Job Search

We are seeking an AI Security Tester to assess the security, reliability, and resilience of artificial intelligence systems across their full development lifecycle. You will design and execute adversarial tests against machine learning models, generative AI applications, data pipelines, APIs, and supporting infrastructure. Your work will help identify vulnerabilities such as prompt injection, data leakage, insecure model configurations, adversarial manipulation, poisoning, excessive permissions, unsafe outputs, and weaknesses in authentication or access controls.

In this role, you will create realistic threat scenarios, develop test cases, automate security assessments, and analyse results to determine business and technical impact. You will collaborate with software engineers, data scientists, security specialists, and product teams to validate mitigations and ensure issues are resolved effectively. Responsibilities will include reviewing system architectures and code, conducting penetration tests, evaluating third-party AI components, documenting findings, and producing clear reports for both technical and non-technical stakeholders. You may also contribute to security standards, testing methodologies, risk assessments, incident investigations, and continuous monitoring of AI-enabled services.

The successful candidate will have experience in application security, penetration testing, red teaming, or security research, together with a strong understanding of AI and machine learning concepts. Practical knowledge of Python and common security testing tools is expected, along with familiarity with web applications, APIs, cloud environments, identity and access management, and secure software development practices. Experience testing large language models, retrieval-augmented generation systems, model endpoints, or AI agents would be advantageous. You should be analytical, curious, and comfortable working independently while communicating complex findings clearly. Relevant professional certifications or demonstrable contributions to security research, vulnerability disclosure, or open-source testing tools are desirable.

We are seeking an experienced Lead Cybersecurity GRC Consultant to provide strategic guidance across governance, risk and compliance activities. In this role, you will lead the development, implementation and continuous improvement of cybersecurity policies, standards, procedures and control frameworks. You will work closely with technology, security, legal, privacy, audit and business stakeholders to ensure that security risks are identified, assessed and managed in line with organisational objectives and regulatory expectations.

Key responsibilities include leading enterprise security risk assessments, maintaining risk registers and treatment plans, and advising on appropriate mitigation strategies. You will coordinate internal and external audits, support regulatory and client assurance activities, and oversee the collection and validation of evidence for compliance reviews. The role will also involve mapping controls to recognised frameworks and standards such as ISO 27001, NIST, SOC 2 and relevant data protection requirements. You will prepare clear reports for senior leadership, communicate complex risk matters to non-technical audiences, and mentor colleagues involved in cybersecurity governance and assurance. You may also contribute to third-party risk management, security assessments for new initiatives, metrics development and the continuous improvement of GRC processes and tooling.

The successful candidate will have significant experience in cybersecurity governance, risk management, compliance, audit or assurance, ideally within a complex or regulated environment. Strong knowledge of security frameworks, control design, risk methodologies and regulatory obligations is essential, together with practical experience managing audits and stakeholder relationships. Professional certifications such as CISA, CISM, CRISC, CISSP, ISO 27001 Lead Implementer or Lead Auditor are desirable. You will be confident working independently, managing competing priorities and influencing stakeholders at all levels. Excellent written and verbal communication skills, sound judgement, attention to detail and the ability to translate technical issues into clear business risks are required.

We are seeking an AI Security Tester to assess the resilience, safety and reliability of artificial intelligence systems across the technology landscape. In this role, you will design and execute structured security assessments against machine learning models, generative AI applications, data pipelines, APIs and supporting infrastructure. You will investigate potential weaknesses including prompt injection, jailbreaks, data leakage, insecure model configurations, training data exposure, adversarial inputs, excessive permissions, supply-chain risks and misuse of AI-enabled functionality.

You will develop realistic test scenarios, threat models and abuse cases, combining established penetration-testing techniques with AI-specific attack methods. Responsibilities include reviewing technical designs, analysing model and application behaviour, creating repeatable test scripts, validating findings, assessing business impact and documenting clear remediation recommendations. You will work closely with engineering, architecture, risk and governance teams to communicate results to both technical and non-technical stakeholders. The role may also involve contributing to security standards, testing frameworks, red-team exercises, continuous monitoring approaches and the evaluation of new AI tools and technologies.

The successful candidate will have experience in application security, penetration testing, red teaming, software engineering or a related discipline, together with a strong understanding of modern AI and machine learning concepts. Practical knowledge of large language models, model evaluation, cloud platforms, APIs, Python or similar scripting languages, and common security testing tools is highly desirable. You should be confident interpreting technical evidence, prioritising risk and presenting concise, actionable findings. Curiosity, ethical judgement, analytical thinking and the ability to work independently are essential. Relevant professional certifications in cybersecurity, cloud security, application security or AI risk are advantageous, as is experience with secure development practices, threat modelling and regulatory expectations for responsible AI.

Security Solution Area Specialists are responsible for helping organisations strengthen their security capabilities through effective, practical and scalable technology solutions. Working closely with customers, internal specialists and delivery teams, you will understand business and technical challenges, translate them into clear requirements, and recommend solutions that support secure operations. You will contribute across the full solution lifecycle, from early discovery and design through to implementation, optimisation and ongoing improvement.

Your responsibilities will include analysing security environments, identifying risks and opportunities, developing solution concepts, and producing high-quality technical proposals and presentations. You will support workshops, demonstrations and stakeholder discussions, ensuring that complex security topics are communicated clearly to both technical and non-technical audiences. You will also collaborate with sales, engineering, architecture and project teams to shape propositions, manage expectations and ensure solutions are aligned with agreed outcomes, industry standards and relevant regulatory requirements.

We are looking for professionals with experience in security consulting, solution architecture, technical sales or a related field. You should have a strong understanding of areas such as cyber security, identity and access management, network security, cloud security, data protection, threat detection or security operations. Excellent communication, analytical and relationship-building skills are essential, together with the ability to manage multiple priorities and work effectively with a range of stakeholders. A proactive approach, commercial awareness and a commitment to continual learning are highly valued. Relevant professional certifications or demonstrable experience delivering security solutions will be advantageous.

We are seeking an experienced Associate Director, OT & Cybersecurity to lead the development and delivery of a robust security strategy across operational technology environments. This role will provide strategic direction, technical leadership and governance across industrial control systems, manufacturing technology, connected infrastructure and other critical operational platforms. You will work closely with technology, engineering, operations, risk, compliance and business stakeholders to strengthen cyber resilience while supporting safe, reliable and efficient operations.

Key responsibilities will include developing and maintaining the OT cybersecurity roadmap, policies, standards and control frameworks; identifying and managing cyber risks across OT and IT/OT environments; and overseeing security assessments, vulnerability management, incident response preparedness and remediation programmes. You will establish effective asset visibility, network segmentation, access management, monitoring and threat detection capabilities, while ensuring that security is embedded into the design, deployment and lifecycle management of operational systems. The role will also provide oversight of third-party and supply-chain risks, coordinate responses to significant security events, and support regulatory, audit and assurance activities. You will lead and develop specialist teams, manage external partners and communicate complex security matters clearly to senior leadership.

Applicants should bring substantial experience in OT, industrial cybersecurity, critical infrastructure or a closely related discipline, together with a strong understanding of control systems, industrial networks, common OT protocols and relevant security frameworks such as IEC 62443, NIST or ISO 27001. Experience of building cybersecurity programmes, managing risk in complex operational environments and influencing stakeholders at all levels is essential. A degree or equivalent professional experience in cybersecurity, engineering, information technology or a related field is expected; professional certifications such as CISSP, CISM, GICSP or equivalent would be advantageous. We are looking for a pragmatic, collaborative leader who can balance security, safety, resilience and operational continuity.

We are seeking a Lead Security Solution Architect to define and deliver secure, scalable technology solutions across a complex enterprise environment. In this strategic role, you will translate business and technical requirements into robust security architectures, ensuring that solutions align with organisational risk appetite, regulatory obligations, and industry best practice. You will work closely with engineering, infrastructure, cloud, application, data, and governance teams to embed security throughout the solution lifecycle, from early design and architecture through implementation and operational handover.

Your responsibilities will include developing security architecture principles, reference designs, standards, and patterns; reviewing proposed solutions and identifying risks, control gaps, and opportunities for improvement; and providing clear, pragmatic recommendations to technical and senior business stakeholders. You will lead architecture assurance activities, support threat modelling and risk assessments, and contribute to the design of identity and access management, network security, cloud security, application protection, data security, monitoring, resilience, and incident response capabilities. You will also help establish consistent security practices across programmes, mentor other architects and security professionals, and influence decision-making where priorities, cost, delivery, and risk must be balanced.

You will bring substantial experience in security architecture or a closely related discipline, with a strong understanding of enterprise security principles, secure-by-design practices, and modern cloud environments. Experience across architecture frameworks, threat modelling methodologies, security controls, and relevant regulatory or compliance requirements is essential. Professional certifications such as CISSP, SABSA, CISM, CCSP, or equivalent qualifications would be advantageous. You should be an excellent communicator who can explain complex security concepts clearly to both technical and non-technical audiences, challenge constructively, and build trusted relationships at all levels. The successful candidate will demonstrate sound judgement, strong leadership, and the ability to manage multiple priorities while delivering practical solutions that enable business objectives without compromising security.

We are seeking a Lead Security Solution Architect to define and deliver secure, scalable technology solutions across a complex enterprise environment. In this senior role, you will establish security architecture principles, translate business and technical requirements into practical designs, and ensure that security is embedded throughout the solution lifecycle. You will work closely with engineering, infrastructure, cloud, data, risk, and business stakeholders to shape resilient platforms and services that support strategic objectives.

Your responsibilities will include leading the design and review of security architectures across cloud, on-premises, hybrid, application, network, identity, and data environments. You will produce architecture patterns, reference designs, threat models, and security requirements; assess risks and recommend proportionate controls; and provide technical guidance on secure development, access management, encryption, monitoring, vulnerability management, and incident readiness. You will also govern architecture decisions, challenge exceptions, support technology selection, and help ensure alignment with relevant regulatory, privacy, and industry standards.

The successful candidate will bring substantial experience in security architecture, solution design, and technical leadership, with a strong understanding of modern cloud services, zero-trust principles, identity and access management, network security, application security, and security operations. Experience working with architecture frameworks, risk management processes, and compliance requirements is highly desirable. Professional certifications such as CISSP, SABSA, CCSP, or relevant cloud security credentials would be advantageous. You should be confident influencing senior stakeholders, communicating complex risks clearly, and balancing security, usability, cost, and delivery speed. A collaborative, pragmatic approach and the ability to mentor architects and engineers will be essential to success.

We are seeking an experienced Information Security Manager - AI to lead the development and implementation of security practices for artificial intelligence systems, data platforms, and supporting technology environments. This role will help ensure that AI solutions are designed, deployed, and operated in accordance with robust security, privacy, risk, and regulatory requirements. You will work closely with technology, data, legal, compliance, product, and business teams to embed security throughout the AI lifecycle, from initial concept and model development through deployment, monitoring, and retirement.

Key responsibilities include defining and maintaining AI security policies, standards, controls, and risk assessment methodologies; identifying threats relating to machine learning models, training data, applications, infrastructure, and third-party services; and overseeing appropriate safeguards against data leakage, prompt injection, model manipulation, unauthorised access, and adversarial attacks. You will establish security review processes for AI use cases, support secure architecture and development practices, coordinate vulnerability assessments and penetration testing, and monitor compliance with relevant legislation, industry standards, and internal requirements. The role will also contribute to incident response planning, security awareness, metrics, reporting, and continuous improvement of the organisation’s AI risk management framework.

The successful candidate will have substantial experience in information security, cybersecurity risk, or technology governance, together with a strong understanding of artificial intelligence and machine learning concepts. Experience securing cloud environments, APIs, data pipelines, software development processes, and enterprise applications is highly desirable. You should be confident translating complex technical risks into clear recommendations for senior stakeholders and balancing security requirements with innovation and delivery priorities. Relevant professional certifications in security, privacy, risk management, cloud, or audit are advantageous. Strong communication, analytical, influencing, and project management skills are essential, as is the ability to work independently while building effective partnerships across multidisciplinary teams.

We are seeking a Senior Engineer (Cybersecurity) to help protect critical systems, applications, networks and data against evolving cyber threats. In this role, you will design, implement and maintain robust security controls across cloud and on-premises environments, while supporting the development of secure, resilient and scalable technology solutions. You will work closely with infrastructure, software engineering, risk and compliance teams to embed security throughout the technology lifecycle.

Your responsibilities will include leading security engineering initiatives, conducting threat modelling and vulnerability assessments, and recommending practical measures to reduce risk. You will configure and optimise security tools such as SIEM, endpoint detection and response, identity and access management, vulnerability management and cloud security platforms. You will investigate and respond to security incidents, support root-cause analysis, and contribute to the development of playbooks, technical standards and security architecture patterns. The role will also involve reviewing designs and code for security weaknesses, automating security controls where possible, and providing technical guidance to engineers and project teams.

Applicants should have substantial experience in cybersecurity engineering, security operations or a closely related technical discipline, together with a strong understanding of networks, operating systems, cloud platforms, application security and modern defensive technologies. Experience with scripting or programming languages such as Python, PowerShell or Bash, as well as infrastructure-as-code and security automation, is highly desirable. You should be confident analysing complex security issues, communicating technical risks to both technical and non-technical audiences, and working effectively in a fast-changing environment. Relevant professional certifications, such as CISSP, GIAC, CCSP or equivalent, would be advantageous. A proactive approach, sound judgement, attention to detail and a commitment to continuous improvement are essential.

We are seeking an experienced Senior Security Architect to define and advance the security architecture across a complex technology environment. In this strategic role, you will shape secure-by-design principles, develop target-state architecture, and ensure that security controls support business objectives, regulatory obligations, and operational resilience. You will work closely with engineering, infrastructure, cloud, product, and risk teams to embed security throughout the design, delivery, and lifecycle management of technology services.

Your responsibilities will include developing and maintaining security architecture standards, principles, patterns, and reference models; reviewing solution designs and identifying risks, vulnerabilities, and control gaps; and providing practical recommendations that balance protection, usability, cost, and delivery timelines. You will contribute to cloud, network, application, identity, data, and endpoint security strategies, while supporting threat modelling, security reviews, risk assessments, and architecture governance. You will also help define security roadmaps, influence investment priorities, and promote consistent adoption of modern security practices across programmes and operational teams. The role will involve presenting complex technical matters to senior stakeholders and mentoring architects and engineers in secure design approaches.

Applicants should have substantial experience in security architecture, cybersecurity engineering, or a closely related discipline, together with a strong understanding of enterprise and cloud security principles. Experience designing controls across identity and access management, network security, application security, data protection, vulnerability management, and incident response is essential. You should be comfortable working with recognised frameworks and standards such as NIST, ISO 27001, CIS Controls, SABSA, or equivalent, and be able to translate risk into clear, actionable decisions. Relevant professional certifications, such as CISSP, CISM, CCSP, or a recognised security architecture qualification, are desirable. Strong communication, influencing, analytical, and stakeholder management skills are required, along with the ability to work independently in a fast-changing environment.