Job Search

We are seeking an experienced Principal Security Architect to provide strategic leadership across security architecture, risk management and secure technology delivery. In this senior role, you will define and maintain security architecture principles, standards and patterns, ensuring that business strategies, technology roadmaps and transformation programmes are aligned with robust security outcomes. You will work closely with senior stakeholders, engineering and delivery teams to embed security by design across applications, infrastructure, cloud services, data and emerging technologies.

Your responsibilities will include assessing current and future security capabilities, identifying architectural risks and recommending proportionate mitigations. You will lead the production and review of security architecture documentation, threat models, design decisions and technical assurance reports, while supporting governance forums and investment planning. You will provide expert advice on complex initiatives, challenge proposed designs where necessary and help teams translate security requirements into practical, deliverable solutions. The role will also involve contributing to security strategy, policies and reference architectures, supporting risk acceptance processes and promoting consistent approaches across a diverse technology estate. You will act as a trusted adviser during major incidents, technology change and supplier engagements, helping to ensure that security controls remain effective and appropriate.

Applicants should have substantial experience in security architecture, cyber security or a closely related discipline, together with a strong understanding of enterprise architecture and modern technology environments. You will need practical knowledge of cloud security, identity and access management, network security, application security, data protection, secure development and risk assessment. Experience of recognised security frameworks, architectural methods and regulatory or compliance requirements would be highly beneficial. Professional security or architecture certifications are desirable, although equivalent experience will be considered. Strong communication and influencing skills are essential, as is the ability to explain complex issues clearly to technical and non-technical audiences. We are looking for someone who can operate strategically while remaining sufficiently hands-on to guide delivery teams and achieve measurable improvements in security maturity.

We are seeking an Information Security Analyst - Operations to support the protection, monitoring and continuous improvement of a complex technology environment. In this role, you will monitor security events and alerts, investigate potential incidents, assess vulnerabilities and help coordinate timely responses to threats. You will work closely with infrastructure, application, risk and compliance teams to identify control gaps, reduce exposure and strengthen operational resilience. The role will also involve maintaining accurate records, preparing security reports and contributing to incident reviews and lessons-learned activities.

Key responsibilities include triaging alerts from security monitoring tools, analysing logs and indicators of compromise, escalating incidents in line with established procedures, and supporting containment, eradication and recovery activities. You will assist with vulnerability management, security investigations, access reviews, threat intelligence analysis and the development of operational metrics. You may also contribute to security testing, audit evidence gathering, procedure updates and automation initiatives that improve the efficiency and consistency of security operations. Clear documentation and effective communication with technical and non-technical stakeholders will be essential.

The successful candidate will have experience in a security operations, incident response, systems administration or related information security role, together with a sound understanding of common cyber threats, attack methods and defensive controls. Familiarity with SIEM platforms, endpoint detection and response tools, vulnerability scanners, ticketing systems and cloud security technologies is desirable. You should be analytical, organised and comfortable working under pressure while managing competing priorities. Knowledge of recognised security frameworks and practices, such as ISO 27001, NIST or CIS Controls, would be advantageous. Relevant professional certifications or equivalent practical experience are welcomed.

We are seeking an experienced Principal Security Specialist to provide strategic leadership and technical expertise across a broad information security landscape. This role will help strengthen security capability, protect critical systems and data, and support the delivery of secure, resilient services. You will act as a senior adviser to technology and business stakeholders, translating complex security risks into practical recommendations and helping to shape security priorities, standards and investment decisions.

Key responsibilities will include developing and maintaining security architecture, policies, procedures and control frameworks; leading the assessment and treatment of information and cyber security risks; and providing expert guidance on identity and access management, cloud security, infrastructure, applications, data protection and network defence. You will contribute to security-by-design activities, architecture reviews, threat modelling, vulnerability management and incident response. The role will also involve supporting audits and regulatory requirements, monitoring emerging threats, reviewing the effectiveness of security controls, and coordinating remediation activity with internal teams and specialist suppliers. You will be expected to champion continuous improvement and promote security awareness across the organisation.

We are looking for a recognised security professional with significant experience in a senior or principal-level role and a strong understanding of industry frameworks, standards and good practice, such as ISO 27001, NIST, CIS Controls and relevant data protection principles. You should be confident assessing complex environments, influencing decision-makers and communicating clearly with both technical and non-technical audiences. Experience of security architecture, risk management, governance, assurance and incident handling is essential, along with the ability to manage competing priorities and deliver high-quality outcomes. Professional certifications such as CISSP, CISM, SABSA, CCSP or equivalent experience would be advantageous. A proactive, collaborative approach and a commitment to maintaining high professional standards are essential.

We are seeking an experienced Security Architect to define and strengthen the security architecture across a complex technology environment. You will develop practical, scalable security strategies that support business objectives while protecting critical systems, applications, data, and services. Working closely with technology, engineering, infrastructure, risk, and compliance teams, you will translate security requirements into effective architectural patterns, standards, and controls.

Your responsibilities will include assessing current and proposed architectures, identifying security risks, and recommending proportionate improvements. You will create and maintain security architecture principles, reference designs, patterns, and roadmaps covering cloud, on-premises, networks, applications, identity, endpoints, and data. You will contribute to solution design reviews, threat modelling, risk assessments, and technology evaluations, ensuring that security is embedded throughout the development and delivery lifecycle. The role will also involve supporting incident response and remediation activities, advising on vulnerabilities and control weaknesses, and helping teams implement secure-by-design practices. You will communicate complex technical matters clearly to both technical and non-technical stakeholders and provide constructive challenge where required.

Applicants should have substantial experience in security architecture, cyber security engineering, or a closely related discipline, with a strong understanding of enterprise security principles and risk management. Experience designing secure cloud environments, identity and access management solutions, network security controls, application security measures, and data protection capabilities is essential. Familiarity with recognised security frameworks and standards, such as NIST, ISO 27001, CIS Controls, or equivalent, would be advantageous. Relevant professional certifications, including CISSP, SABSA, CCSP, or equivalent experience, are desirable. You should be analytical, pragmatic, and confident in influencing stakeholders, with the ability to balance security, usability, cost, and delivery priorities. A commitment to continuous learning and improving organisational security maturity is expected.

We are seeking a Manager, Senior Red Team Operator, Global to lead sophisticated offensive security activities across a complex, international environment. This role will manage and participate in authorised red team operations designed to identify weaknesses in people, processes, applications, infrastructure, cloud services and physical security controls. You will develop realistic, intelligence-led attack scenarios, define objectives and rules of engagement, coordinate activity across regions, and ensure operations are conducted safely, discreetly and in accordance with legal, regulatory and ethical requirements.

You will lead engagements from initial planning through execution, evidence collection, impact assessment and remediation validation. Responsibilities include translating threat intelligence into adversary emulation plans; conducting network, cloud, application, identity and social engineering assessments; directing covert operations; maintaining detailed operational documentation; and presenting clear findings to technical teams, senior leadership and risk stakeholders. You will mentor experienced operators, support capability development, contribute to tooling and tradecraft improvements, and work closely with defensive security teams to strengthen detection, response and resilience. The role may require collaboration across multiple time zones and occasional international travel.

Applicants should have substantial experience in red teaming, penetration testing, adversary emulation or a closely related offensive security discipline, including a strong understanding of modern attack techniques, threat actor behaviours and defensive countermeasures. Proven experience leading complex engagements and handling sensitive information is essential. Strong technical capability across areas such as Active Directory, identity and access management, cloud platforms, scripting, network security, web applications and endpoint environments is highly desirable. Relevant professional certifications are beneficial, but demonstrated expertise and sound judgement are equally important. Excellent written and verbal communication, stakeholder management, discretion, curiosity and the ability to operate independently in ambiguous situations are required. This position is suited to a calm, ethical security professional who can combine hands-on technical leadership with strategic thinking.

We are seeking a Senior Lead Security Operations Analyst to provide technical leadership across security monitoring, incident response, threat detection and operational resilience. You will guide a team of analysts, coordinate the effective operation of security monitoring capabilities, and help ensure that cyber threats are identified, investigated and contained promptly. Working closely with technology, risk and business stakeholders, you will provide clear advice on security events, emerging threats and appropriate remediation activities.

Your responsibilities will include leading the analysis and response to complex security incidents, reviewing alerts and investigations, and improving processes across the security operations function. You will oversee the development and tuning of detection use cases, correlation rules, dashboards and automated response workflows within SIEM, SOAR, EDR and related security platforms. You will also contribute to threat hunting, vulnerability investigations, forensic analysis and post-incident reviews, ensuring that lessons learned are translated into measurable improvements. The role will involve producing accurate management reports, maintaining operational documentation, supporting audit requirements and helping to define and track security performance metrics.

Applicants should have substantial experience in a security operations, incident response or cyber defence environment, including experience leading or mentoring analysts. Strong practical knowledge of SIEM technologies, endpoint protection, network security monitoring, threat intelligence and incident management is essential. You should be confident analysing complex technical data, identifying attack patterns and communicating risks to both technical and non-technical audiences. Experience with security frameworks such as MITRE ATT&CK, NIST or ISO 27001, along with relevant professional certifications, would be advantageous. The successful candidate will demonstrate sound judgement, excellent organisation, a collaborative leadership style and the ability to remain calm and decisive during high-priority incidents.

We are seeking a Security Operations DevOps Engineer to help strengthen, automate and scale security operations across a modern technology environment. In this role, you will work at the intersection of cybersecurity, cloud engineering and platform operations, developing reliable solutions that improve detection, response and operational resilience. You will collaborate with security analysts, software engineers, infrastructure teams and other stakeholders to ensure security controls are effective, measurable and integrated into everyday delivery practices.

Your responsibilities will include designing, implementing and maintaining security automation, monitoring and incident-response workflows. You will develop and improve CI/CD security controls, integrate security tools and APIs, and create scripts and services that reduce manual effort and accelerate investigation and remediation. You will help manage and optimise cloud and infrastructure security across environments such as AWS, Azure or Google Cloud, while supporting vulnerability management, threat detection, log collection and security information and event management platforms. You will also contribute to incident investigations, root-cause analysis, playbook development, post-incident reviews and continuous improvement initiatives. Clear documentation, effective alerting and robust operational procedures will be central to your work.

The successful candidate will have professional experience in security operations, DevOps, site reliability engineering, cloud security or a closely related field. Strong knowledge of Linux, networking, scripting or programming languages such as Python, PowerShell or Bash, and infrastructure-as-code tools such as Terraform is required. Experience with CI/CD platforms, containers, Kubernetes, identity and access management, monitoring technologies and SIEM or SOAR solutions is highly desirable. You should understand common security frameworks, vulnerability management principles and secure software development practices. Relevant certifications are welcome but not essential. We are looking for an analytical, collaborative and proactive engineer who can communicate clearly, work effectively during high-pressure incidents and continuously improve the security and reliability of operational platforms.

We are seeking an Associate Director, OT & Cybersecurity to lead the development and delivery of a robust operational technology (OT) and cybersecurity strategy across complex industrial and enterprise environments. This senior role will provide strategic direction, technical leadership and governance to protect critical infrastructure, manufacturing systems, industrial control systems and connected technologies from evolving cyber threats.

Responsibilities will include setting the OT cybersecurity roadmap, establishing policies, standards and control frameworks, and ensuring alignment with relevant regulatory, industry and information security requirements. You will oversee risk assessments, vulnerability management, security monitoring, incident response and business continuity planning across OT environments. The role will partner closely with IT, engineering, operations, risk, compliance and executive stakeholders to embed security by design, improve resilience and support the secure adoption of new technologies. You will also lead third-party and supply-chain security initiatives, manage budgets and resources, and develop meaningful metrics and reporting for senior leadership. Where required, you will coordinate responses to significant security incidents and act as a senior advisor during investigations and remediation activities.

The successful candidate will bring significant experience in OT, industrial cybersecurity, critical infrastructure protection or a closely related field, together with proven leadership experience in a complex, regulated or multinational environment. Strong knowledge of industrial control systems, network architecture, identity and access management, security operations, threat modelling and recognised frameworks such as IEC 62443, NIST or ISO 27001 is required. Experience leading transformation programmes, influencing senior stakeholders and managing external partners will be highly valued. Relevant professional certifications, such as CISSP, CISM, GICSP or equivalent, are desirable. You will be a confident communicator and strategic thinker, capable of translating technical risk into clear business priorities while building a strong culture of security, collaboration and continuous improvement.

We are seeking a Senior Network and Security Engineer to design, implement and maintain secure, resilient network infrastructure across a complex and highly available environment. The successful candidate will provide technical leadership across network architecture, cybersecurity controls and operational performance, ensuring services remain reliable, scalable and aligned with business and regulatory requirements.

Key responsibilities will include managing enterprise routing, switching, firewalls, VPNs, wireless networks, load balancers and network access controls. You will monitor infrastructure performance, investigate and resolve complex incidents, lead root-cause analysis, and coordinate planned maintenance and change activity. The role will also involve developing and enforcing security policies, supporting vulnerability remediation, reviewing logs and alerts, and contributing to incident response and disaster recovery planning. You will collaborate with infrastructure, cloud, application and service teams to deliver secure solutions, while maintaining accurate documentation, diagrams, configuration records and operational procedures. You may also be expected to mentor engineers, provide technical guidance and contribute to improvement programmes and infrastructure projects.

Applicants should have substantial experience in network engineering and security within a medium-to-large enterprise environment, together with strong knowledge of TCP/IP, DNS, DHCP, BGP, OSPF, VLANs, VPN technologies and network segmentation. Hands-on experience with next-generation firewalls, intrusion prevention, secure remote access, identity-based controls and cloud networking is essential. Relevant industry certifications or equivalent practical experience will be highly valued. You will need excellent troubleshooting and analytical abilities, a methodical approach to risk and change management, and the confidence to communicate technical issues clearly to both technical and non-technical stakeholders. A proactive mindset, strong teamwork skills and a commitment to continuous improvement are essential.

We are seeking an Assistant Manager, Analyst to support the Business Information Security (BIS) function across global operations. This role will help protect business information, technology assets and services by contributing to security governance, risk management and operational assurance activities. You will work with stakeholders across technology, business operations, internal controls and risk teams to promote secure practices and support the delivery of information security objectives.

Key responsibilities include assisting with the assessment, documentation and monitoring of information security risks; coordinating the review of security controls, policies and procedures; and supporting the tracking and remediation of identified issues. You will help prepare management reports, risk summaries, metrics and presentations, ensuring that information is accurate, clearly communicated and delivered within agreed timelines. The role may also support control testing, audit requests, regulatory reviews, third-party risk assessments, security awareness initiatives and the maintenance of governance records. You will contribute to process improvements by identifying opportunities to streamline reporting, improve data quality and strengthen control effectiveness across global teams.

The successful candidate will have experience in information security, technology risk, IT audit, compliance, governance or a related analytical role. A good understanding of security frameworks, risk and control principles, issue management and audit processes is desirable. You should be comfortable analysing information from multiple sources, identifying trends and presenting practical recommendations to varied audiences. Strong organisational, written and verbal communication skills are essential, along with sound attention to detail and the ability to manage competing priorities in a fast-paced, international environment. Experience with reporting and data analysis tools, risk management platforms or governance systems would be advantageous. Professional certifications in information security, risk, audit or related disciplines are welcome but not essential.