Job Search

We are seeking an IT Security and Infrastructure Analyst to support the secure, reliable and efficient operation of a modern technology environment. This role will combine infrastructure administration, cybersecurity monitoring, technical investigation and continuous improvement. You will work closely with colleagues across technology and the wider business to protect systems and data, maintain service availability and help ensure that technology platforms meet operational and regulatory requirements.

Key responsibilities will include monitoring security alerts, investigating incidents and vulnerabilities, and supporting the implementation of appropriate remediation activities. You will administer and maintain infrastructure services such as servers, networks, cloud platforms, identity and access management, endpoint technologies, backups and security tools. The role will also involve reviewing logs, assisting with security assessments, maintaining technical documentation, contributing to disaster recovery and business continuity planning, and supporting the development of policies, standards and operating procedures. You will participate in technology projects, provide technical advice, and help identify opportunities to improve resilience, automation and overall security maturity.

Applicants should have experience in IT infrastructure, systems administration or information security, with a sound understanding of networking, operating systems, cloud technologies, access controls, vulnerability management and incident response. Familiarity with security monitoring tools, Microsoft environments, firewalls, endpoint protection, backup solutions and recognised security frameworks would be advantageous. Relevant professional qualifications or certifications are welcome, alongside a commitment to ongoing learning. You will be analytical, organised and able to communicate clearly with both technical and non-technical audiences. The successful candidate will demonstrate sound judgement, strong problem-solving skills, attention to detail and the ability to manage competing priorities while handling sensitive information responsibly.

We are seeking an Experienced Vulnerability Researcher to identify, analyse, and responsibly disclose security weaknesses across a broad range of software, hardware, embedded systems, and network technologies. You will conduct independent and collaborative research into vulnerabilities affecting operating systems, applications, protocols, and connected devices, with a focus on developing reliable proof-of-concept exploits and practical remediation guidance.

Your responsibilities will include performing vulnerability discovery through source code review, reverse engineering, fuzzing, static and dynamic analysis, and manual testing. You will investigate complex security issues, assess exploitability and impact, document technical findings, and work with engineering and security teams to validate fixes. You may also contribute to vulnerability intelligence, threat modelling, security advisories, conference papers, and presentations. The role requires staying current with emerging attack techniques, exploitation trends, defensive technologies, and relevant industry standards.

Applicants should have substantial professional experience in vulnerability research, penetration testing, exploit development, or a closely related discipline. Strong programming skills in languages such as C, C++, Python, Rust, or assembly are expected, along with practical experience using debuggers, disassemblers, fuzzing frameworks, and binary analysis tools. A thorough understanding of operating system internals, memory corruption, privilege escalation, secure coding principles, and common vulnerability classes is essential. Experience researching browsers, mobile platforms, cloud environments, industrial systems, or embedded devices would be advantageous. You should be analytical, persistent, and able to explain complex technical issues clearly to both specialist and non-specialist audiences. The position may involve handling sensitive information, so sound judgement, discretion, and a commitment to responsible disclosure are required.

We are seeking an experienced Security Operations Manager to lead the day-to-day delivery of effective, responsive, and risk-based security operations. The successful candidate will oversee the protection of people, property, information, and business-critical activities across a varied operational environment. This role will involve setting clear standards, maintaining a strong security culture, and ensuring that procedures remain aligned with organisational requirements, legal obligations, and recognised industry practice.

Key responsibilities include managing security personnel, control room activities, access control, incident response, investigations, patrols, and emergency procedures. You will coordinate the development and review of security policies, risk assessments, business continuity arrangements, and crisis response plans. The role will also involve monitoring operational performance, reviewing incidents and trends, preparing management reports, and identifying opportunities to improve effectiveness and resilience. You will work closely with internal stakeholders, contractors, emergency services, and relevant external partners, ensuring that security matters are communicated clearly and managed professionally. Where required, you will support audits, compliance reviews, training programmes, and the implementation of new systems or technology.

Applicants should have substantial experience in security management or a related operational leadership role, with a strong understanding of physical security, incident management, investigations, risk mitigation, and emergency planning. Experience managing teams, suppliers, budgets, and performance standards is essential. Excellent communication, decision-making, organisational, and problem-solving skills are required, together with the confidence to remain calm and effective in high-pressure situations. A relevant professional qualification or recognised security management certification would be advantageous. The successful candidate will demonstrate integrity, sound judgement, attention to detail, and a proactive approach to continuous improvement. Flexibility is important, as the role may require occasional out-of-hours support, attendance at incidents, or participation in an on-call rota.

We are seeking a Security Operations Analyst to support the monitoring, investigation and improvement of an organisation’s cyber security operations. Working as part of a collaborative security team, you will help protect systems, networks, applications and data by identifying potential threats, assessing risk and coordinating timely responses to security incidents.

Key responsibilities will include monitoring security alerts and events using SIEM, endpoint detection and response, vulnerability management and other security tools; investigating suspicious activity, phishing reports, malware alerts and unauthorised access attempts; and maintaining accurate incident records, investigation notes and follow-up actions. You will assist with incident response activities, including triage, containment, eradication and recovery, escalating significant issues in line with established procedures. The role will also involve analysing logs and threat intelligence, supporting vulnerability assessments, contributing to security reporting and metrics, and helping to improve detection rules, playbooks, processes and operational controls. You may also support security awareness activities, audit requests and the review of technical findings with relevant stakeholders.

Applicants should have experience in a security operations, incident response, service desk, infrastructure or related technical environment, together with a practical understanding of common cyber threats, attack techniques and defensive measures. Familiarity with SIEM platforms, endpoint security solutions, vulnerability scanners, firewalls, identity systems and cloud environments is desirable. Knowledge of frameworks and practices such as NIST, MITRE ATT&CK, ISO 27001 or ITIL would be advantageous. Strong analytical and problem-solving skills are essential, along with the ability to communicate technical information clearly to both technical and non-technical audiences. You should be organised, dependable and comfortable working under pressure, including participation in an out-of-hours or on-call rota where required. Relevant industry certifications or a willingness to pursue professional development will be welcomed.

We are seeking an Experienced Vulnerability Researcher to identify, analyse, and responsibly disclose security weaknesses across operating systems, applications, embedded devices, and networked technologies. You will conduct original vulnerability research, reverse engineering, binary analysis, and exploit development to assess real-world security impact. The role involves investigating complex technical problems, developing proof-of-concept code, validating exploitability, and documenting findings clearly for both technical and non-technical audiences.

You will be responsible for discovering vulnerabilities through source-code review, fuzzing, dynamic analysis, debugging, and manual testing. You will create and maintain research tooling, automation, and test environments, while keeping current with emerging attack techniques, vulnerability trends, and relevant security advisories. Responsibilities will also include reproducing reported issues, assessing severity and attack prerequisites, supporting coordinated disclosure activities, and collaborating with software engineers, incident responders, and security professionals to improve product resilience. You may also contribute to internal research initiatives, technical presentations, written publications, and mentoring less experienced researchers.

The successful candidate will have substantial professional experience in vulnerability research, exploit development, or a closely related security discipline. Strong programming skills in languages such as C, C++, Python, or Rust are required, along with practical knowledge of assembly, operating-system internals, memory corruption, debugging tools, and common mitigation technologies. Experience with reverse-engineering frameworks, fuzzing platforms, source-code analysis, and penetration-testing methodologies is highly desirable. You should be methodical, curious, and comfortable working independently on technically challenging investigations, while also communicating effectively within a collaborative team. A responsible approach to handling sensitive information and a demonstrated ability to produce accurate, reproducible research are essential.

We are seeking a Data Protection Coordinator to support the effective management, implementation and continuous improvement of data protection practices across the organisation. Working closely with colleagues across business functions, you will help ensure that personal data is handled lawfully, securely and transparently in line with applicable legislation, internal policies and regulatory expectations. This role is well suited to someone who is organised, detail-oriented and confident working with sensitive information.

Your responsibilities will include maintaining records of processing activities, supporting data protection impact assessments and coordinating responses to data subject requests, information rights enquiries and personal data breaches. You will assist with monitoring compliance, reviewing privacy notices, policies and procedures, and tracking actions arising from audits, risk assessments and compliance reviews. The role will also involve maintaining accurate documentation, preparing reports and management information, supporting retention and deletion processes, and helping to deliver data protection training and awareness activities. You may also contribute to the assessment of third-party data processing arrangements and the review of relevant contracts and due diligence materials.

Applicants should have practical knowledge of data protection principles and relevant privacy legislation, together with experience in a compliance, governance, information management or administrative role involving confidential data. Strong written and verbal communication skills are essential, as is the ability to explain privacy requirements clearly to both specialist and non-specialist audiences. You should be comfortable managing competing priorities, working independently and collaborating effectively with stakeholders at different levels. Excellent attention to detail, sound judgement, discretion and proficiency with standard office and record-management systems are required. A recognised data protection, information governance or compliance qualification would be advantageous, as would experience using case-management or reporting tools.

We are seeking an experienced Security & Networks Portfolio Director to lead the strategic direction, governance and delivery of a complex portfolio spanning cyber security, network infrastructure and associated technology services. This senior role will be responsible for ensuring that security and network capabilities support organisational priorities, enable operational resilience and provide a secure foundation for future growth. You will define portfolio strategy, manage investment priorities and oversee the development of effective roadmaps aligned with business and technology objectives.

You will lead a diverse portfolio of programmes, projects and operational improvements, ensuring delivery is well governed, financially controlled and aligned with agreed outcomes. Responsibilities will include setting standards and target architectures, managing risks and dependencies, monitoring performance, and ensuring compliance with relevant legislation, regulatory obligations and industry frameworks. You will work closely with senior stakeholders to understand business requirements, communicate complex technical matters clearly and provide informed recommendations on investment, risk and prioritisation. The role will also involve oversight of third-party suppliers, contract performance, service quality and continuous improvement across the portfolio.

The successful candidate will bring substantial leadership experience in cyber security, network services, technology transformation or a related environment, together with a proven record of managing large-scale portfolios and delivering change in complex organisations. You will have strong knowledge of security principles, network architecture, infrastructure operations, identity and access management, resilience and risk management. Excellent commercial, financial and governance skills are essential, as is the ability to influence at executive level and build effective relationships across technical and non-technical teams. A collaborative, pragmatic and outcome-focused approach is required, supported by strong communication, negotiation and decision-making skills. Relevant professional qualifications in security, networking, project or portfolio management would be advantageous.

We are seeking an OT Cybersecurity Compliance Lead to support projects, systems and operational technology environments across the EMEA region. This role will lead the integration of cybersecurity compliance requirements throughout the lifecycle of OT initiatives, from design and procurement through implementation, commissioning and ongoing operations. You will work closely with engineering, automation, IT, project management, procurement and site teams to ensure that systems are secure, compliant and aligned with applicable policies, standards and regulatory obligations.

Key responsibilities will include defining and maintaining OT cybersecurity requirements; conducting risk assessments, security reviews and compliance evaluations; supporting the development of secure architectures and system designs; and ensuring that appropriate controls are implemented, documented and tested. You will coordinate security activities across multiple projects, review technical documentation, assess suppliers and third parties, track remediation plans and provide clear reporting on risks, exceptions and compliance status. The role will also contribute to audits, inspections, incident preparedness, vulnerability management and continuous improvement of OT cybersecurity processes. Occasional travel across EMEA may be required to support project delivery and operational sites.

The successful candidate will have proven experience in industrial control systems, operational technology, industrial automation, cybersecurity or a closely related field, together with a strong understanding of compliance and risk management. Knowledge of recognised frameworks and standards such as IEC 62443, ISO 27001, NIST, NIS2 or relevant sector regulations is highly desirable. You should be confident interpreting technical and regulatory requirements, managing stakeholders and influencing teams in complex, international environments. Strong analytical, organisational and communication skills are essential, as is the ability to translate cybersecurity risks into practical actions for both technical and non-technical audiences. Relevant certifications in cybersecurity, OT security, risk management or auditing would be advantageous.

We are seeking a Cyber Behaviours and Engagement Lead to develop and deliver a programme that strengthens cyber security awareness, accountability and positive behaviours across a complex organisation. You will work with colleagues at all levels to make secure working practices clear, relevant and practical, helping people understand how their everyday decisions contribute to the protection of information, systems and services.

You will lead the design and implementation of cyber engagement and behaviour-change initiatives, including awareness campaigns, learning resources, communications, events and targeted interventions for higher-risk groups. Working closely with cyber security, technology, communications, risk, people and operational teams, you will translate technical requirements into accessible messages and actionable guidance. You will use insight, feedback, participation data and behavioural metrics to identify areas for improvement, evaluate the impact of activity and continuously refine the programme. The role will also involve managing stakeholders, commissioning or coordinating content, supporting incident-related communications and contributing to policies, standards and assurance reporting.

The successful candidate will have proven experience leading cyber security awareness, culture, engagement or behaviour-change programmes, ideally within a large or complex environment. You will understand principles of behavioural science, adult learning and effective communications, and be able to demonstrate how you have influenced behaviour through engaging, audience-focused initiatives. Strong project management, writing, presentation and relationship-building skills are essential, along with the confidence to advise senior stakeholders and collaborate across professional disciplines. Experience using engagement platforms, learning management systems, campaign analytics or security culture measurement tools would be advantageous. You will be organised, creative and pragmatic, with the ability to balance strategic thinking with hands-on delivery and to promote secure behaviours in an inclusive, accessible and non-technical way.

We are seeking an experienced I&S Security Assurance Manager to lead the delivery of effective security assurance across a complex technology and business environment. This role will help ensure that information, systems, services and suppliers meet required security, risk and compliance standards while supporting the organisation’s wider operational and strategic objectives. You will work closely with technology, risk, procurement, legal and business stakeholders to provide clear, practical and proportionate assurance.

Key responsibilities will include developing and maintaining security assurance frameworks, policies, standards and processes; planning and delivering assurance reviews, control assessments and audits; and identifying, evaluating and reporting information security risks. You will oversee remediation plans, track actions through to completion and provide senior stakeholders with concise reporting on control effectiveness, emerging threats and areas requiring investment. The role will also support security reviews of projects, products, architectures, cloud services and third-party suppliers, ensuring that security requirements are understood and addressed throughout the lifecycle.

The successful candidate will have substantial experience in information security assurance, governance, risk management, audit or a closely related discipline. You will be confident interpreting security principles and industry standards, translating them into practical controls, and challenging decisions constructively where risk is not adequately managed. Knowledge of recognised frameworks such as ISO 27001, NIST, CIS Controls or COBIT is desirable, together with experience of supplier assurance, regulatory compliance and risk treatment. Relevant professional certifications, such as CISM, CISSP, CRISC, ISO 27001 Lead Auditor or equivalent, would be advantageous. Strong communication, analytical and stakeholder-management skills are essential, as is the ability to manage competing priorities and deliver high-quality work in a changing environment.