Job Search

We are seeking a Senior ICT Security Designer to lead the design and development of secure, resilient and scalable technology solutions across complex ICT environments. In this role, you will translate business and technical requirements into robust security architectures, ensuring that applications, infrastructure, networks, cloud services and data platforms are protected against evolving threats. You will work closely with architects, engineers, project managers, risk specialists and operational teams to embed security throughout the solution lifecycle, from early concept and design through to implementation and service transition.

Your responsibilities will include producing and reviewing security architecture and detailed design documentation, defining security controls, assessing design risks and recommending appropriate mitigations. You will contribute to security patterns, standards, principles and reusable reference architectures, while ensuring alignment with relevant legislation, regulatory obligations, industry frameworks and organisational policies. You will provide expert advice on identity and access management, encryption, network security, endpoint protection, vulnerability management, monitoring, incident response and secure cloud adoption. The role will also involve supporting assurance activities, technical reviews, risk assessments, security testing and the resolution of complex design or implementation issues.

To succeed, you will have substantial experience in ICT security architecture or security engineering, with a strong understanding of enterprise technology environments and secure design practices. You should be able to evaluate complex information, communicate technical concepts clearly to both specialist and non-specialist audiences, and influence stakeholders at all levels. Experience with cloud security, zero-trust principles, threat modelling, security frameworks and relevant governance processes is highly desirable. Professional certifications in information security, architecture or related disciplines would be advantageous. We are looking for a collaborative and pragmatic professional who can balance security, usability, performance and cost while delivering high-quality outcomes in a changing environment.

We are seeking an IT Security Analyst to help protect critical systems, data and services from evolving cyber threats. This role will monitor security events, investigate alerts and support the continuous improvement of defensive controls across the organisation’s technology environment. The successful candidate will work closely with infrastructure, applications, service management and compliance teams to identify risks, respond to incidents and promote secure working practices.

Key responsibilities will include reviewing and triaging alerts from security monitoring platforms, analysing suspicious activity, supporting incident response investigations and documenting findings clearly. You will assist with vulnerability assessments, remediation tracking, access reviews, endpoint protection and security configuration checks. The role will also contribute to threat intelligence activities, security testing, audit preparation and the development of policies, procedures and technical guidance. Where required, you will help coordinate responses to security incidents, escalate significant risks and ensure appropriate corrective actions are completed within agreed timescales.

Applicants should have practical experience in information security, cyber security operations, systems administration or a related technical discipline. You will need a sound understanding of security principles, network concepts, identity and access management, endpoint security, vulnerability management and common attack techniques. Experience using SIEM, EDR, vulnerability scanning or ticketing tools would be advantageous, as would familiarity with recognised security frameworks and data protection requirements. Strong analytical and problem-solving skills are essential, together with the ability to communicate technical issues clearly to both technical and non-technical audiences. Relevant professional qualifications or certifications are welcome, but demonstrable hands-on experience and a commitment to continued learning are equally valued.

We are seeking a Senior 3rd Line Network and Security Engineer to provide expert-level support, administration and continuous improvement across complex network and security infrastructure. You will act as an escalation point for challenging technical issues, taking ownership from initial investigation through to resolution while maintaining clear communication with colleagues, stakeholders and service users. The role will involve working across a varied technology environment and contributing to the reliability, performance and security of critical services.

Key responsibilities will include designing, implementing and supporting LAN, WAN, wireless, VPN and firewall solutions; monitoring network performance and security events; investigating incidents, vulnerabilities and service degradation; and carrying out root-cause analysis to prevent recurring problems. You will manage changes in line with established processes, maintain accurate technical documentation and configuration records, and assist with infrastructure upgrades, migrations and resilience testing. The successful candidate will also contribute to security improvement initiatives, including access control, segmentation, patching, threat mitigation and compliance activity. You may be required to participate in an out-of-hours support rota.

You should have substantial experience in a senior network or infrastructure engineering role, with strong knowledge of routing and switching, TCP/IP, DNS, DHCP, firewalls, remote access technologies and network monitoring. Experience with enterprise security platforms, intrusion prevention, endpoint or cloud security, and network automation would be advantageous. Relevant professional certifications or demonstrable equivalent experience are desirable. You will be comfortable working independently on complex technical problems while also collaborating effectively within wider IT teams. Strong analytical, organisational and communication skills are essential, along with a proactive approach to risk management, service improvement and knowledge sharing.

We are seeking an Operational Technology (OT) Cyber Security Engineer to help protect industrial control systems, supervisory control and data acquisition (SCADA) environments, and other critical operational technology platforms. You will work across engineering, infrastructure, operations and risk teams to strengthen the security and resilience of systems that support essential processes. This role offers the opportunity to contribute to practical, risk-based cyber security improvements in complex and highly regulated environments.

Your responsibilities will include assessing OT networks, systems and processes against recognised security frameworks and internal standards; identifying vulnerabilities and recommending appropriate remediation; supporting secure architecture, segmentation and access-control designs; and maintaining accurate asset inventories, network diagrams, risk registers and security documentation. You will contribute to security monitoring, incident response, threat analysis and investigation, helping to coordinate containment and recovery activities where required. You will also support vulnerability management, patching and configuration reviews while taking account of operational availability, safety and change-control requirements.

The successful candidate will have experience in OT, industrial control systems, SCADA, distributed control systems or a closely related cyber security environment. Knowledge of protocols such as Modbus, DNP3, OPC, Ethernet/IP or IEC 61850, together with an understanding of Purdue-style architectures and industrial networking, would be highly beneficial. Experience with security standards and guidance such as IEC 62443, NIST Cybersecurity Framework, ISO 27001 or NIS2 is desirable. You should be comfortable working with technical and non-technical stakeholders, producing clear reports and influencing improvements across multiple teams. Relevant professional certifications in cyber security, networking, industrial automation or risk management are advantageous. A methodical approach, strong communication skills and a commitment to safe, reliable operations are essential.

We are seeking a Cyber Defense Incident Responder – Associate Director to lead the identification, investigation, containment, and remediation of complex cybersecurity incidents. This role will provide senior technical direction during high-impact events, helping to protect critical systems, sensitive information, and business operations. You will work closely with security operations, threat intelligence, digital forensics, infrastructure, application, and risk teams to coordinate effective incident response across the organisation.

Key responsibilities include directing the end-to-end response to suspected and confirmed security incidents; assessing alerts and evidence to determine scope, severity, and business impact; developing containment, eradication, and recovery strategies; and ensuring that response actions are documented clearly and completed within agreed timeframes. You will lead investigations involving endpoint, identity, network, cloud, application, and email environments, using forensic analysis and threat-hunting techniques to identify attacker activity and persistence. The role will also contribute to incident response playbooks, crisis exercises, detection improvements, post-incident reviews, and executive-level reporting. You will help establish consistent processes, mentor incident responders, and support continuous improvement of defensive capabilities and operational resilience.

The successful candidate will bring significant experience in cyber incident response, security operations, digital forensics, or a closely related discipline, together with demonstrated experience leading complex investigations and coordinating cross-functional response teams. Strong knowledge of attack frameworks, malware analysis, network and endpoint security, cloud environments, identity systems, and common security tooling is expected. Experience with SIEM, EDR, SOAR, threat intelligence, and forensic platforms is highly desirable. Relevant professional certifications in incident handling, security, forensics, or cloud technologies are advantageous. You should be an analytical and decisive leader with excellent written and verbal communication skills, capable of explaining technical risk to both specialist and senior non-technical audiences. The role may require participation in an on-call or out-of-hours incident response rotation.

We are seeking a capable and dependable Security Professional to help protect people, property, information, and day-to-day operations. The successful candidate will maintain a visible and professional presence, respond promptly to incidents, and contribute to a safe, secure environment for employees, visitors, contractors, and other authorised personnel. This role requires sound judgement, strong communication skills, attention to detail, and the ability to remain calm and decisive in challenging situations.

Key responsibilities include monitoring premises, access points, surveillance systems, alarms, and security communications; conducting regular patrols and safety checks; verifying identification and controlling visitor and contractor access; and enforcing site security procedures. You will respond to incidents, emergencies, disturbances, and suspicious activity in accordance with established protocols, contacting emergency services or relevant stakeholders when required. Accurate recording is essential, including the completion of occurrence books, incident reports, shift handovers, access records, and other required documentation. You may also support emergency evacuations, security investigations, loss-prevention activities, and the review of operating procedures.

Applicants should have previous experience in a security, protective services, facilities, customer service, or similarly responsible role. A relevant security licence or recognised industry qualification is desirable, and additional training in first aid, conflict management, fire safety, or emergency response would be advantageous. You must demonstrate integrity, reliability, physical and mental alertness, and the ability to follow instructions while working independently. The role may involve standing or walking for extended periods, working varied shifts including nights, weekends, and public holidays, and responding to situations that require discretion and professionalism. A commitment to confidentiality, health and safety, equal treatment, and respectful interactions is essential.

We are seeking a Cyber Ecosystem Project Manager to coordinate and deliver initiatives that strengthen collaboration across cybersecurity partners, technology providers, public and private stakeholders, and internal teams. This role will be responsible for managing projects from initial concept through implementation, ensuring that objectives, timelines, budgets, dependencies, and outcomes are clearly defined and effectively controlled. The successful candidate will help develop a connected and resilient cyber ecosystem by translating strategic priorities into practical programmes and measurable actions.

Key responsibilities include establishing project plans, governance structures, milestones, risk registers, and reporting processes; coordinating contributions from multidisciplinary and external stakeholders; and facilitating workshops, steering groups, and progress meetings. You will monitor delivery against agreed objectives, identify and resolve issues, manage changes, and ensure that decisions and actions are documented and followed through. The role will also involve supporting partnership development, mapping ecosystem capabilities and dependencies, preparing briefings and status reports, and contributing to the design of initiatives that improve information sharing, innovation, cyber resilience, and operational readiness.

You will bring proven experience managing complex projects or programmes, ideally within cybersecurity, technology, critical infrastructure, government, regulated industries, or a closely related environment. Strong stakeholder management, communication, organisation, and problem-solving skills are essential, together with the ability to work confidently across technical and non-technical audiences. You should be comfortable working with ambiguity, balancing competing priorities, and influencing outcomes without direct authority. Experience with project management methodologies, risk and dependency management, partnership engagement, and benefits realisation is desirable. A relevant professional qualification or demonstrable equivalent experience would be advantageous. Above all, you will be collaborative, proactive, detail-oriented, and motivated by the opportunity to build effective partnerships that contribute to a safer and more resilient digital environment.

We are seeking a Group Cyber Security Operations Analyst to support the monitoring, investigation and improvement of security operations across a complex, multi-site environment. Working as part of a collaborative cyber security function, you will help protect critical systems, applications and data by identifying threats, responding to incidents and strengthening defensive capabilities. This role is suited to an analytical and proactive security professional who can communicate clearly with both technical and non-technical stakeholders.

Key responsibilities will include monitoring security alerts and events through SIEM, endpoint detection and response, vulnerability management and other security tools; triaging and investigating suspected incidents; supporting containment, eradication and recovery activities; and maintaining accurate incident records and operational reports. You will contribute to threat hunting, root-cause analysis, security investigations and post-incident reviews, while escalating significant risks in line with established procedures. The role will also involve reviewing and improving detection rules, playbooks and operating procedures, assisting with vulnerability prioritisation and remediation tracking, and supporting security audits, risk assessments and compliance requirements.

The successful candidate will have practical experience in a cyber security operations, SOC, incident response or similar role, together with a sound understanding of security monitoring, network security, identity and access management, endpoint protection and common attack techniques. Experience with SIEM platforms, EDR tools, vulnerability scanners, ticketing systems and relevant security frameworks would be advantageous. You should be comfortable analysing logs and technical information, managing competing priorities and working calmly during security incidents. Relevant industry certifications or formal training in cyber security are desirable, as is knowledge of cloud environments, scripting or automation. Strong attention to detail, sound judgement, a continuous improvement mindset and the ability to work effectively as part of a distributed team are essential.

We are seeking an Information Security & GRC Specialist to support the development, implementation and continuous improvement of information security governance, risk and compliance activities. The role will help protect business information and technology assets by translating security requirements into practical policies, processes and controls. You will work with stakeholders across technology, operations, legal, privacy and business functions to promote a strong security culture and ensure that risks are identified, assessed and managed effectively.

Key responsibilities include maintaining information security policies, standards and procedures; coordinating risk assessments, control reviews and remediation plans; supporting internal and external audits; and monitoring compliance with applicable laws, regulations, contractual obligations and recognised security frameworks. You will maintain risk registers, prepare management reports and metrics, track security exceptions, and assist with third-party and supplier security assessments. The role will also contribute to incident response governance, business continuity and resilience activities, security awareness initiatives, and the ongoing improvement of governance, risk and compliance tooling and reporting.

The successful candidate will have experience in information security, governance, risk management, compliance or a related discipline, ideally within a complex technology or regulated environment. Familiarity with frameworks such as ISO 27001, NIST Cybersecurity Framework, CIS Controls, COBIT or equivalent is desirable, as is an understanding of privacy, operational resilience and third-party risk requirements. Relevant professional certifications, such as CISM, CRISC, CISSP, ISO 27001 Lead Implementer or Lead Auditor, are advantageous. You should be analytical, organised and confident engaging with stakeholders at all levels, with the ability to communicate complex security matters clearly. Strong report-writing, documentation and project coordination skills are essential, along with a proactive approach, sound judgement and a commitment to confidentiality and continuous improvement.

We are seeking an experienced Cyber Defense Incident Responder to lead the identification, investigation, containment, and resolution of complex cybersecurity incidents. In this assistant director-level role, you will provide technical leadership across incident response operations, helping protect critical systems, networks, applications, and data from evolving threats. You will coordinate response activities during high-severity events, establish priorities, guide investigative teams, and ensure that incidents are managed efficiently and consistently from initial detection through recovery and post-incident review.

Key responsibilities include developing and improving incident response procedures, playbooks, and escalation processes; directing the analysis of alerts, malicious activity, vulnerabilities, and indicators of compromise; and coordinating with security operations, infrastructure, application, risk, legal, privacy, and business teams. You will lead forensic investigations, support threat hunting and malware analysis, assess the potential impact of security events, and provide clear updates to technical and senior stakeholders. The role will also contribute to security monitoring improvements, tabletop exercises, resilience planning, metrics, and lessons-learned activities. You will help build team capability through mentoring, knowledge sharing, training, and the effective use of incident response tools and technologies.

Applicants should have substantial experience in cyber incident response, digital forensics, security operations, or a closely related discipline, including experience handling major or highly sensitive incidents. Strong knowledge of attack techniques, network and endpoint security, log analysis, threat intelligence, vulnerability management, and recognised incident response frameworks is required. Experience with security information and event management, endpoint detection and response, forensic platforms, cloud environments, and automation tools is desirable. You should demonstrate sound judgement under pressure, excellent written and verbal communication skills, strong stakeholder management, and the ability to translate complex technical issues into clear recommendations. Relevant professional certifications and experience leading or supervising cybersecurity teams will be advantageous.