Job Search

We are seeking a Cloud Security Control Engineer to help design, implement and continuously improve security controls across cloud environments. The role will support the protection of infrastructure, applications, data and services by translating security policies and regulatory requirements into practical, measurable controls. You will work closely with cloud engineering, architecture, risk, compliance and operations teams to ensure that security is embedded throughout the technology lifecycle.

Key responsibilities include developing and maintaining cloud security control frameworks, standards and technical requirements; assessing cloud services and architectures for security risks; and supporting the implementation of identity and access management, network security, encryption, logging, monitoring, vulnerability management and configuration controls. You will define control objectives, create evidence requirements, monitor control effectiveness and coordinate remediation activity where gaps are identified. The role will also contribute to security reviews, audit preparation, risk assessments, incident investigations and continuous improvement initiatives. You may be expected to automate control testing and compliance reporting using cloud-native tools, scripting and infrastructure-as-code techniques.

The successful candidate will have experience in cloud security engineering, security governance or technology risk, with a strong understanding of major cloud platforms and their associated security services. Knowledge of recognised security frameworks and standards, such as ISO 27001, NIST, CIS Benchmarks or SOC 2, is highly desirable. You should be comfortable interpreting technical and regulatory requirements, documenting controls clearly and communicating risk to both technical and non-technical stakeholders. Experience with security information and event management, configuration management, vulnerability scanning, DevSecOps or policy-as-code would be advantageous. Relevant professional certifications in cloud, cybersecurity, audit or risk are welcome. We are looking for someone analytical, collaborative and proactive, with strong attention to detail and the ability to manage competing priorities in a changing environment.

We are seeking a Security Engineer (Contractor) to support the design, implementation and continuous improvement of secure technology environments. The successful candidate will work across infrastructure, cloud, applications and operational teams to identify security risks, implement effective controls and help maintain resilience against evolving threats. This is a hands-on contract role suited to an engineer who can work independently, communicate clearly and deliver practical security outcomes within agreed timelines.

Key responsibilities will include monitoring and investigating security events, supporting incident response activities and conducting vulnerability assessments across systems and applications. You will configure and maintain security technologies such as endpoint protection, identity and access management, firewalls, intrusion detection, logging and security information and event management platforms. The role will also involve reviewing system and network designs, recommending improvements, assisting with penetration testing and remediation, and contributing to secure cloud and infrastructure deployments. You will document technical findings, maintain security procedures and provide clear reports and risk-based recommendations to relevant stakeholders.

Applicants should have demonstrable experience in a security engineering, infrastructure security or similar technical role, ideally within complex enterprise or cloud environments. Strong knowledge of network security, operating systems, identity controls, vulnerability management, security monitoring and incident handling is required. Experience with scripting or automation, security frameworks and tools such as SIEM, EDR, vulnerability scanners and cloud-native security services would be advantageous. Relevant professional certifications are welcome but not essential. You should be analytical, detail-oriented and comfortable prioritising work in a changing environment, with the ability to explain technical issues to both specialist and non-specialist audiences. The contract requires a proactive approach, sound judgement and a strong commitment to confidentiality, secure working practices and continuous improvement.

We are seeking an experienced IAM Security Engineer to support the design, implementation and operation of secure identity and access management services across cloud and hybrid environments. This is a contract opportunity based in either London or Belfast, with hybrid working arrangements available. You will join a security-focused engineering function responsible for protecting users, systems and data through robust authentication, authorisation and privileged access controls.

The role will focus on administering and enhancing Microsoft Active Directory and AWS identity services, including AWS IAM, AWS Managed Microsoft AD and federated access solutions. Key responsibilities will include creating and maintaining identity policies, roles, groups and permissions; managing joiner, mover and leaver processes; implementing least-privilege access models; supporting single sign-on and multi-factor authentication; and investigating access-related incidents. You will also contribute to access reviews, privileged account management, audit preparation, security monitoring and the development of automation to improve consistency and reduce manual effort. Collaboration with infrastructure, cloud, application and risk teams will be essential, as will the ability to document technical solutions and communicate recommendations clearly.

Applicants should have strong hands-on experience with AWS IAM and Microsoft Active Directory in enterprise or complex hybrid environments. You will need a sound understanding of identity federation, SAML or OpenID Connect, LDAP, Kerberos, MFA, role-based access control, policy evaluation and security best practice. Experience with infrastructure as code, scripting or automation using tools such as PowerShell, Python, Terraform or AWS CloudFormation would be highly beneficial. Familiarity with identity governance, privileged access management, SIEM platforms, security frameworks and cloud compliance requirements is also desirable. The successful contractor will be analytical, dependable and comfortable working independently while managing priorities in a fast-moving environment. A relevant security or cloud certification, such as AWS Security, Microsoft Identity and Access Administrator or CISSP, would be advantageous.

We are seeking an experienced Senior Technical Delivery Manager to lead the successful delivery of complex IT and security initiatives on a 12-month fixed-term contract. This role will oversee programmes from inception through to implementation, ensuring that projects are delivered on time, within budget and to agreed quality standards. You will work across technology, information security, infrastructure, risk, compliance and business teams to coordinate priorities and deliver outcomes aligned with organisational objectives.

Key responsibilities will include establishing delivery plans, milestones, governance structures, budgets, dependencies and resource requirements; managing risks, issues and change control; and providing clear, concise reporting to senior stakeholders and programme governance forums. You will coordinate internal teams and third-party suppliers, ensure delivery activities comply with relevant security and regulatory requirements, and support the implementation of robust controls, processes and technical solutions. The role will also involve facilitating workshops, removing delivery obstacles, maintaining accurate documentation and promoting consistent Agile, hybrid or structured project management practices across the portfolio.

To succeed, you will have substantial experience delivering complex technology and/or cyber security programmes within a regulated, highly controlled or enterprise environment. You will be confident managing multiple workstreams, budgets and suppliers, with a strong understanding of IT infrastructure, cloud, identity and access management, data protection, vulnerability management, security operations or related disciplines. Excellent stakeholder management and communication skills are essential, including the ability to translate technical information for non-technical audiences and influence at senior level. Experience with recognised delivery frameworks and tools, together with relevant qualifications such as PRINCE2, Agile, MSP, PMP or equivalent, would be advantageous. You should be highly organised, commercially aware, pragmatic and comfortable operating in a fast-paced environment where priorities may change.

We are seeking a CyberArk Security Engineer to design, implement, and maintain privileged access management solutions across a complex enterprise environment. You will be responsible for administering and enhancing CyberArk components, including the Digital Vault, Central Policy Manager, Privileged Session Manager, Password Vault Web Access, and associated connectors. The role involves onboarding privileged accounts, developing and maintaining access policies, configuring secure authentication methods, and ensuring that privileged credentials are protected throughout their lifecycle.

You will work closely with infrastructure, cloud, application, network, and security teams to identify privileged access requirements and deliver secure, scalable solutions. Key responsibilities include managing account discovery and reconciliation, troubleshooting session connectivity and password rotation issues, supporting integrations with directories, SIEM platforms, ticketing systems, and enterprise applications, and monitoring the health and performance of the CyberArk platform. You will also contribute to access reviews, audit activities, incident investigations, vulnerability remediation, disaster recovery testing, and the continuous improvement of privileged access processes.

The successful candidate will have hands-on experience with CyberArk administration and a strong understanding of privileged access management, identity security, authentication, and security principles. Experience with CyberArk certification, enterprise directory services, Windows and Linux administration, scripting such as PowerShell, and cloud platforms is highly desirable. You should be comfortable analysing technical problems, documenting solutions, managing change through formal processes, and communicating effectively with both technical and non-technical stakeholders. A proactive approach, strong attention to detail, and a commitment to security best practices are essential for success in this role.

We are seeking a Data Protection Engineer to help design, implement and maintain secure, resilient solutions that protect personal and sensitive information across enterprise systems. You will work closely with information security, infrastructure, software engineering, legal and compliance teams to translate data protection principles into practical technical controls. The role will contribute to the development of privacy-enhancing technologies, secure data flows and effective governance processes throughout the information lifecycle.

Your responsibilities will include assessing systems and processing activities for privacy and security risks; implementing encryption, pseudonymisation, tokenisation, access controls and data loss prevention measures; and supporting the secure design of applications, platforms and integrations. You will develop and maintain technical standards, policies and procedures relating to data protection, retention, deletion and secure data handling. You will also monitor control effectiveness, investigate potential data incidents, support impact assessments and audits, and help coordinate remediation activities. Clear documentation, accurate reporting and the ability to explain technical risks to non-technical stakeholders will be essential.

Applicants should have professional experience in data protection engineering, information security, privacy technology, cloud security or a closely related discipline. Strong knowledge of security architecture, identity and access management, encryption, vulnerability management and data governance is required. Experience with cloud platforms, security monitoring tools, automated compliance controls, databases and scripting languages such as Python, PowerShell or Bash would be advantageous. Familiarity with privacy and data protection legislation, recognised security frameworks and secure software development practices is also desirable. You should be analytical, collaborative and comfortable managing multiple priorities in a changing environment. Relevant qualifications in cybersecurity, information technology, data privacy or engineering, together with industry certifications, would be welcomed.

We are seeking an experienced Business Analyst to support cyber controls and compliance activities on a contract basis. The successful candidate will work with cybersecurity, technology, risk, audit and business stakeholders to understand regulatory obligations, assess control effectiveness and help strengthen the organisation’s overall control environment. This role is suited to someone who can translate complex security and compliance requirements into practical, clearly documented processes and actionable improvements.

Key responsibilities will include gathering and analysing business and control requirements; documenting current and future-state processes; mapping controls to relevant policies, standards and regulatory frameworks; and identifying gaps, risks, dependencies and opportunities for improvement. You will support control testing and remediation tracking, maintain accurate evidence and compliance records, and prepare clear reports for governance forums and senior stakeholders. The role will also involve coordinating with control owners, assisting with audit and assurance requests, monitoring remediation activities, and helping ensure that agreed actions are delivered within required timeframes. You may contribute to the development of procedures, risk assessments, management information and continuous improvement initiatives across cyber security and technology environments.

Applicants should have proven experience as a Business Analyst, ideally within cybersecurity, information security, technology risk, governance or regulatory compliance. Strong knowledge of cyber controls, risk management principles, audit processes and control frameworks such as ISO 27001, NIST, COBIT or similar is highly desirable. You will need excellent analytical, documentation and stakeholder-management skills, with the ability to communicate effectively with both technical and non-technical audiences. Experience using GRC, workflow, risk or reporting tools, together with a structured approach to managing multiple priorities, will be advantageous. The contract requires someone who is organised, collaborative, detail-focused and confident working independently in a changing environment.

We are seeking a Security & Network Engineer for a 12-month fixed-term assignment. This role will support the design, implementation, monitoring and continuous improvement of secure, reliable network and technology environments. You will work closely with infrastructure, applications, service delivery and information security teams to ensure systems remain resilient, compliant and fit for purpose.

Key responsibilities will include managing and maintaining network infrastructure such as switches, routers, firewalls, wireless services, VPNs and related security technologies. You will monitor network performance and security events, investigate incidents, respond to vulnerabilities and contribute to remediation activities. The role will also involve administering access controls, supporting identity and authentication services, reviewing firewall rules, maintaining technical documentation and assisting with security audits, risk assessments and compliance reporting. You will participate in incident, problem and change management processes, including planned maintenance, upgrades and technology projects.

The successful candidate will have practical experience in network engineering and cyber security operations, with a strong understanding of TCP/IP, routing and switching, firewalls, intrusion prevention, secure remote access and network monitoring. Experience with cloud networking, endpoint or vulnerability management, security information and event management platforms, and relevant automation or scripting would be advantageous. You will bring strong analytical and troubleshooting skills, sound judgement and the ability to communicate technical information clearly to both technical and non-technical stakeholders. Industry certifications in networking or security are desirable, along with experience working in structured IT service environments. This is an opportunity to contribute to meaningful security and infrastructure improvements while supporting dependable technology services throughout the assignment.

We are seeking an experienced SC Cleared Security Architect for a remote contract opportunity, operating outside IR35. The successful candidate will provide security architecture expertise across complex technology and business change programmes, helping to ensure that solutions are secure, resilient, compliant and aligned with organisational risk appetite. You will work with technical and business stakeholders to define practical security strategies and translate requirements into clear, implementable designs.

Responsibilities will include developing and maintaining security architectures, principles, patterns and standards; conducting threat, risk and impact assessments; and producing high-quality security documentation for design reviews and governance forums. You will assess proposed solutions across areas such as cloud, infrastructure, applications, networks, identity and access management, data protection and operational resilience. The role will also involve reviewing third-party and supplier designs, identifying control gaps, recommending appropriate mitigations, and supporting the delivery of secure-by-design outcomes throughout the technology lifecycle.

Applicants should have proven experience in security architecture within complex or highly regulated environments, together with current UK Security Check (SC) clearance. You will need a strong understanding of security frameworks, risk management, governance and relevant industry standards, as well as practical knowledge of cloud security, secure solution design, identity and access controls, vulnerability management and data security. Excellent communication and stakeholder management skills are essential, with the ability to explain complex risks clearly to both technical and non-technical audiences. Relevant professional certifications such as CISSP, SABSA, TOGAF, CISM or cloud security qualifications would be advantageous. This is a remote contract engagement, with occasional attendance at client or project locations where required.

We are seeking a Data Security Analyst to help protect sensitive information, systems and services across a complex technology environment. The successful candidate will monitor security events, investigate alerts and support the identification, assessment and resolution of potential threats. You will work closely with technology, risk and business teams to strengthen data protection controls and promote secure working practices across the organisation.

Key responsibilities will include analysing security logs and monitoring tools, conducting initial incident triage, escalating suspected breaches and supporting investigations through to resolution. You will assist with vulnerability assessments, access reviews, security testing and risk assessments, ensuring that findings are clearly documented and tracked to completion. The role will also involve maintaining security procedures, contributing to incident response plans, preparing management reports and helping ensure compliance with relevant data protection, information security and regulatory requirements. You may also support the development of data classification, retention and handling standards, as well as delivering guidance and awareness activities to colleagues.

Applicants should have experience in data security, information security, cyber security operations, risk or a related discipline, with a practical understanding of security monitoring, incident management and common security controls. Familiarity with SIEM platforms, endpoint protection, vulnerability management tools, identity and access management, and cloud security concepts would be advantageous. Strong analytical and problem-solving skills are essential, together with the ability to interpret technical information, identify patterns and communicate findings clearly to both technical and non-technical audiences. Relevant professional qualifications or certifications are welcomed, although equivalent practical experience will be considered. You should be organised, curious and capable of handling confidential information with discretion while managing multiple priorities in a collaborative environment.