related discipline, with a good understanding of security frameworks and control principles. Familiarity with standards such as ISO 27001, NIST, CIS Controls, SOC 2 or relevant data protection regulations would be advantageous. You should be analytical, organised and confident in challenging processes constructively, with the ability to translate technical issues into clear business impacts. Strong written and verbal communication skills, attention to detail and the ability to manage multiple priorities are essential. Professional qualifications in information security, audit, risk or compliance are desirable, as is experience using governance, risk and compliance tools. This role offers the opportunity to contribute to meaningful security improvements while developing broad experience across assurance and risk management.

We are seeking a Security Assurance Analyst to support the delivery of robust information security, risk management and assurance activities across a complex technology and business environment. The successful candidate will help assess whether security controls are suitably designed, consistently applied and operating effectively, while providing clear, practical advice to support continuous improvement. This is an opportunity to work with stakeholders across technology, operations, compliance and governance functions.

Key responsibilities will include planning and performing security control assessments, reviewing policies, standards, procedures and technical evidence, and identifying control gaps or areas of non-compliance. You will contribute to risk assessments, audit preparation, supplier and third-party assurance reviews, security exception management and remediation tracking. The role will involve documenting findings, evaluating the potential impact of identified risks, agreeing proportionate corrective actions and monitoring progress through to completion. You will also help prepare management reports, assurance dashboards and briefing materials for governance forums, ensuring that complex security matters are communicated clearly to both technical and non-technical audiences.

Applicants should have experience in information security, cyber assurance, IT audit, risk or a related discipline, with a practical understanding of security frameworks, control principles and regulatory expectations. Familiarity with standards such as ISO 27001, NIST, COBIT or CIS is desirable, as is experience assessing cloud services, applications, infrastructure or third-party suppliers. You will need strong analytical and investigative skills, excellent written and verbal communication, and the ability to challenge constructively while building effective working relationships. Relevant professional qualifications or certifications, such as CISA, CRISC, CISSP, ISO 27001 or equivalent experience, would be advantageous. A proactive, organised approach and the confidence to manage multiple priorities are essential.

We are seeking a skilled Cyber Security Engineer to help protect critical systems, applications, networks and data against evolving cyber threats. In this role, you will design, implement and maintain effective security controls across cloud and on-premises environments, while supporting the continuous improvement of security operations and resilience. You will work closely with technology, infrastructure, software development and business teams to identify risks, provide practical guidance and ensure security is embedded throughout the delivery lifecycle.

Your responsibilities will include monitoring and investigating security events, supporting incident response activities, conducting vulnerability assessments and coordinating remediation with relevant technical teams. You will contribute to threat modelling, security reviews, penetration testing, access management, endpoint protection and network security initiatives. You will also help develop and maintain security policies, standards, procedures and technical documentation, ensuring controls align with recognised frameworks and regulatory expectations. Where appropriate, you will assist with automation and the development of dashboards, reports and metrics that improve visibility of the security posture.

The successful candidate will have proven experience in a cyber security engineering, information security or related technical role, together with a strong understanding of security principles, risk management and defensive technologies. Experience with SIEM platforms, vulnerability management tools, firewalls, intrusion detection, identity and access management, cloud security and scripting languages such as Python or PowerShell would be advantageous. You should be analytical, methodical and confident communicating complex technical issues to both specialist and non-specialist audiences. Relevant qualifications or certifications, such as Security+, CISSP, CISM, GIAC or equivalent practical experience, are desirable. A proactive approach, strong attention to detail and commitment to continuous learning are essential.

We are seeking an experienced Hardware Security Engineer – Consultant to support the design, assessment, and improvement of secure hardware products and systems. In this role, you will work with engineering, architecture, and product teams to identify security requirements, evaluate design choices, and develop practical controls across the hardware lifecycle. You will contribute to projects involving embedded devices, secure platforms, connected products, and hardware-based trust technologies.

Your responsibilities will include performing hardware security reviews, threat modelling, vulnerability assessments, and risk analysis; evaluating secure boot, trusted execution environments, key storage, cryptographic implementations, debug interfaces, and security lifecycle processes; and reviewing schematics, layouts, firmware interactions, and manufacturing considerations. You will help define security requirements and test strategies, support penetration testing and side-channel or fault-injection assessments, investigate findings, and recommend appropriate remediation. You may also contribute to security architecture documentation, technical reports, customer workshops, and presentations for both technical and non-technical stakeholders.

The successful candidate will have professional experience in hardware security engineering, embedded security, product security, or a related discipline, together with a strong understanding of hardware attack techniques and mitigations. Experience with secure elements, microcontrollers, cryptographic hardware, JTAG or SWD security, reverse engineering, and laboratory testing is highly desirable. Familiarity with standards and best practices such as Common Criteria, FIPS 140, ISO 21434, IEC 62443, or NIST guidance would be advantageous. You should be comfortable using tools for debugging, firmware analysis, signal inspection, and vulnerability testing, and be able to communicate complex technical issues clearly. A proactive, analytical approach, strong report-writing skills, and the ability to work independently while collaborating with multidisciplinary teams are essential. Relevant professional certifications or a degree in electrical engineering, computer engineering, cybersecurity, or a comparable field would be beneficial.

We are seeking a Vulnerability Researcher – Consultant to identify, analyse, and responsibly disclose security weaknesses across software, hardware, embedded systems, and enterprise technologies. You will conduct vulnerability research from initial discovery through proof-of-concept development, validation, documentation, and remediation support. The role involves working with varied technologies and clients, translating complex technical findings into clear risk assessments and practical recommendations.

Responsibilities will include performing vulnerability assessments and security-focused code reviews; developing and refining fuzzing, reverse-engineering, and exploit-development techniques; analysing binaries, protocols, operating systems, applications, and firmware; and creating reliable proof-of-concept demonstrations in controlled environments. You will document findings to a high standard, assess exploitability and business impact, contribute to technical reports and presentations, and support responsible disclosure activities. You may also advise development and security teams on mitigation strategies, secure design principles, and methods for preventing similar weaknesses. The role may require managing multiple assignments, engaging directly with stakeholders, and presenting technical conclusions to both specialist and non-specialist audiences.

Applicants should have demonstrable experience in vulnerability research, penetration testing, exploit development, reverse engineering, or a closely related discipline. Strong knowledge of computer architecture, operating systems, networking, and common security weaknesses is expected, together with practical programming ability in languages such as C, C++, Python, Rust, or assembly. Experience with tools including debuggers, disassemblers, fuzzing frameworks, static and dynamic analysis platforms, and source-control systems would be valuable. An analytical mindset, curiosity, persistence, and the ability to explain complex issues clearly are essential. Relevant professional certifications, academic qualifications, published research, conference contributions, or a portfolio of independent security work are advantageous. A commitment to ethical conduct, confidentiality, continuous learning, and responsible vulnerability handling is required.

We are seeking a Staff Product Security Engineer to help build secure products, platforms, and development practices at scale. In this senior individual contributor role, you will partner closely with software engineering, product, infrastructure, and privacy teams to identify and reduce security risk throughout the product lifecycle. You will influence technical direction, establish pragmatic security standards, and help teams deliver resilient services without compromising customer experience or delivery speed.

Your responsibilities will include defining and advancing secure-by-design practices, reviewing system architectures and high-risk product changes, and providing expert guidance on threat modelling, abuse-case analysis, authentication, authorisation, data protection, and secure communications. You will develop and maintain security tooling, reusable libraries, reference architectures, and automated controls that enable engineering teams to prevent and detect vulnerabilities earlier. You will also lead complex security investigations, support vulnerability remediation, contribute to incident response, and communicate risk, priorities, and recommendations clearly to both technical and non-technical stakeholders. As a technical leader, you will mentor engineers, raise security awareness, and help shape the organisation’s product security strategy.

The successful candidate will bring substantial experience in product or application security, with a strong background in secure software development and modern cloud-based systems. You should be comfortable working across multiple programming languages and reviewing code, designs, APIs, distributed systems, and infrastructure. Experience with threat modelling methodologies, common application vulnerabilities, software supply-chain security, security testing, and DevSecOps practices is expected. You will be an effective collaborator who can influence without direct authority, balance security with business objectives, and operate confidently in ambiguous environments. Strong written and verbal communication skills, sound judgement, curiosity, and a practical approach to solving complex problems are essential. Experience leading cross-functional security initiatives or contributing to industry standards and open-source security projects would be advantageous.

We are seeking a Linux Systems Software Developer – Security Solutions to design, develop and maintain software that strengthens the security, reliability and performance of Linux-based systems. In this role, you will contribute to the full software development lifecycle, from technical design and implementation through to testing, documentation, deployment and ongoing support. You will work on low-level system components, security services, monitoring tools and automation used to protect critical infrastructure and applications.

Your responsibilities will include developing robust, maintainable code in C and/or C++, creating scripts and tools using Python or shell, and integrating security capabilities across Linux environments. You will investigate complex system issues, analyse logs and performance data, troubleshoot defects, and support root-cause analysis. You will also collaborate with software engineers, security specialists, system administrators and quality teams to define requirements, review designs, improve engineering practices and deliver reliable solutions. Participation in code reviews, test automation, vulnerability remediation and technical documentation will be an important part of the position.

The successful candidate will have professional experience developing software for Linux or Unix-like operating systems, with a strong understanding of operating system concepts, processes, threads, memory management, networking and file systems. Experience with secure coding, authentication, encryption, access control, vulnerability assessment or security monitoring is highly desirable. Familiarity with Git, CI/CD pipelines, debugging and profiling tools, container technologies and automated testing would be advantageous. You should be comfortable working with complex technical challenges, communicating clearly with both technical and non-technical colleagues, and taking ownership of deliverables. A degree or equivalent practical experience in computer science, software engineering, cybersecurity or a related discipline is preferred.

We are seeking an IT & Information Security Management System Coordinator to support the effective operation, continual improvement and governance of information security and IT management processes. This role will coordinate activities across technology, risk, compliance and business teams, helping to ensure that information assets, systems and services are managed securely, efficiently and in line with relevant policies, standards and regulatory requirements.

Key responsibilities will include maintaining and coordinating the Information Security Management System (ISMS), supporting risk assessments, tracking corrective and preventive actions, and preparing documentation, reports and management information. You will help organise internal and external audits, monitor progress against agreed controls, and assist with the review and improvement of policies, procedures, registers and security objectives. The role will also support incident management, business continuity planning, supplier and third-party assurance, access reviews, security awareness initiatives and the delivery of IT governance activities. You will work with stakeholders to identify control gaps, coordinate remediation plans and ensure that actions are completed within agreed timescales.

The successful candidate will have experience in IT governance, information security, compliance, risk management or a related coordination role. Familiarity with ISO 27001, IT service management frameworks, data protection principles, audit processes and recognised security controls would be advantageous. Strong organisational skills are essential, together with the ability to manage multiple priorities, maintain accurate records and communicate clearly with both technical and non-technical colleagues. You should be analytical, detail-oriented and confident in challenging processes constructively while building effective working relationships. Relevant professional qualifications or practical experience in information security, IT service management, risk or compliance will be welcomed.