Job Search

We are seeking a Delivery Consultant specialising in security to help organisations design, implement and improve secure technology solutions. In this role, you will work closely with customers, delivery teams and technical stakeholders to understand business and security requirements, translate them into practical outcomes, and guide projects from planning through to successful completion. You will contribute to engagements across a range of industries and environments, helping customers strengthen their security posture while adopting modern cloud and digital technologies.

Key responsibilities include leading or supporting security-focused consulting engagements, developing architectures and implementation plans, assessing risks and control gaps, and advising on security best practices. You will help define identity and access management, data protection, network security, threat detection, vulnerability management, incident response and governance solutions. The role may also involve facilitating workshops, producing technical and executive-level documentation, delivering presentations, coordinating workstreams, and supporting remediation activities. You will be expected to manage priorities effectively, identify delivery risks, communicate progress clearly and build trusted relationships with stakeholders at all levels.

The successful candidate will have professional experience in security consulting, solution delivery, security engineering or a related technical discipline. You should have a strong understanding of security principles, risk management frameworks and common enterprise or cloud security controls, together with the ability to apply them in complex customer environments. Experience with security architecture, automation, compliance, secure development or cloud platforms is desirable. Relevant industry certifications are advantageous. Strong analytical, problem-solving and communication skills are essential, as is the ability to work independently and collaboratively in a fast-paced, customer-focused environment. A commitment to continuous learning and maintaining current knowledge of evolving threats, technologies and regulatory expectations will be important in this position.

We are seeking a skilled Penetration Tester to assess the security of applications, infrastructure, networks, cloud environments and connected systems. In this role, you will plan and conduct authorised security assessments, identify vulnerabilities and potential attack paths, and provide clear, evidence-based recommendations to improve the organisation’s security posture. You will work closely with security, engineering, infrastructure and technology teams to validate findings, support remediation activities and help reduce operational risk.

Your responsibilities will include defining testing scope and objectives, carrying out reconnaissance and vulnerability assessments, and performing manual and automated penetration testing across web applications, APIs, mobile platforms, internal and external networks, wireless environments and cloud services. You will document testing activity accurately, maintain appropriate evidence, assess the impact and exploitability of findings, and produce high-quality reports for both technical and non-technical audiences. You may also be required to support threat modelling, red team exercises, secure development initiatives, vulnerability management and retesting programmes. Clear communication and professional handling of sensitive information are essential.

Applicants should have practical experience in penetration testing or offensive security, with a strong understanding of common vulnerabilities, attack techniques and security frameworks. Experience with tools such as Burp Suite, Nmap, Metasploit, BloodHound, Wireshark or comparable platforms is expected, together with the ability to write scripts or develop lightweight tooling using languages such as Python, PowerShell, Bash or JavaScript. Relevant certifications, including OSCP, CREST, CRT, eJPT or equivalent, are desirable but not essential. You should demonstrate strong analytical and problem-solving skills, meticulous attention to detail, sound judgement and the ability to manage multiple assessments while meeting agreed deadlines.

We are seeking a Security Compliance Analyst to support the development, maintenance, and continuous improvement of information security and compliance programmes. The successful candidate will help ensure that business processes, technologies, and controls align with applicable laws, regulations, contractual obligations, and recognised security frameworks. This role is suited to an analytical professional who can work collaboratively with technical and non-technical stakeholders, communicate clearly, and take a practical approach to managing risk.

Key responsibilities will include monitoring compliance with internal security policies and external requirements; coordinating risk assessments, control testing, and remediation activities; maintaining evidence repositories and compliance documentation; and preparing clear reports for management and relevant stakeholders. You will support internal and external audits by gathering information, tracking requests, and following up on findings through to completion. The role will also involve reviewing access controls, vulnerability management processes, incident response arrangements, third-party security assessments, and business continuity controls. You may contribute to policy reviews, security awareness initiatives, control design, and the implementation of corrective and preventive actions.

Applicants should have experience in information security, IT audit, risk management, governance, or regulatory compliance, ideally within a technology-focused or regulated environment. Familiarity with frameworks and standards such as ISO 27001, NIST, SOC 2, PCI DSS, or applicable data protection legislation is desirable. Strong analytical, organisational, and documentation skills are essential, along with the ability to interpret requirements and translate them into practical actions. Experience using governance, risk, and compliance tools, audit platforms, or security monitoring solutions would be beneficial. Relevant qualifications such as CISA, CISM, CRISC, ISO 27001 training, or equivalent professional experience are welcomed. You should be able to manage competing priorities, challenge constructively, maintain confidentiality, and work effectively both independently and as part of a wider team.

We are seeking an experienced Domain Architect – IT Security to define and guide the security architecture across a complex technology environment. In this role, you will develop secure, scalable and resilient architecture principles, standards and reference models that support business strategy, regulatory obligations and evolving technology needs. You will work closely with enterprise architects, technology teams, product owners and senior stakeholders to ensure security is embedded throughout the design, delivery and operation of platforms, applications and services.

Your responsibilities will include assessing current and future security capabilities, identifying architectural risks and recommending practical improvements. You will create and maintain security architecture documentation, roadmaps, patterns and design decisions, while contributing to governance forums and architecture reviews. You will advise on cloud security, identity and access management, network security, data protection, application security, infrastructure security and security monitoring. The role will also involve reviewing solution designs, supporting risk assessments, helping define security controls and ensuring that projects align with relevant policies, standards and compliance requirements. You will promote consistent security-by-design practices and help translate complex technical risks into clear, actionable guidance for both technical and non-technical audiences.

You will bring substantial experience in IT security architecture, enterprise architecture or a closely related discipline, together with a strong understanding of modern infrastructure, cloud technologies, networking, operating systems, applications and information protection. Experience with recognised security frameworks, architecture methodologies, threat modelling and regulatory environments is highly desirable. Professional certifications such as CISSP, SABSA, CISM, TOGAF or equivalent would be advantageous. Strong analytical, communication and stakeholder-management skills are essential, along with the ability to influence decisions, balance security with business needs and operate effectively across multiple initiatives. A proactive, collaborative approach and commitment to continuous improvement will be key to success in this position.

We are seeking an experienced Managing Security Architect to lead the development and delivery of enterprise security architecture across a complex, evolving technology environment. In this senior role, you will define security strategies, principles, standards and reference architectures that support business objectives while protecting critical systems, data and services. You will work closely with technology, engineering, infrastructure, risk and business stakeholders to embed security by design throughout the organisation.

Your responsibilities will include establishing and maintaining the security architecture roadmap; assessing current and emerging technologies; identifying security risks and recommending proportionate controls; and overseeing the design of secure cloud, network, application, identity and data architectures. You will provide architectural governance, review major programmes and solution designs, and ensure that security requirements are clearly documented, traceable and aligned with regulatory obligations and industry best practice. The role will also involve leading threat modelling, supporting risk assessments, contributing to incident preparedness and promoting consistent security patterns across delivery teams.

You will bring significant experience in security architecture, enterprise architecture or a closely related discipline, together with a strong understanding of modern security principles and technologies. Practical expertise across areas such as cloud security, zero trust, identity and access management, application security, infrastructure protection, security operations and data security is essential. Experience leading architects or multidisciplinary teams, influencing senior stakeholders and translating complex technical risks into clear business outcomes is highly valued. Relevant professional certifications, such as CISSP, CISM, SABSA, TOGAF or cloud security credentials, would be advantageous. We are looking for a strategic and pragmatic leader who can balance innovation, usability and resilience while building strong security capabilities and a positive security culture.

We are seeking a Hardware and Firmware Security Research Engineer to investigate, assess, and improve the security of embedded platforms and connected devices. In this role, you will research vulnerabilities across hardware, boot processes, firmware, operating systems, interfaces, and supporting development tools. You will work throughout the product lifecycle, from early architecture and design reviews through implementation, testing, deployment, and remediation. The position offers the opportunity to combine practical experimentation with rigorous technical analysis in a fast-moving security environment.

Your responsibilities will include performing penetration testing, vulnerability research, reverse engineering, binary analysis, and fault-injection or side-channel investigations where appropriate. You will develop proof-of-concept exploits, scripts, test harnesses, and custom tooling to validate security findings and assess their practical impact. You will analyse secure-boot mechanisms, cryptographic implementations, debug interfaces, update processes, memory protections, trusted execution environments, and common embedded communication protocols. You will also review source code, firmware images, schematics, and design documentation; define security test plans; document findings clearly; and work with engineering teams to recommend effective mitigations and verify fixes.

The successful candidate will have professional or research experience in hardware, embedded, firmware, or product security, together with strong knowledge of low-level software and computer architecture. Experience with C or C++, Python, assembly, Linux, microcontrollers, RTOS environments, and debugging or disassembly tools is highly desirable. Familiarity with tools such as JTAG, UART, logic analysers, oscilloscopes, Ghidra, IDA Pro, or equivalent platforms would be beneficial. You should be comfortable working independently, communicating complex technical issues to varied audiences, and maintaining high standards of ethical and responsible disclosure. A degree in computer science, electrical engineering, cybersecurity, or a related discipline is useful, though demonstrable practical expertise will also be valued.

We are seeking an experienced Lead Pentester to guide and deliver high-quality penetration testing and offensive security engagements across web applications, APIs, mobile platforms, cloud environments, networks, and infrastructure. You will lead assessments from scoping and threat modelling through testing, evidence collection, reporting, and client readouts. The role combines hands-on technical work with leadership, requiring you to set testing standards, review findings, mentor consultants, and ensure all engagements are delivered to a consistently high professional standard.

Your responsibilities will include developing test plans and attack scenarios, identifying and validating vulnerabilities, assessing business impact, and producing clear, actionable reports for both technical and non-technical audiences. You will coordinate with internal stakeholders and client teams, communicate risks and remediation priorities, and support retesting activities. You will also contribute to improving methodologies, tooling, automation, quality assurance processes, and internal knowledge-sharing initiatives. Where appropriate, you may assist with proposals, technical scoping, presentations, and the development of new offensive security services.

Applicants should have substantial professional penetration testing experience and a strong understanding of common application, network, cloud, identity, and operating-system vulnerabilities. Practical expertise with tools such as Burp Suite, Nmap, Metasploit, scripting languages, and cloud security platforms is expected, alongside the ability to perform manual testing beyond automated scanner results. Relevant certifications such as OSCP, OSWE, OSEP, CREST, or equivalent experience are desirable. You should be confident leading projects, coaching others, managing competing priorities, and explaining complex security issues clearly. Strong written and verbal communication, sound judgement, curiosity, and a methodical approach are essential. Experience with recognised testing standards and frameworks, including OWASP, PTES, and NIST, would be advantageous.

We are seeking an experienced IT Security Subject Matter Expert to provide specialist guidance across the design, implementation and continual improvement of information security controls. The role will support the protection of systems, networks, applications and data by translating security requirements into practical solutions and advising technical and business stakeholders on risk-based decisions.

Key responsibilities include assessing security risks, reviewing technical designs, and recommending appropriate controls across areas such as identity and access management, network security, cloud platforms, endpoint protection, vulnerability management and security monitoring. You will contribute to security policies, standards and procedures; support audits and compliance activities; and help ensure that regulatory, contractual and internal security requirements are understood and met. The role will also provide expert input into incident response, investigations, remediation planning and lessons-learned activities. You may be required to review third-party security arrangements, support security architecture decisions, and assist with the delivery of awareness and knowledge-sharing initiatives.

The successful candidate will have substantial experience in IT security, information assurance or a related technical discipline, with a strong understanding of security frameworks, risk management principles and industry best practice. Practical experience in areas such as ISO 27001, NIST, CIS Controls, cloud security, vulnerability assessment, penetration testing or security operations would be advantageous. Relevant professional certifications, such as CISSP, CISM, CRISC, SABSA or equivalent, are desirable. You should be able to communicate complex technical matters clearly to both specialist and non-specialist audiences, influence decision-making, and work effectively across multiple teams. Strong analytical, problem-solving and organisational skills are essential, along with a proactive approach and a commitment to maintaining current knowledge of emerging threats and technologies.

We are seeking a Mobile Security Engineer to help protect mobile applications, services, and supporting infrastructure throughout the software development lifecycle. You will work closely with mobile developers, platform engineers, product teams, and security specialists to identify risks, strengthen security controls, and promote secure engineering practices across iOS and Android environments.

Your responsibilities will include conducting security assessments, threat modelling, code reviews, and penetration testing of mobile applications and APIs. You will analyse vulnerabilities, validate findings, recommend practical remediation, and support teams in resolving issues to an appropriate standard. You will also help develop secure coding guidance, security testing procedures, and automated checks integrated into CI/CD pipelines. The role will involve monitoring emerging mobile threats, reviewing third-party libraries and SDKs, assessing authentication and data-protection mechanisms, and contributing to incident investigations where mobile platforms or services are affected. Clear documentation and communication of technical risks to both technical and non-technical stakeholders will be an important part of the position.

The successful candidate will have professional experience in mobile application security, application security, penetration testing, or a closely related discipline. Strong knowledge of iOS and/or Android security models, secure storage, cryptography, authentication protocols, networking, and API security is required. Experience with tools for mobile application analysis, debugging, reverse engineering, and vulnerability assessment is expected, along with familiarity with programming or scripting languages such as Swift, Objective-C, Kotlin, Java, Python, or JavaScript. Knowledge of OWASP Mobile Application Security, secure SDLC practices, and cloud-based mobile backends would be advantageous. Relevant professional certifications are welcome but not essential. You should be analytical, collaborative, detail-oriented, and able to explain complex security issues clearly while balancing risk, usability, and delivery priorities.

We are seeking an IT & Security Analyst to support the secure, reliable and efficient operation of technology services across the organisation. This role will combine day-to-day IT support with security monitoring, risk management and continuous improvement. You will work with colleagues and service providers to investigate issues, protect systems and data, and help ensure that technology services meet operational and compliance requirements.

Key responsibilities will include monitoring security alerts, investigating potential incidents and escalating threats in line with established procedures. You will maintain endpoint protection, identity and access controls, vulnerability management activities, security documentation and asset records. The role will also involve responding to user support requests, troubleshooting hardware, software and connectivity problems, managing accounts and permissions, and assisting with the implementation and maintenance of IT systems. You will contribute to security awareness activities, backup and recovery checks, audit preparation, policy reviews and the development of practical improvements to IT and security processes.

Applicants should have experience in IT support, systems administration, cybersecurity operations or a related environment, together with a sound understanding of networking, operating systems, cloud services, Microsoft 365 or comparable platforms, and common security principles. Familiarity with incident response, endpoint management, vulnerability scanning, access management and security frameworks would be advantageous. Relevant professional certifications are welcome but not essential. You will need strong analytical and problem-solving skills, careful attention to detail, clear written and verbal communication, and the ability to prioritise competing tasks. A proactive, collaborative approach and a commitment to confidentiality, data protection and continuous learning are essential. This is an opportunity to play a key role in strengthening technology resilience while providing dependable support to users.