Job Search

We are seeking a Manager, Senior Red Team Operator, Global to lead sophisticated offensive security activities across a complex, international environment. This role will manage and participate in authorised red team operations designed to identify weaknesses in people, processes, applications, infrastructure, cloud services and physical security controls. You will develop realistic, intelligence-led attack scenarios, define objectives and rules of engagement, coordinate activity across regions, and ensure operations are conducted safely, discreetly and in accordance with legal, regulatory and ethical requirements.

You will lead engagements from initial planning through execution, evidence collection, impact assessment and remediation validation. Responsibilities include translating threat intelligence into adversary emulation plans; conducting network, cloud, application, identity and social engineering assessments; directing covert operations; maintaining detailed operational documentation; and presenting clear findings to technical teams, senior leadership and risk stakeholders. You will mentor experienced operators, support capability development, contribute to tooling and tradecraft improvements, and work closely with defensive security teams to strengthen detection, response and resilience. The role may require collaboration across multiple time zones and occasional international travel.

Applicants should have substantial experience in red teaming, penetration testing, adversary emulation or a closely related offensive security discipline, including a strong understanding of modern attack techniques, threat actor behaviours and defensive countermeasures. Proven experience leading complex engagements and handling sensitive information is essential. Strong technical capability across areas such as Active Directory, identity and access management, cloud platforms, scripting, network security, web applications and endpoint environments is highly desirable. Relevant professional certifications are beneficial, but demonstrated expertise and sound judgement are equally important. Excellent written and verbal communication, stakeholder management, discretion, curiosity and the ability to operate independently in ambiguous situations are required. This position is suited to a calm, ethical security professional who can combine hands-on technical leadership with strategic thinking.

We are seeking a Senior Lead Security Operations Analyst to provide technical leadership across security monitoring, incident response, threat detection and operational resilience. You will guide a team of analysts, coordinate the effective operation of security monitoring capabilities, and help ensure that cyber threats are identified, investigated and contained promptly. Working closely with technology, risk and business stakeholders, you will provide clear advice on security events, emerging threats and appropriate remediation activities.

Your responsibilities will include leading the analysis and response to complex security incidents, reviewing alerts and investigations, and improving processes across the security operations function. You will oversee the development and tuning of detection use cases, correlation rules, dashboards and automated response workflows within SIEM, SOAR, EDR and related security platforms. You will also contribute to threat hunting, vulnerability investigations, forensic analysis and post-incident reviews, ensuring that lessons learned are translated into measurable improvements. The role will involve producing accurate management reports, maintaining operational documentation, supporting audit requirements and helping to define and track security performance metrics.

Applicants should have substantial experience in a security operations, incident response or cyber defence environment, including experience leading or mentoring analysts. Strong practical knowledge of SIEM technologies, endpoint protection, network security monitoring, threat intelligence and incident management is essential. You should be confident analysing complex technical data, identifying attack patterns and communicating risks to both technical and non-technical audiences. Experience with security frameworks such as MITRE ATT&CK, NIST or ISO 27001, along with relevant professional certifications, would be advantageous. The successful candidate will demonstrate sound judgement, excellent organisation, a collaborative leadership style and the ability to remain calm and decisive during high-priority incidents.

We are seeking a Security Operations DevOps Engineer to help strengthen, automate and scale security operations across a modern technology environment. In this role, you will work at the intersection of cybersecurity, cloud engineering and platform operations, developing reliable solutions that improve detection, response and operational resilience. You will collaborate with security analysts, software engineers, infrastructure teams and other stakeholders to ensure security controls are effective, measurable and integrated into everyday delivery practices.

Your responsibilities will include designing, implementing and maintaining security automation, monitoring and incident-response workflows. You will develop and improve CI/CD security controls, integrate security tools and APIs, and create scripts and services that reduce manual effort and accelerate investigation and remediation. You will help manage and optimise cloud and infrastructure security across environments such as AWS, Azure or Google Cloud, while supporting vulnerability management, threat detection, log collection and security information and event management platforms. You will also contribute to incident investigations, root-cause analysis, playbook development, post-incident reviews and continuous improvement initiatives. Clear documentation, effective alerting and robust operational procedures will be central to your work.

The successful candidate will have professional experience in security operations, DevOps, site reliability engineering, cloud security or a closely related field. Strong knowledge of Linux, networking, scripting or programming languages such as Python, PowerShell or Bash, and infrastructure-as-code tools such as Terraform is required. Experience with CI/CD platforms, containers, Kubernetes, identity and access management, monitoring technologies and SIEM or SOAR solutions is highly desirable. You should understand common security frameworks, vulnerability management principles and secure software development practices. Relevant certifications are welcome but not essential. We are looking for an analytical, collaborative and proactive engineer who can communicate clearly, work effectively during high-pressure incidents and continuously improve the security and reliability of operational platforms.

We are seeking an Associate Director, OT & Cybersecurity to lead the development and delivery of a robust operational technology (OT) and cybersecurity strategy across complex industrial and enterprise environments. This senior role will provide strategic direction, technical leadership and governance to protect critical infrastructure, manufacturing systems, industrial control systems and connected technologies from evolving cyber threats.

Responsibilities will include setting the OT cybersecurity roadmap, establishing policies, standards and control frameworks, and ensuring alignment with relevant regulatory, industry and information security requirements. You will oversee risk assessments, vulnerability management, security monitoring, incident response and business continuity planning across OT environments. The role will partner closely with IT, engineering, operations, risk, compliance and executive stakeholders to embed security by design, improve resilience and support the secure adoption of new technologies. You will also lead third-party and supply-chain security initiatives, manage budgets and resources, and develop meaningful metrics and reporting for senior leadership. Where required, you will coordinate responses to significant security incidents and act as a senior advisor during investigations and remediation activities.

The successful candidate will bring significant experience in OT, industrial cybersecurity, critical infrastructure protection or a closely related field, together with proven leadership experience in a complex, regulated or multinational environment. Strong knowledge of industrial control systems, network architecture, identity and access management, security operations, threat modelling and recognised frameworks such as IEC 62443, NIST or ISO 27001 is required. Experience leading transformation programmes, influencing senior stakeholders and managing external partners will be highly valued. Relevant professional certifications, such as CISSP, CISM, GICSP or equivalent, are desirable. You will be a confident communicator and strategic thinker, capable of translating technical risk into clear business priorities while building a strong culture of security, collaboration and continuous improvement.

We are seeking a Senior Network and Security Engineer to design, implement and maintain secure, resilient network infrastructure across a complex and highly available environment. The successful candidate will provide technical leadership across network architecture, cybersecurity controls and operational performance, ensuring services remain reliable, scalable and aligned with business and regulatory requirements.

Key responsibilities will include managing enterprise routing, switching, firewalls, VPNs, wireless networks, load balancers and network access controls. You will monitor infrastructure performance, investigate and resolve complex incidents, lead root-cause analysis, and coordinate planned maintenance and change activity. The role will also involve developing and enforcing security policies, supporting vulnerability remediation, reviewing logs and alerts, and contributing to incident response and disaster recovery planning. You will collaborate with infrastructure, cloud, application and service teams to deliver secure solutions, while maintaining accurate documentation, diagrams, configuration records and operational procedures. You may also be expected to mentor engineers, provide technical guidance and contribute to improvement programmes and infrastructure projects.

Applicants should have substantial experience in network engineering and security within a medium-to-large enterprise environment, together with strong knowledge of TCP/IP, DNS, DHCP, BGP, OSPF, VLANs, VPN technologies and network segmentation. Hands-on experience with next-generation firewalls, intrusion prevention, secure remote access, identity-based controls and cloud networking is essential. Relevant industry certifications or equivalent practical experience will be highly valued. You will need excellent troubleshooting and analytical abilities, a methodical approach to risk and change management, and the confidence to communicate technical issues clearly to both technical and non-technical stakeholders. A proactive mindset, strong teamwork skills and a commitment to continuous improvement are essential.

We are seeking an Assistant Manager, Analyst to support the Business Information Security (BIS) function across global operations. This role will help protect business information, technology assets and services by contributing to security governance, risk management and operational assurance activities. You will work with stakeholders across technology, business operations, internal controls and risk teams to promote secure practices and support the delivery of information security objectives.

Key responsibilities include assisting with the assessment, documentation and monitoring of information security risks; coordinating the review of security controls, policies and procedures; and supporting the tracking and remediation of identified issues. You will help prepare management reports, risk summaries, metrics and presentations, ensuring that information is accurate, clearly communicated and delivered within agreed timelines. The role may also support control testing, audit requests, regulatory reviews, third-party risk assessments, security awareness initiatives and the maintenance of governance records. You will contribute to process improvements by identifying opportunities to streamline reporting, improve data quality and strengthen control effectiveness across global teams.

The successful candidate will have experience in information security, technology risk, IT audit, compliance, governance or a related analytical role. A good understanding of security frameworks, risk and control principles, issue management and audit processes is desirable. You should be comfortable analysing information from multiple sources, identifying trends and presenting practical recommendations to varied audiences. Strong organisational, written and verbal communication skills are essential, along with sound attention to detail and the ability to manage competing priorities in a fast-paced, international environment. Experience with reporting and data analysis tools, risk management platforms or governance systems would be advantageous. Professional certifications in information security, risk, audit or related disciplines are welcome but not essential.

We are seeking an experienced Security Architect IV to define and advance enterprise security architecture across complex technology environments. In this senior role, you will develop secure, scalable architecture strategies that align business objectives with risk management, regulatory obligations, and industry best practices. You will assess existing platforms and proposed solutions, identify vulnerabilities and control gaps, and provide practical recommendations that strengthen the organisation’s overall security posture.

Key responsibilities include establishing security architecture principles, standards, reference models, and design patterns; reviewing technology, cloud, application, data, network, and infrastructure designs; and ensuring security requirements are embedded throughout the solution lifecycle. You will lead threat modelling, risk assessments, architecture reviews, and control validation activities, translating technical findings into clear guidance for technical and executive stakeholders. The role will also involve partnering with engineering, operations, governance, risk, and compliance teams to support secure transformation initiatives, influence design decisions, and resolve complex security challenges. You may also contribute to incident response planning, security roadmaps, policy development, and the evaluation of emerging technologies.

Applicants should have substantial experience in security architecture, enterprise architecture, or a closely related discipline, with a strong understanding of modern cybersecurity principles and defensive technologies. Demonstrable expertise across cloud security, identity and access management, network security, application security, data protection, encryption, and security operations is required. Experience with major security frameworks and standards, such as NIST, ISO 27001, CIS Controls, or equivalent, is highly desirable. Relevant professional certifications, such as CISSP, SABSA, CCSP, or comparable credentials, are advantageous. You will be expected to communicate complex concepts clearly, influence stakeholders at all levels, manage competing priorities, and exercise sound judgement when addressing high-impact risks. A collaborative, strategic mindset and the ability to deliver pragmatic, business-focused security outcomes are essential.

We are seeking a Security Engineer to help protect critical systems, applications, networks, and data across a complex technology environment. In this role, you will design, implement, and maintain effective security controls while supporting the continuous improvement of information security practices. You will work closely with infrastructure, software development, cloud, and operations teams to identify risks, strengthen defensive capabilities, and ensure security is embedded throughout the technology lifecycle.

Your responsibilities will include monitoring and investigating security events, supporting incident response activities, and conducting vulnerability assessments across infrastructure, applications, endpoints, and cloud environments. You will develop and maintain security tooling, controls, policies, and technical documentation, while helping to improve logging, alerting, identity and access management, endpoint protection, network security, and secure configuration standards. You will also contribute to threat modelling, penetration testing coordination, risk assessments, audit preparation, and the remediation of identified vulnerabilities. Where appropriate, you will automate repeatable security processes using scripting or infrastructure-as-code techniques.

The successful candidate will have professional experience in security engineering, cybersecurity operations, or a related technical field, with a strong understanding of common security principles, attack methods, and defensive practices. Experience with cloud platforms, SIEM solutions, vulnerability management tools, firewalls, intrusion detection, identity platforms, and security monitoring is highly desirable. Familiarity with frameworks such as NIST, ISO 27001, CIS Controls, or equivalent standards would be beneficial. You should be analytical, pragmatic, and comfortable explaining technical risks to both specialist and non-specialist audiences. Relevant certifications or demonstrable hands-on experience are welcome. This role offers the opportunity to make a meaningful contribution to security resilience while working collaboratively on challenging and varied technical initiatives.

We are seeking an Information Security Analyst - SecOps Detection to strengthen our security operations capability and help protect critical systems, applications and data. In this role, you will monitor, investigate and respond to security events across a range of technologies, identifying suspicious activity and supporting timely, effective incident resolution. You will work closely with security, infrastructure, engineering and business teams to improve detection coverage, reduce risk and maintain a strong defensive posture.

Your responsibilities will include triaging and investigating alerts from SIEM, endpoint detection and response, network monitoring, identity and cloud security platforms. You will conduct initial incident analysis, correlate event data, document findings and escalate confirmed or complex threats in line with established procedures. You will contribute to incident response activities, threat hunting and root-cause analysis, while helping to develop and tune detection rules, use cases, dashboards and automated workflows. You will also support vulnerability and exposure assessments, provide clear operational reporting and maintain accurate security documentation and playbooks.

The successful candidate will have experience in a security operations, detection engineering, incident response or related role, with a sound understanding of common attack techniques, security controls and incident-handling principles. Practical knowledge of SIEM technologies, endpoint security tools, network and cloud environments, identity platforms and log analysis is highly desirable. Familiarity with frameworks such as MITRE ATT&CK, Cyber Kill Chain or NIST will be beneficial, as will scripting or automation experience using languages such as Python or PowerShell. You should be analytical, curious and able to communicate technical findings clearly to both technical and non-technical audiences. Relevant industry certifications or equivalent practical experience are welcome. This is an opportunity to make a meaningful contribution to the detection and prevention of cyber threats within a collaborative, continuously improving security function.

We are seeking an Information Security Analyst – SecOps Response to support the detection, investigation and resolution of cybersecurity incidents across a complex technology environment. You will work as part of a security operations function, monitoring alerts and security events, assessing potential threats, and coordinating timely responses to incidents affecting systems, applications, networks and users. This role will contribute to protecting the confidentiality, integrity and availability of information assets while helping to strengthen operational security processes.

Key responsibilities include triaging and investigating alerts from security information and event management, endpoint detection and response, identity, network and cloud security platforms; identifying indicators of compromise; analysing logs and other forensic data; and documenting findings clearly. You will contain and remediate incidents in line with established procedures, escalate critical events appropriately, support root-cause analysis, and contribute to post-incident reviews. The role will also involve developing and improving incident response playbooks, tuning detection rules, tracking vulnerabilities and security actions, producing operational reports, and working with infrastructure, engineering and service teams to reduce risk. You may participate in an on-call or out-of-hours response rota.

Applicants should have practical experience in security operations, incident response, threat monitoring or a closely related discipline, together with a sound understanding of common attack techniques, defensive controls and security principles. Familiarity with SIEM, EDR, ticketing and vulnerability management tools is expected, along with the ability to investigate activity across Windows, Linux, networks, cloud services and identity platforms. Experience with scripting or automation, such as PowerShell or Python, would be advantageous. Relevant professional certifications are welcome but not essential. You will need strong analytical and communication skills, careful attention to detail, sound judgement under pressure, and the ability to explain technical risks to both specialist and non-specialist audiences. A proactive approach to continuous learning and a commitment to secure, well-documented working practices are essential.