Job Search

We are seeking a Cloud Information Specialist Threat Modeler to strengthen the security and resilience of cloud-based platforms, applications, and information services. In this role, you will identify and assess threats across cloud environments, translate business and technical risks into practical security requirements, and support teams in designing effective controls. You will work closely with architects, developers, engineers, governance specialists, and operational stakeholders to ensure that security is embedded throughout the solution lifecycle.

Your responsibilities will include conducting structured threat modelling and risk assessments for cloud services, data flows, APIs, applications, and infrastructure; documenting attack paths, vulnerabilities, assumptions, and recommended mitigations; and maintaining threat models as systems, technologies, and risks evolve. You will review solution designs and security architectures, advise on identity and access management, encryption, network segmentation, logging, monitoring, and data protection, and help prioritise remediation activities. You will also contribute to security standards, design patterns, assurance processes, and clear reporting for both technical and non-technical audiences.

The successful candidate will have experience in cloud security, information security, threat modelling, security architecture, or a related discipline. Practical knowledge of major cloud concepts, shared responsibility models, secure software development, and common threat modelling frameworks such as STRIDE, attack trees, or data flow analysis is required. Familiarity with cloud-native services, DevSecOps, infrastructure as code, vulnerability management, and relevant data protection or security standards would be advantageous. You should be analytical, collaborative, and confident challenging assumptions constructively, with the ability to explain complex risks clearly and recommend proportionate, achievable solutions. Relevant professional certifications or equivalent experience are welcome.

We are seeking an End User Platform Vulnerability Engineer to strengthen the security of workplace technology and protect users, devices, applications and data across an enterprise environment. In this role, you will identify, assess and help remediate vulnerabilities affecting endpoint platforms, operating systems, productivity tools, browsers, mobile devices and associated infrastructure. You will work closely with security operations, infrastructure, service management and engineering teams to reduce risk and maintain secure, reliable end-user services.

Your responsibilities will include managing vulnerability scanning and assessment activities, validating findings, prioritising remediation according to risk, and coordinating corrective actions with technical owners. You will investigate vulnerabilities, assess their potential business impact, recommend mitigation or compensating controls, and track remediation through to completion. You will also support patch management, security configuration reviews, exception management and vulnerability reporting, ensuring accurate records and clear communication of risks, trends and outstanding actions. The role may involve developing dashboards, metrics, procedures and automation to improve visibility and accelerate remediation. You will contribute to security projects, provide technical guidance during platform changes, and stay informed about emerging threats, vendor advisories and relevant industry standards.

The successful candidate will have practical experience in vulnerability management, endpoint security, systems engineering or a closely related discipline. You should understand common operating systems, enterprise device management, software deployment, patching processes, identity controls and security hardening principles. Experience with vulnerability scanners, endpoint detection and response tools, configuration management platforms, scripting or automation is highly desirable. You will be analytical, organised and able to translate technical findings into clear, actionable recommendations for both technical and non-technical stakeholders. Strong communication skills, sound judgement and the ability to manage competing priorities are essential. Relevant professional certifications or demonstrable equivalent experience in cybersecurity, infrastructure or platform engineering would be advantageous.

We are seeking a Lead Security Engineer to provide technical leadership across the design, implementation, and continuous improvement of security capabilities. This role will help shape secure architecture, strengthen engineering practices, and support the organisation in identifying and managing cyber risk across cloud, infrastructure, applications, and corporate systems. You will work closely with engineering, IT, architecture, compliance, and risk teams to ensure security is embedded throughout the technology lifecycle.

Key responsibilities include leading security engineering initiatives, reviewing architectures and designs, and defining practical controls that protect systems, data, and services. You will develop and maintain security solutions such as identity and access management, endpoint protection, vulnerability management, security monitoring, secrets management, and cloud security controls. The role will also involve improving detection and response capabilities, supporting incident investigations, conducting threat modelling, and advising on remediation priorities. You will contribute to security standards, engineering guidance, technical documentation, and automation that enables teams to deliver securely and efficiently. As a technical lead, you will mentor engineers, coordinate delivery across multiple workstreams, and communicate complex security matters clearly to both technical and non-technical stakeholders.

The successful candidate will have substantial experience in security engineering, architecture, or a closely related discipline, together with a strong understanding of modern infrastructure, networks, operating systems, applications, and cloud platforms. Experience with secure software development, DevSecOps, infrastructure as code, scripting, vulnerability assessment, and security tooling is highly desirable. You should be comfortable analysing threats, balancing risk with business requirements, and influencing decisions without relying solely on authority. Strong communication, problem-solving, and stakeholder management skills are essential, along with a proactive approach to continuous improvement. Relevant professional certifications or equivalent practical experience will be valued.

We are seeking a Member of Technical Staff (Software Engineer, Security) to help design, build, and maintain secure, reliable software systems. In this role, you will work across engineering teams to identify security risks, improve application and infrastructure security, and deliver practical solutions that protect products, services, and customer data. You will contribute throughout the software development lifecycle, from technical design and threat modelling through implementation, testing, deployment, and ongoing improvement.

Your responsibilities will include developing security tools, services, libraries, and automation; reviewing code and architecture for vulnerabilities; investigating security issues; and partnering with engineers to remediate findings. You will help establish secure coding practices, strengthen authentication, authorization, secrets management, logging, monitoring, and vulnerability management capabilities. You may also support incident response, security assessments, penetration testing, and the development of engineering standards and documentation. The role requires the ability to balance security goals with usability, performance, scalability, and delivery timelines.

The successful candidate will have professional experience developing software in one or more languages such as Go, Python, Java, C++, or JavaScript, along with a strong understanding of software security principles and common vulnerabilities. Experience with cloud platforms, distributed systems, operating systems, networking, containers, CI/CD pipelines, or infrastructure as code is highly valued. You should be comfortable reviewing technical designs, communicating risk to varied audiences, and influencing secure engineering practices without relying solely on formal authority. Strong analytical, problem-solving, and communication skills are essential, as is a collaborative approach to working with teams across the organisation. Experience in application security, product security, security engineering, or vulnerability research is desirable.

We are seeking a Cyber Security Consultant – Associate Network to support the design, implementation and maintenance of secure network environments. In this role, you will work with experienced security professionals and technical stakeholders to assess network risks, identify vulnerabilities and help deliver practical security improvements across infrastructure, applications and cloud-connected services. This is an excellent opportunity for someone developing a career in cyber security who is keen to build broad consulting, technical and client-facing experience.

Key responsibilities will include assisting with network security assessments, configuration reviews and vulnerability management activities; monitoring security controls and investigating potential incidents; supporting the implementation of firewalls, intrusion detection and prevention systems, secure remote access, network segmentation and endpoint protection; and contributing to security architecture reviews and risk assessments. You will help produce clear technical reports, recommendations and remediation plans, maintain accurate documentation, and track actions through to completion. The role may also involve supporting security testing, participating in incident response exercises, and keeping current with emerging threats, vulnerabilities, regulatory expectations and industry good practice.

Applicants should have a foundational understanding of networking principles, including TCP/IP, DNS, routing, switching, VPNs and common network protocols, together with an awareness of cyber security concepts such as identity and access management, vulnerability assessment, threat modelling and security monitoring. Practical experience with network security technologies, SIEM platforms, vulnerability scanners or cloud environments would be beneficial. Relevant qualifications or certifications, such as CompTIA Security+, Network+, Cisco certifications or equivalent study, are welcomed. You should be analytical, methodical and confident communicating technical information to both technical and non-technical audiences. A collaborative approach, strong attention to detail, professional integrity and a willingness to learn are essential.

We are seeking a Digital & Cyber Resilience Manager to lead the development and continuous improvement of capabilities that protect critical services, technology, information and business operations from disruption. This role will provide strategic direction and practical expertise across cyber resilience, operational resilience, business continuity, disaster recovery and technology risk. You will work with senior stakeholders, technology teams, security specialists and business leaders to ensure that important services can withstand, respond to and recover from cyber incidents and other operational disruptions.

Key responsibilities will include defining and maintaining resilience strategies, policies, standards and frameworks; conducting service and business impact assessments; identifying critical processes, dependencies, vulnerabilities and recovery requirements; and overseeing the development and testing of business continuity and disaster recovery plans. You will coordinate scenario exercises, simulations and post-incident reviews, ensuring that lessons learned are translated into measurable improvements. The role will also monitor resilience risks, maintain management information and reporting, support regulatory or audit activity, and provide clear recommendations to senior leadership. You will promote a culture of resilience through awareness, guidance and constructive challenge, while helping teams embed effective controls throughout the design and delivery of digital services.

The successful candidate will have substantial experience in cyber resilience, technology risk, operational resilience, business continuity, disaster recovery or a related discipline, gained in a complex or highly regulated environment. You should be confident interpreting risk, translating technical issues for non-technical audiences and influencing stakeholders at all levels. Knowledge of recognised resilience, information security or risk management standards and frameworks is desirable, together with experience of incident management, exercising and third-party risk. Strong analytical, communication, organisational and report-writing skills are essential. Relevant professional qualifications or equivalent practical experience will be valued. This is an opportunity to shape a mature, enterprise-wide resilience approach and make a visible contribution to the reliability and security of essential services.

We are seeking an experienced Technical Leader to shape and deliver a modern security monitoring capability centred on Splunk and related security technologies. In this role, you will provide technical direction across the design, implementation, and continuous improvement of security information and event management services. You will work closely with cybersecurity, infrastructure, cloud, application, and risk teams to ensure security data is collected effectively, analysed accurately, and translated into meaningful action.

Your responsibilities will include defining technical standards and architecture, leading the development of detection use cases, improving alert quality, and establishing effective processes for threat monitoring, incident investigation, and response. You will oversee the onboarding and management of data sources, including cloud platforms, endpoints, networks, applications, and identity services. You will also guide the creation of dashboards, reports, correlation searches, automation, and operational metrics that support both security teams and senior stakeholders. A key part of the role will be mentoring engineers and analysts, coordinating delivery across technical teams, and promoting consistent engineering and documentation practices.

You will bring substantial experience working with Splunk in a security operations, detection engineering, or cyber defence environment, together with a strong understanding of SIEM architecture, log management, threat detection, and incident response. Experience with Splunk Enterprise Security, SPL, data onboarding, alert tuning, and security automation is highly desirable. Knowledge of cloud security, identity and access management, network security, vulnerability management, and relevant security frameworks will be valuable. You should be comfortable leading technical discussions, influencing stakeholders, managing competing priorities, and communicating complex issues clearly to both technical and non-technical audiences. Relevant certifications in Splunk, cybersecurity, cloud, or security operations are advantageous.

We are seeking a Product Security Engineer to help build secure, resilient products from design through deployment. In this role, you will work closely with software engineering, architecture, infrastructure, quality assurance, and product teams to identify security risks early and ensure that security is embedded throughout the development lifecycle. You will contribute to practical, scalable security solutions that protect customer data, business systems, and product functionality.

Your responsibilities will include conducting threat modelling and security reviews, assessing application and system designs, and advising teams on secure coding and architecture principles. You will help define and maintain security requirements, standards, and engineering guidelines, while supporting vulnerability management, penetration testing, dependency analysis, and remediation activities. You will investigate security findings, prioritise risks based on business impact, and work with development teams to implement effective corrective actions. You may also contribute to security tooling, automation, security testing in CI/CD pipelines, incident response, and the continuous improvement of product security processes.

We are looking for experience in product, application, or software security, together with a strong understanding of common vulnerabilities, secure development practices, authentication and authorisation, data protection, and cloud or distributed systems. Familiarity with security frameworks such as OWASP, threat modelling methodologies, source code analysis, and modern DevSecOps practices is highly desirable. You should be comfortable communicating technical risks to both technical and non-technical audiences, influencing without direct authority, and balancing security requirements with usability and delivery goals. A curious, collaborative, and pragmatic approach is essential, along with the ability to manage multiple priorities and work effectively in a changing environment. Relevant professional experience, certifications, or a degree in computer science, cybersecurity, or a related discipline will be valued.

We are seeking a Data Protection Engineer to help design, implement and maintain secure, resilient solutions that protect personal and sensitive information across a complex technology environment. You will work closely with security, infrastructure, software engineering, compliance and data teams to strengthen privacy controls, reduce risk and support the responsible use of data. This role offers the opportunity to contribute to high-impact technical initiatives while helping embed data protection principles into platforms, applications and operational processes.

Your responsibilities will include developing and maintaining data protection, encryption, key management, access control, data loss prevention and monitoring capabilities. You will assess systems and data flows, identify vulnerabilities, support privacy and security impact assessments, and recommend practical improvements. You will also help define technical standards, automate compliance and security controls, investigate incidents, support remediation activities and maintain clear documentation for audits and internal governance. The role may involve contributing to data retention, deletion, classification, pseudonymisation and secure transfer solutions, as well as reviewing new technologies and architectures for privacy and security risks.

We are looking for experience in data protection engineering, information security, cloud security, privacy engineering or a related discipline. You should have a strong understanding of encryption, identity and access management, secure software development, network security and data governance, together with hands-on experience using cloud platforms, security tooling, scripting or infrastructure-as-code. Familiarity with relevant privacy and security frameworks and regulations, such as GDPR, ISO 27001 or NIST, would be advantageous. Strong analytical, communication and problem-solving skills are essential, along with the ability to explain technical risks clearly to both specialist and non-specialist audiences. A relevant degree or equivalent practical experience is preferred.

We are seeking a Security Consulting Consultant to support clients in identifying, managing and reducing information security and technology-related risks. In this role, you will work with organisations across a range of industries, helping them strengthen their security posture, meet regulatory obligations and respond effectively to an evolving threat landscape. You will contribute to assignments from initial scoping through to delivery, building trusted relationships with stakeholders and providing practical, risk-based advice.

Your responsibilities will include conducting security assessments, gap analyses and risk reviews; evaluating governance, policies, processes and technical controls; and developing clear recommendations for improvement. You may support projects involving information security management systems, cyber risk, third-party risk, data protection, identity and access management, incident response, business continuity and compliance frameworks. You will prepare high-quality reports, presentations and client deliverables, communicate findings to both technical and non-technical audiences, and assist with the development of remediation plans. The role may also involve supporting bids, proposals, workshops and internal knowledge-sharing activities.

Applicants should have experience in information security, cyber security, technology risk, audit or a related consulting environment, together with a sound understanding of security principles, risk management approaches and relevant standards or regulations. Familiarity with frameworks such as ISO 27001, NIST, CIS Controls, SOC 2 or similar is desirable. Strong analytical, written and verbal communication skills are essential, as is the ability to manage competing priorities and work collaboratively with clients and colleagues. Professional certifications such as CISSP, CISM, CRISC, CISA, ISO 27001 or equivalent are advantageous. A proactive mindset, commercial awareness, attention to detail and a commitment to delivering practical outcomes will be highly valued.