Job Search

We are seeking a strategic and technically accomplished DevSecOps Architect – Director to define and lead the evolution of secure, scalable software delivery across a complex technology environment. This senior role will establish the vision, architecture, standards and operating model for integrating security throughout the software development lifecycle, while enabling engineering teams to deliver reliable products at speed. You will partner with technology, product, infrastructure, risk and compliance leaders to align DevSecOps capabilities with business priorities and enterprise objectives.

Responsibilities will include designing and governing cloud-native DevSecOps architectures; developing reference patterns for continuous integration, continuous delivery, infrastructure as code, containerisation and automated security testing; and embedding security controls across source code, dependencies, build pipelines, infrastructure and runtime environments. You will lead the adoption of tools and practices for vulnerability management, secrets management, identity and access control, policy as code, software supply-chain security, observability and compliance automation. The role will also establish engineering standards, metrics and governance processes, guide platform and security architecture decisions, and oversee the delivery of strategic transformation programmes. You will mentor architects and engineering leaders, influence senior stakeholders, and promote a culture of shared ownership for security and operational excellence.

Applicants should bring extensive experience in DevOps, DevSecOps, cloud architecture or software engineering leadership, including significant responsibility for enterprise-scale transformation. Strong knowledge of at least one major public cloud platform, Kubernetes or comparable container platforms, CI/CD technologies, infrastructure as code and modern application security practices is essential. You should be comfortable working with security frameworks, regulatory requirements and risk management principles, and able to translate complex technical issues into clear business outcomes. Excellent communication, stakeholder management, strategic planning and people leadership skills are required, together with a pragmatic approach to balancing security, resilience, delivery speed and cost. Relevant professional certifications in cloud, security, architecture or agile delivery would be advantageous.

We are seeking an experienced Enterprise Identity & Access Management Architect to design, develop and govern secure, scalable identity services across a complex enterprise environment. You will define the strategic IAM architecture, align it with business and security objectives, and provide technical leadership across identity governance, privileged access, authentication, authorisation and directory services. This is an influential role requiring close collaboration with security, infrastructure, applications, risk, compliance and business stakeholders.

Key responsibilities include developing IAM roadmaps, reference architectures, standards and design patterns; shaping solutions for workforce, customer and machine identities; and leading the implementation of modern capabilities such as single sign-on, multi-factor authentication, role-based and attribute-based access control, federation, lifecycle automation and zero-trust principles. You will assess existing technologies, identify opportunities for simplification and improvement, and ensure solutions integrate effectively with cloud platforms, enterprise applications, directories and security tooling. The role will also involve reviewing designs, supporting technology selection, managing architectural risks and ensuring alignment with relevant regulatory, privacy and information-security requirements.

To succeed, you will bring significant experience in enterprise IAM architecture and a strong understanding of identity governance, access certification, privileged access management, authentication protocols and directory technologies. You should have practical knowledge of standards and technologies such as SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP and modern cloud identity services, together with experience delivering IAM solutions in large or highly regulated environments. Strong communication and stakeholder-management skills are essential, as is the ability to translate complex technical concepts into clear recommendations for both technical and non-technical audiences. Relevant industry certifications in security, architecture or identity management are desirable. You will be analytical, pragmatic and delivery-focused, with the confidence to influence decisions and promote secure, consistent and user-friendly access across the enterprise.

We are seeking a Senior Vehicle Security Engineer to lead the development and integration of cybersecurity solutions for modern connected and automated vehicles. In this role, you will help define secure vehicle architectures, protect embedded systems and electronic control units, and ensure that security is considered throughout the product lifecycle, from early concept and design through validation, production, and post-production support. You will work closely with systems, software, electrical, safety, manufacturing, and compliance teams to identify risks and deliver practical, robust security solutions.

Your responsibilities will include conducting threat analysis and risk assessments, defining cybersecurity goals and technical requirements, and developing security concepts for in-vehicle networks, communication interfaces, cloud connectivity, mobile applications, and diagnostic functions. You will review system and software designs, guide the implementation of security controls, and support secure boot, key management, authentication, encryption, intrusion detection, access control, and over-the-air update strategies. You will also plan and assess security verification activities, investigate vulnerabilities, support incident response, and contribute to continuous improvement of security processes and engineering standards.

The successful candidate will have substantial experience in automotive cybersecurity, embedded systems security, product security, or a closely related engineering discipline. Strong knowledge of vehicle architectures, CAN, automotive Ethernet, diagnostics, wireless technologies, and common attack methods is required. Experience with threat modelling, penetration testing, vulnerability management, and standards such as ISO/SAE 21434, UNECE R155/R156, ISO 24089, or equivalent frameworks is highly desirable. You should be comfortable translating complex technical risks into clear recommendations for varied audiences and influencing decisions across multidisciplinary teams. A relevant degree, excellent analytical and communication skills, and a proactive, collaborative approach are expected.

We are seeking an experienced Head of Department, Cyber & Information Resilience to lead the development and delivery of a comprehensive cyber security, information resilience and operational continuity capability. This senior role will provide strategic direction across cyber risk management, information assurance, technology resilience, incident response and business continuity, ensuring that critical services, data and infrastructure remain secure and available in a constantly evolving threat landscape.

You will lead a multidisciplinary team and establish clear governance, policies, standards and assurance frameworks aligned with relevant regulatory obligations and recognised industry practices. Responsibilities will include identifying and managing cyber and information risks; overseeing vulnerability management, security monitoring and incident response; coordinating business continuity and disaster recovery planning; and ensuring that resilience requirements are embedded across programmes, suppliers, systems and operational processes. You will lead the response to significant cyber or information incidents, provide clear reporting to senior stakeholders, and drive continuous improvement through testing, lessons learned, metrics and assurance activity. The role will also involve managing budgets, developing capability, and building strong relationships with technical, operational, risk, compliance and executive teams.

Applicants should have substantial senior-level experience in cyber security, information resilience, technology risk, business continuity or a closely related discipline, together with a proven record of leading teams and delivering organisation-wide change. You will bring strong knowledge of cyber security principles, risk management, incident management, disaster recovery, regulatory expectations and relevant frameworks such as ISO 27001, ISO 22301 or NIST. Excellent communication, influencing and decision-making skills are essential, as is the ability to translate complex technical and risk issues into clear, practical advice for varied audiences. Professional qualifications in cyber security, information assurance, risk, resilience or related fields are desirable. A strategic outlook, calm approach under pressure, and commitment to developing a strong culture of security and resilience are key to success.

We are seeking an experienced Head of Information Security to lead the development and execution of a comprehensive security strategy across the organisation. This is a senior leadership role responsible for protecting information assets, technology platforms, and business operations while enabling secure growth and innovation. You will provide clear direction on information security, cyber risk, governance, and resilience, working closely with executive stakeholders and technology leaders to ensure security is embedded into business decision-making.

Key responsibilities will include defining and maintaining the information security strategy, policies, standards, and operating model; overseeing risk assessment and treatment; and ensuring compliance with relevant legal, regulatory, and industry requirements. You will lead security monitoring, incident response, vulnerability management, identity and access management, security architecture, and third-party risk oversight. The role will also involve developing business continuity and disaster recovery capabilities, coordinating responses to significant security incidents, and providing regular risk reporting and assurance to senior leadership. You will manage security budgets, suppliers, and specialist teams, while promoting a strong culture of security awareness throughout the organisation.

The successful candidate will have substantial experience leading information security or cyber security functions, ideally within a complex, regulated, or technology-driven environment. You will bring strong knowledge of recognised security frameworks and standards, risk management, data protection, cloud security, and incident management. Relevant professional certifications such as CISSP, CISM, CRISC, or equivalent experience are desirable. Excellent communication and influencing skills are essential, as is the ability to translate technical risks into clear business priorities. You should be commercially aware, pragmatic, and confident operating at both strategic and operational levels, with a collaborative leadership style and a commitment to continuous improvement.

We are seeking a Staff Product Security Engineer to help build secure, resilient products from design through deployment and beyond. In this influential role, you will partner closely with product, engineering, infrastructure, and operations teams to embed security into the software development lifecycle. You will help define security strategy, establish scalable processes, and guide teams in identifying and addressing risks across applications, services, APIs, cloud environments, and supporting platforms.

Your responsibilities will include leading threat modelling and architecture reviews, assessing security implications of new features and technical designs, and providing practical recommendations that balance risk, usability, and delivery timelines. You will develop and improve secure coding standards, security requirements, developer guidance, and automated controls. You will also support vulnerability management, security testing, incident response, and remediation tracking, while helping teams understand root causes and prevent recurring issues. As a senior technical contributor, you will influence security roadmaps, mentor engineers, contribute to tooling and automation, and represent product security in cross-functional planning and technical forums.

We are looking for substantial experience in application, product, or software security, with a strong understanding of secure software development, threat modelling, vulnerability assessment, and cloud security principles. You should be comfortable reviewing code and architecture, communicating complex technical risks to varied audiences, and influencing outcomes without relying on formal authority. Experience with security automation, CI/CD pipelines, modern application frameworks, identity and access management, containers, or infrastructure as code is valuable. The successful candidate will combine deep technical judgement with pragmatism, curiosity, strong written and verbal communication, and a commitment to enabling engineering teams to build secure products efficiently.

We are seeking an experienced DevSecOps and Test Automation Architect to shape and deliver secure, scalable, and highly automated technology solutions within the financial services sector. This role will define engineering standards across software delivery, quality assurance, security, and operational resilience, helping teams adopt modern practices while meeting stringent regulatory and risk requirements. You will work closely with technology, product, architecture, risk, compliance, and infrastructure stakeholders to establish a consistent approach to secure software development and continuous delivery.

Key responsibilities will include designing and implementing DevSecOps strategies, CI/CD pipelines, automated testing frameworks, and quality gates across the software development lifecycle. You will develop automation approaches for functional, integration, API, performance, security, and regression testing, while promoting shift-left quality and security practices. The role will also involve assessing current delivery processes, identifying opportunities for improvement, defining reusable patterns and tooling, and supporting the integration of automated controls into cloud and on-premises environments. You will provide technical leadership, mentor engineering and testing teams, contribute to architecture decisions, and ensure solutions align with enterprise standards, data protection obligations, audit expectations, and operational risk controls.

Applicants should have substantial experience in DevSecOps, test automation, software engineering, or technical architecture within a regulated or complex enterprise environment, ideally financial services. Strong knowledge of CI/CD platforms, version control, infrastructure as code, cloud technologies, containers, API testing, automated quality engineering, and security testing is expected. Experience with tools such as Git, Jenkins, Azure DevOps, GitLab, Selenium, Playwright, REST-assured, SonarQube, SAST/DAST platforms, and container security solutions would be advantageous. You should be confident working with multiple delivery teams, communicating complex technical concepts to varied audiences, and influencing change without direct authority. A pragmatic, collaborative approach and a commitment to continuous improvement are essential.

We are seeking a Delivery Consultant specialising in security to help organisations design, implement and improve secure technology solutions. In this role, you will work closely with customers, delivery teams and technical stakeholders to understand business and security requirements, translate them into practical outcomes, and guide projects from planning through to successful completion. You will contribute to engagements across a range of industries and environments, helping customers strengthen their security posture while adopting modern cloud and digital technologies.

Key responsibilities include leading or supporting security-focused consulting engagements, developing architectures and implementation plans, assessing risks and control gaps, and advising on security best practices. You will help define identity and access management, data protection, network security, threat detection, vulnerability management, incident response and governance solutions. The role may also involve facilitating workshops, producing technical and executive-level documentation, delivering presentations, coordinating workstreams, and supporting remediation activities. You will be expected to manage priorities effectively, identify delivery risks, communicate progress clearly and build trusted relationships with stakeholders at all levels.

The successful candidate will have professional experience in security consulting, solution delivery, security engineering or a related technical discipline. You should have a strong understanding of security principles, risk management frameworks and common enterprise or cloud security controls, together with the ability to apply them in complex customer environments. Experience with security architecture, automation, compliance, secure development or cloud platforms is desirable. Relevant industry certifications are advantageous. Strong analytical, problem-solving and communication skills are essential, as is the ability to work independently and collaboratively in a fast-paced, customer-focused environment. A commitment to continuous learning and maintaining current knowledge of evolving threats, technologies and regulatory expectations will be important in this position.

We are seeking an experienced Application Security Lead to strengthen security across the software development lifecycle and help build secure, resilient digital products. In this role, you will define and implement application security strategies, standards and practices across development teams, while acting as a trusted advisor on secure design, coding and delivery. You will work closely with engineering, architecture, product and infrastructure colleagues to embed security by design and ensure that risks are identified and managed effectively.

Your responsibilities will include leading threat modelling, secure architecture reviews, code analysis, penetration testing and vulnerability management activities. You will establish practical security requirements, improve application security tooling and processes, and support teams in remediating vulnerabilities within agreed timeframes. You will also contribute to security incident investigations, maintain risk and compliance reporting, and provide clear guidance on emerging threats, regulatory expectations and industry best practice. A key part of the role will be promoting security awareness through coaching, technical workshops and knowledge-sharing across the engineering community.

The successful candidate will have substantial experience in application security, software development or a closely related field, with a strong understanding of secure software development methodologies and common vulnerabilities such as those identified by OWASP. You will be comfortable working with cloud environments, APIs, CI/CD pipelines, source-code repositories and security testing tools. Relevant professional certifications are desirable, alongside experience leading security initiatives in complex technical environments. Strong communication, influencing and problem-solving skills are essential, as is the ability to balance robust security controls with business and delivery objectives. This is an opportunity to shape application security practices, support talented technical teams and make a measurable impact on the security of critical services.

We are seeking a Security Engineer, Incident Response to help protect critical systems, applications, and data from evolving cyber threats. In this role, you will investigate security alerts and incidents, coordinate effective containment and remediation, and help strengthen the organisation’s overall detection and response capabilities. You will work closely with security operations, infrastructure, engineering, application, and business teams to manage incidents from initial triage through recovery and post-incident review.

Your responsibilities will include monitoring and analysing alerts from endpoint, network, identity, cloud, and application security tools; conducting forensic investigations; identifying attack techniques, indicators of compromise, and root causes; and maintaining clear, timely incident documentation. You will develop and improve playbooks, procedures, and automation to increase response speed and consistency. The role will also involve supporting threat hunting, vulnerability remediation, security control validation, tabletop exercises, and lessons-learned activities. You may participate in an on-call rotation and provide clear updates to technical and non-technical stakeholders during high-impact events.

The successful candidate will have professional experience in incident response, security operations, digital forensics, or a closely related discipline, along with a strong understanding of common attack methods, intrusion analysis, and incident lifecycle management. Experience with SIEM, EDR, cloud security, identity platforms, network analysis, scripting, and security automation is highly desirable. You should be comfortable analysing complex technical information, making sound decisions under pressure, and communicating clearly in writing and verbally. Familiarity with frameworks such as MITRE ATT&CK, NIST, or CIS is beneficial. Relevant certifications in security, incident response, cloud, or digital forensics are welcomed, but practical capability, curiosity, and a commitment to continuous learning are equally valued.