Job Search

We are seeking a Test Automation Engineer to support the delivery of secure, reliable and high-quality software within a security and intelligence environment. You will design, develop and maintain automated test frameworks and suites across web, API, integration and end-to-end applications. Working closely with software engineers, analysts, product owners and security specialists, you will help ensure that systems meet functional, performance, resilience and security requirements throughout the development lifecycle.

Your responsibilities will include translating requirements and technical specifications into comprehensive test strategies, scenarios and automated scripts; identifying opportunities to improve test coverage and reduce manual effort; integrating automated testing into CI/CD pipelines; and investigating, documenting and tracking defects through to resolution. You will contribute to regression, exploratory, system, acceptance and non-functional testing, while supporting release readiness and continuous improvement of quality assurance practices. The role may also involve testing systems that handle sensitive information, so you will be expected to work carefully within strict security, governance and confidentiality standards.

Applicants should have professional experience in software testing and automation, with strong programming or scripting skills in a language such as Python, Java, C# or JavaScript. Experience with tools and technologies such as Selenium, Playwright, Cypress, REST API testing, Git and CI/CD platforms is highly desirable. You should understand modern testing principles, Agile delivery methods, defect management and software development lifecycles, with the ability to analyse complex problems and communicate technical findings clearly. Experience of secure development, threat-informed testing, cloud platforms, containerised environments or regulated projects would be advantageous. A proactive, methodical approach, strong attention to detail and the ability to work collaboratively while handling sensitive material are essential.

We are seeking an experienced ISO 27001 Consultant & Auditor to support organisations operating in the defence and wider security-sensitive sectors. This role will involve helping clients establish, improve and maintain robust information security management systems (ISMS) aligned with ISO/IEC 27001 and relevant defence cyber certification requirements. You will work with stakeholders at all levels to assess current controls, identify risks and develop practical, proportionate solutions that meet regulatory, contractual and operational expectations.

Key responsibilities will include planning and delivering ISO 27001 gap assessments, internal audits, readiness reviews and certification support engagements. You will document findings, assess corrective actions and provide clear, evidence-based reports for technical and executive audiences. The role will also involve supporting risk assessments, Statement of Applicability development, security policy reviews, control implementation, audit preparation and the ongoing improvement of management systems. You may contribute to defence-focused cyber assurance activities, including interpreting applicable security frameworks, supply-chain requirements and customer-specific certification standards. Building trusted relationships with clients, managing assigned engagements and maintaining accurate project documentation will be important parts of the position.

Applicants should have substantial experience working with ISO/IEC 27001, preferably across consultancy, internal audit or certification-readiness environments. A recognised ISO 27001 Lead Auditor or Lead Implementer qualification is expected, together with a strong understanding of information security governance, risk management, control design and audit methodology. Experience within defence, government, critical national infrastructure or other regulated environments would be advantageous, as would familiarity with cyber assurance schemes and secure supply-chain requirements. You should be confident interviewing stakeholders, analysing evidence, challenging constructively and presenting recommendations clearly. Strong written and verbal communication, sound judgement, attention to detail and the ability to manage multiple priorities are essential. Applicants may be required to undergo security screening appropriate to the assignments.

We are seeking a Data Scientist – Security & Intelligence to develop evidence-based insights that support complex security, risk and intelligence operations. Working with analysts, investigators, engineers and operational stakeholders, you will transform diverse and often imperfect data into clear, actionable intelligence. You will contribute to projects involving threat detection, risk assessment, anomaly identification, network analysis, forecasting and the evaluation of emerging risks.

You will design, build and validate statistical models, machine learning solutions and analytical tools using structured and unstructured data. Responsibilities will include gathering and preparing data from multiple sources, identifying meaningful patterns, developing repeatable analytical workflows and communicating findings to both technical and non-technical audiences. You will assess model performance, monitor data quality, document methodologies and ensure that analytical outputs are robust, explainable and appropriate for operational use. You may also support the development of dashboards, visualisations and automated reporting processes, while contributing to the continuous improvement of data science practices, governance and responsible use of information.

The successful candidate will have experience applying data science, statistics or machine learning to real-world problems, along with strong programming skills in Python, R or a similar language. Familiarity with SQL, data visualisation, natural language processing, geospatial analysis, graph analytics or anomaly detection would be advantageous. You should be comfortable working with sensitive information, managing ambiguity and explaining technical concepts with clarity. A methodical approach, sound judgement, curiosity and a strong commitment to ethics, confidentiality and data protection are essential. Experience in security, intelligence, fraud, investigations, public-sector analysis or another risk-focused environment is desirable, but candidates who can demonstrate transferable analytical expertise are encouraged to apply.

We are seeking a Cyber Researcher to investigate emerging cyber threats, assess vulnerabilities, and develop practical insights that support stronger security outcomes. The role will involve monitoring threat intelligence sources, analysing malware and attack techniques, and researching developments across areas such as cloud security, application security, network defence, identity, and emerging technologies. You will translate complex technical findings into clear, actionable intelligence for both technical and non-technical audiences.

Responsibilities will include designing and conducting independent research, validating findings through laboratory testing or proof-of-concept development, and documenting methodologies, risks, and recommendations. You will contribute to threat reports, technical briefings, vulnerability assessments, and security guidance, while identifying trends that may affect systems, services, and users. The role may also involve collaborating with security engineers, incident responders, software developers, and external research communities; supporting investigations; presenting findings; and helping improve internal detection, prevention, and response capabilities.

Applicants should have professional or academic experience in cybersecurity, computer science, digital forensics, or a related discipline, together with a strong understanding of common attack paths, defensive controls, and security research methods. Practical knowledge of scripting or programming languages such as Python, PowerShell, JavaScript, or C/C++ is desirable, as is experience with reverse engineering, penetration testing, malware analysis, vulnerability research, or security tooling. You should be analytical, curious, methodical, and able to work independently while communicating effectively with varied stakeholders. The ability to handle sensitive information responsibly, challenge assumptions, and explain technical issues clearly is essential. Relevant certifications, published research, conference presentations, or a demonstrable portfolio of security projects would be advantageous.

We are seeking an early-career Software Engineer and User-Land Security Researcher to help identify, analyse, and address security weaknesses in user-space software and systems. You will work with experienced security engineers and researchers to investigate vulnerabilities, develop proof-of-concept demonstrations, and improve the resilience of products and services. This role is suited to someone who enjoys understanding how software works at a low level and applying that knowledge to practical security problems.

Your responsibilities will include performing vulnerability research across applications, libraries, and operating-system components; analysing source code, binaries, crash data, and system behaviour; and developing tools, scripts, and automated techniques to support security testing. You will document findings clearly, assess potential impact, and collaborate with software engineers to validate issues and support effective remediation. You may also contribute to threat modelling, exploitability assessments, security reviews, and internal research projects, while sharing knowledge through technical reports and presentations.

We are looking for a degree, equivalent training, or demonstrated experience in computer science, software engineering, cybersecurity, or a related discipline. You should have practical programming experience in languages such as C, C++, Python, Rust, or a similar language, together with a foundational understanding of operating systems, memory management, debugging, and common vulnerability classes. Familiarity with reverse engineering, fuzzing, static or dynamic analysis, assembly language, application security, or security research tooling is desirable. Curiosity, careful analytical thinking, responsible handling of sensitive information, and the ability to communicate technical concepts clearly are essential. We welcome candidates who have developed relevant skills through academic projects, independent research, internships, competitions, or open-source contributions.

We are seeking a Data Scientist – Cybersecurity Analyst to support the identification, investigation and mitigation of cyber threats in a complex and fast-moving environment. Based in Cheltenham, this role will combine data science, security analysis and practical problem-solving to help protect critical systems, services and information. You will work with large and varied datasets, develop analytical methods and provide clear, evidence-based insight to support operational and strategic security decisions.

Key responsibilities will include collecting, cleaning and analysing security-related data from multiple sources; identifying patterns, anomalies and indicators of compromise; and developing statistical, machine-learning or rules-based approaches to detect emerging threats. You will contribute to threat hunting, incident investigations, vulnerability assessments and the continuous improvement of monitoring and detection capabilities. The role will also involve building dashboards, reports and visualisations for technical and non-technical audiences, documenting analytical findings, and communicating recommendations clearly to colleagues and stakeholders. You may be required to collaborate with security engineers, intelligence specialists, incident responders and wider technology teams on projects from initial requirements through to implementation and review.

Applicants should have experience in data analysis, data science, cybersecurity, or a closely related discipline, together with strong skills in Python, SQL or comparable analytical tools. Knowledge of statistical modelling, machine learning, data visualisation and common security concepts such as network traffic, malware, authentication, vulnerabilities and threat intelligence is desirable. You should be comfortable working with incomplete or ambiguous information, testing hypotheses and explaining complex results in a concise and accessible way. A methodical approach, strong attention to detail, sound judgement and a commitment to responsible handling of sensitive information are essential. Relevant qualifications or professional experience in computer science, mathematics, engineering, cybersecurity or a related field would be advantageous.

We are seeking a Junior Vulnerability Researcher to join a technically focused security team from September 2027. This is an entry-level opportunity for someone with a strong interest in offensive security, software analysis and the discovery of previously unknown weaknesses. You will work alongside experienced researchers to investigate vulnerabilities across applications, operating systems, embedded devices and network technologies, helping to improve the security of products and services used by a wide range of customers.

Your responsibilities will include analysing source code and compiled binaries, developing proof-of-concept exploits, reproducing reported security issues and assessing their potential impact. You will use techniques such as fuzzing, debugging, reverse engineering and static and dynamic analysis to identify weaknesses, document your findings and support responsible disclosure. You will also contribute to security research reports, technical presentations and internal knowledge-sharing activities, while keeping up to date with emerging vulnerabilities, attack methods and relevant industry standards.

Applicants should have a degree, equivalent qualification or demonstrable practical experience in computer science, cybersecurity, software engineering or a related discipline. Familiarity with programming or scripting languages such as Python, C, C++, Rust or JavaScript is desirable, along with a basic understanding of operating systems, networking, memory management and common web application vulnerabilities. Experience using tools such as debuggers, disassemblers, vulnerability scanners or fuzzing frameworks would be advantageous, but training and mentoring will be provided. We are looking for a curious, methodical and collaborative individual who can communicate complex technical concepts clearly, approach problems creatively and maintain accurate documentation. A willingness to learn, ethical judgement and careful attention to detail are essential.

We are seeking a Data Scientist - Cybersecurity Analyst to help strengthen cyber defence through advanced analytics, threat intelligence and proactive risk identification. You will analyse large and complex datasets from security tools, networks, applications and business systems to uncover suspicious activity, emerging threats and vulnerabilities. Your work will support informed security decisions, improve detection capabilities and contribute to the ongoing protection of critical information and services.

Key responsibilities include developing and maintaining data models, dashboards and analytical methods for identifying anomalous behaviour; investigating security alerts and incidents using statistical analysis, machine learning and data visualisation; and translating technical findings into clear, actionable recommendations for both technical and non-technical stakeholders. You will collaborate with security operations, engineering, infrastructure, governance and risk teams to improve monitoring, automate repetitive processes and enhance incident response. You will also contribute to threat hunting, vulnerability analysis, security reporting and the continuous refinement of detection rules and analytical techniques.

The successful candidate will have experience in data science, cybersecurity, threat intelligence, security operations or a closely related field. You should be confident using Python, SQL and relevant analytical or visualisation tools, with practical knowledge of statistical modelling, machine learning and data preparation. An understanding of security concepts such as network traffic analysis, identity and access management, intrusion detection, endpoint security, cloud environments and common attack frameworks is essential. Strong problem-solving, communication and documentation skills are required, along with the ability to manage competing priorities and handle sensitive information responsibly. Relevant professional certifications or a degree in data science, computer science, cybersecurity, mathematics or a related discipline would be advantageous.

We are seeking a Junior Cyber Security Researcher to join a forward-looking security team from September 2027. This entry-level role is suited to someone with a strong interest in cyber security, threat research and emerging technologies, who is keen to develop practical experience in a collaborative environment. You will support investigations into new and evolving threats, contribute to security research projects and help translate technical findings into clear, actionable intelligence.

Your responsibilities will include monitoring threat activity, researching vulnerabilities, malware, attack techniques and relevant security trends, and assisting with the assessment of potential risks. You will help gather, validate and analyse information from open-source intelligence, technical reports, security tools and other trusted sources. You may also contribute to writing research notes, threat briefings, technical reports and internal guidance. The role will involve working with experienced analysts and security specialists, supporting incident investigations, testing defensive controls and presenting findings to both technical and non-technical audiences.

Applicants should have, or be working towards, a degree or equivalent qualification in cyber security, computer science, digital forensics or a related subject. A genuine interest in cyber security and an understanding of core concepts such as networking, operating systems, vulnerabilities, identity, cloud security and the cyber attack lifecycle are essential. Familiarity with scripting or programming languages such as Python, PowerShell or Bash, and experience using tools such as virtual machines, packet analysers or security platforms, would be advantageous. We are looking for someone analytical, curious and methodical, with strong written and verbal communication skills. The successful candidate will demonstrate a willingness to learn, an ethical approach to research, attention to detail and the ability to manage tasks effectively while working as part of a team.

We are seeking a skilled Security GRC & AI Analyst to join our dynamic team. In this role, you will be responsible for conducting risk assessments, managing compliance initiatives, and ensuring adherence to security policies and regulations. You will collaborate with various stakeholders to develop and implement governance, risk management, and compliance (GRC) strategies that align with best practices and industry standards. Your expertise in AI-driven security solutions will enable you to identify potential threats and enhance our overall security posture.

Your key responsibilities will include analyzing data to assess security risks, developing compliance reports, and providing recommendations to mitigate identified vulnerabilities. You will also be involved in maintaining documentation related to GRC activities and facilitating training sessions to promote a security-aware culture within the organization. Additionally, you will leverage AI technologies to automate security processes, improve threat detection, and streamline compliance workflows.

The ideal candidate will possess a strong understanding of information security frameworks, risk assessment methodologies, and regulatory requirements. A background in AI applications within cybersecurity will be advantageous. Excellent analytical, problem-solving, and communication skills are essential, as you will be interacting with cross-functional teams and presenting findings to senior management. Join us in creating a secure environment while driving innovation through advanced technologies.