Job Search

We are seeking an experienced Defence Information Security Manager to lead the development, implementation and continual improvement of information security across complex defence-related environments. This role will provide strategic direction and practical assurance, ensuring that systems, services and projects meet relevant security standards, contractual obligations and regulatory requirements. You will work with technical, operational and leadership teams to identify risks, strengthen security controls and support the secure delivery of critical capabilities.

Key responsibilities include developing and maintaining information security policies, frameworks and procedures; conducting risk assessments and security reviews; overseeing security accreditation and assurance activities; and monitoring compliance against applicable government, defence and industry standards. You will coordinate responses to incidents, vulnerabilities and audit findings, ensuring that corrective actions are prioritised and completed effectively. The role will also involve advising on secure architecture, supply-chain risk, access management, protective monitoring, data handling and business continuity. You will prepare clear reports for senior stakeholders, contribute to security governance forums and promote a strong culture of information security through training, guidance and engagement.

Applicants should have substantial experience in information security, cybersecurity, risk management or assurance, ideally within defence, government, critical infrastructure or another highly regulated environment. A strong understanding of security frameworks, risk methodologies, governance practices and relevant legislation is essential, along with experience managing security assessments, audits and incident investigations. Professional qualifications in information security, risk or related disciplines are desirable. You will be an effective communicator who can translate complex technical issues into clear business decisions, influence stakeholders at all levels and balance security requirements with operational and delivery objectives. The successful candidate must demonstrate integrity, sound judgement, discretion and the ability to manage competing priorities in a sensitive environment. Eligibility to obtain and maintain the required security clearance will be essential.

We are seeking a Lead DevSecOps Engineer to drive the integration of security, development and operations across the software delivery lifecycle. You will provide technical leadership for DevSecOps practices, helping engineering teams build, test, deploy and operate secure, reliable and scalable applications. Working closely with software engineers, architects, infrastructure specialists and security professionals, you will embed security controls and automation into every stage of delivery while promoting a culture of shared ownership and continuous improvement.

Your responsibilities will include designing and evolving CI/CD pipelines, infrastructure-as-code, cloud platforms and automated security tooling. You will define and implement security controls for source code, dependencies, containers, infrastructure and runtime environments, as well as improve vulnerability management, secrets management, identity and access controls, logging and monitoring. You will establish engineering standards, reusable patterns and governance practices, support threat modelling and risk assessments, and help teams respond effectively to security incidents and operational issues. You will also mentor engineers, lead technical initiatives, evaluate new technologies and communicate recommendations clearly to both technical and non-technical stakeholders.

We are looking for strong experience in DevSecOps, platform engineering, cloud security or a closely related discipline, together with a proven record of leading technical delivery in complex environments. You should be confident working with cloud services, Linux, containers, Kubernetes, Git-based workflows, CI/CD platforms and infrastructure-as-code tools such as Terraform or equivalent technologies. Practical knowledge of application and infrastructure security, automated testing, observability, compliance requirements and secure software development is essential. Experience with scripting or programming, security scanning tools and incident response would be highly valuable. Relevant certifications are welcome but not required. You will bring excellent problem-solving and communication skills, a collaborative leadership style and a pragmatic approach to balancing security, reliability, performance and delivery.

We are seeking a Senior C++ Software Engineer to develop high-performance cybersecurity solutions that protect critical systems, applications, and data. In this role, you will design, implement, and maintain robust software components used to detect, prevent, and respond to sophisticated security threats. You will work across the full development lifecycle, from technical analysis and architecture through to coding, testing, deployment, and ongoing improvement. The position offers the opportunity to contribute to technically challenging products in an environment where reliability, performance, and secure engineering are essential.

Your responsibilities will include developing modern C++ applications and services, reviewing code, investigating complex defects, and improving system performance, scalability, and resilience. You will collaborate with software engineers, security specialists, architects, and quality assurance teams to translate requirements into effective technical solutions. You will also contribute to threat analysis, secure coding practices, automated testing, technical documentation, and the continuous enhancement of development standards and processes. As a senior member of the team, you will support technical decision-making, mentor less experienced engineers, and help promote a strong security-first engineering culture.

Applicants should have substantial commercial experience developing software in C++, together with a strong understanding of object-oriented design, data structures, algorithms, concurrency, and memory management. Experience with Linux, networking, distributed systems, operating system concepts, or cybersecurity technologies would be highly valuable. Familiarity with secure software development, vulnerability analysis, cryptography, reverse engineering, or security monitoring is advantageous. You should be comfortable working with source control, build systems, debugging tools, and automated testing frameworks, and ideally have experience working in Agile or similarly collaborative development environments. Strong analytical, communication, and problem-solving skills are essential, along with a proactive approach to engineering quality and continuous learning.

We are seeking an experienced Data Protection Officer to provide expert data protection advice and support across a group of schools and trusts. This is a key role responsible for promoting a strong culture of privacy, accountability and information security, while ensuring that personal data is handled lawfully, fairly and transparently. You will act as a trusted adviser to senior leaders, governors, staff and other stakeholders, helping them understand and meet their responsibilities under UK data protection legislation.

Your responsibilities will include monitoring compliance with the UK GDPR, the Data Protection Act 2018 and related guidance; maintaining records of processing activities; reviewing privacy notices, policies, procedures and data-sharing agreements; and advising on data protection impact assessments. You will manage and investigate data breaches, coordinate responses to data subject rights requests, support the delivery of staff training and awareness programmes, and provide clear, practical guidance on issues including children’s data, safeguarding, photographs, educational technology and information sharing. You will also contribute to audits, risk assessments and continuous improvement activity, ensuring that actions are documented, tracked and completed.

The successful candidate will have substantial experience in a data protection, compliance or information governance role, ideally within education, the public sector or another complex multi-site environment. You should have a strong working knowledge of UK data protection law and the ability to interpret regulatory requirements in a practical and proportionate way. Excellent communication, organisation and problem-solving skills are essential, together with the confidence to challenge constructively and build effective relationships at all levels. Professional data protection or information governance qualifications, such as CIPP/E, CIPT, BCS or equivalent, would be desirable. The role may involve travel between sites and requires a high level of discretion, integrity and commitment to protecting the rights and wellbeing of children, young people and staff.

We are seeking a Senior DevSecOps Engineer to help design, implement, and continuously improve secure, reliable, and scalable software delivery practices. In this role, you will work across development, operations, security, and architecture teams to embed security throughout the software development lifecycle and enable efficient, automated delivery of high-quality services.

Your responsibilities will include designing and maintaining CI/CD pipelines, implementing infrastructure as code, and managing cloud-based environments across development, testing, and production. You will establish and improve security controls, including vulnerability scanning, secrets management, identity and access management, container security, and compliance monitoring. You will also support threat modelling, security assessments, incident response, and the remediation of identified risks. A key part of the role will be promoting DevSecOps best practices through automation, technical guidance, documentation, and collaboration with engineering teams. You will help define standards for observability, resilience, configuration management, and secure release processes, while identifying opportunities to improve system performance and operational efficiency.

The successful candidate will have substantial experience in DevOps, platform engineering, cloud infrastructure, or a similar environment, with a strong understanding of modern security principles. Experience with public cloud platforms, Kubernetes, Docker, Linux, Git, and automated deployment tools is expected, together with proficiency in scripting or programming languages such as Python, Bash, or Go. You should be confident working with infrastructure-as-code tools, security testing solutions, monitoring platforms, and source-control workflows. Strong knowledge of networking, authentication, encryption, vulnerability management, and relevant security frameworks is highly desirable. Excellent communication and problem-solving skills are essential, as is the ability to influence teams, manage competing priorities, and explain complex technical issues clearly. Relevant cloud, DevOps, or security certifications would be advantageous.

We are seeking a skilled DevSecOps Engineer to help integrate security throughout the software development and delivery lifecycle. In this role, you will work closely with development, operations, infrastructure, and security teams to design, automate, and maintain reliable, secure, and scalable platforms. You will champion secure-by-design practices, improve engineering standards, and help teams deliver high-quality services efficiently.

Your responsibilities will include building and maintaining CI/CD pipelines, embedding automated security checks into development workflows, and supporting infrastructure managed through code. You will configure and maintain cloud environments, container platforms, orchestration tools, monitoring solutions, and secrets-management systems. You will identify vulnerabilities, investigate security findings, support remediation, and contribute to threat modelling, risk assessments, incident response, and root-cause analysis. You will also develop reusable automation, strengthen access controls, improve system observability, and document processes, technical decisions, and operational procedures.

The successful candidate will have professional experience in DevSecOps, cloud engineering, site reliability engineering, or a closely related discipline. You should be confident working with source control, CI/CD technologies, containers, infrastructure-as-code, and at least one major cloud platform. Knowledge of scripting or programming languages such as Python, Bash, or Go, together with practical experience of security scanning, vulnerability management, identity and access management, and secure software development practices, is essential. Familiarity with relevant frameworks and standards, such as OWASP, CIS, NIST, or ISO 27001, would be advantageous. Strong communication and collaboration skills are important, as is the ability to balance security, reliability, delivery speed, and business needs. Relevant cloud, security, Kubernetes, or DevSecOps certifications are welcome but not required.

We are seeking a Lead DevSecOps Engineer to drive the integration of security, development, and operations across the software delivery lifecycle. In this senior role, you will define and implement secure, scalable DevOps practices, while leading engineering teams in building reliable automation, infrastructure, and deployment solutions. You will champion a security-first culture and ensure that security is embedded from design through to production.

Your responsibilities will include designing and maintaining CI/CD pipelines, implementing infrastructure as code, and improving cloud-based platforms for resilience, scalability, and performance. You will establish automated security controls, vulnerability management processes, secrets management, compliance checks, and continuous monitoring. Working closely with software engineers, platform teams, architects, and security specialists, you will identify risks, improve incident response, and support the secure delivery of high-quality products. You will also provide technical leadership through mentoring, design reviews, documentation, standards, and hands-on problem solving.

The successful candidate will have substantial experience in DevOps, DevSecOps, cloud engineering, or a similar discipline, with a strong understanding of secure software development and modern infrastructure practices. Experience with major cloud platforms, Kubernetes, containers, Linux, Git, and CI/CD tooling is expected, together with practical knowledge of infrastructure-as-code technologies such as Terraform or equivalent. You should be comfortable with scripting or programming, security testing tools, observability platforms, and automation frameworks. Strong communication and collaboration skills are essential, as is the ability to influence technical decisions, manage competing priorities, and translate complex security requirements into practical engineering solutions. Relevant cloud, DevOps, or security certifications are desirable but not essential.

We are seeking a Senior Cyber Researcher to lead advanced research into emerging cyber threats, vulnerabilities, attack techniques and defensive technologies. This role will involve investigating complex security problems, developing original insights and translating technical findings into practical recommendations for security teams, decision-makers and external stakeholders. You will work across threat intelligence, vulnerability research, malware analysis, adversary tracking and security engineering, helping to strengthen understanding of the evolving threat landscape.

Key responsibilities include designing and delivering research projects from initial hypothesis through to publication or operational implementation; analysing data from open, commercial and technical sources; conducting technical investigations, reverse engineering and proof-of-concept development; and identifying trends that may affect systems, platforms and users. You will produce clear and authoritative reports, technical briefings, presentations and supporting tools, while collaborating with researchers, engineers and operational teams. The role may also involve mentoring less experienced colleagues, reviewing research outputs, contributing to internal standards and representing the function at relevant conferences, workshops and industry forums.

Applicants should have substantial experience in cyber security research, threat intelligence, vulnerability analysis, malware analysis or a closely related discipline. Strong knowledge of common attack methods, exploitation techniques, operating systems, networks, cloud environments and security controls is expected, together with practical experience using scripting or programming languages such as Python, PowerShell, C, C++ or Go. You should be comfortable working with security tooling, forensic data and large or complex datasets, and able to explain highly technical subjects to varied audiences. Excellent written and verbal communication, sound analytical judgement, curiosity and the ability to manage multiple priorities are essential. Relevant professional certifications, a degree in cyber security, computer science or a related subject, and experience publishing or presenting original research would be advantageous.

We are seeking a Vulnerability Researcher to join a specialist security team in Manchester. This role is suited to an experienced vulnerability researcher, penetration tester, reverse engineer or security professional with a strong interest in discovering, analysing and responsibly disclosing weaknesses in software, hardware and connected systems. You will investigate emerging threats, assess the security of products and services, and develop clear technical findings that help engineering teams understand and address risk.

Your responsibilities will include researching vulnerabilities across operating systems, applications, embedded devices and network technologies; performing static and dynamic analysis; reverse engineering binaries and protocols; and creating proof-of-concept exploits or test cases where appropriate. You will use scripting and programming languages such as Python, C, C++, Rust or similar to automate testing, build research tooling and reproduce complex issues. The role will also involve monitoring security developments, contributing to internal research projects, documenting methodologies, presenting findings to technical and non-technical audiences, and collaborating with developers, incident responders and security engineers to support effective remediation.

Applicants should have practical experience in vulnerability research, penetration testing, exploit development, reverse engineering or a closely related discipline. You will need a strong understanding of common vulnerability classes, operating system internals, networking principles and secure development practices, together with the ability to use relevant debugging, disassembly, fuzzing and analysis tools. Familiarity with vulnerability management standards, responsible disclosure processes and frameworks such as MITRE ATT&CK or CVSS would be beneficial. Curiosity, analytical thinking, careful attention to detail and the ability to communicate complex technical issues clearly are essential. The position offers the opportunity to work on challenging security problems, develop innovative research techniques and contribute to improving the resilience of real-world technologies.

We are seeking a dedicated and experienced Security & Compliance Manager to join our team. In this role, you will be responsible for developing, implementing, and maintaining our security and compliance programs to ensure that all operations meet regulatory requirements and industry standards. You will work closely with cross-functional teams to assess risks, create policies, and establish best practices that safeguard sensitive information and promote a culture of compliance across the organization.

Your key responsibilities will include conducting regular security audits, risk assessments, and compliance reviews to identify potential vulnerabilities. You will develop and deliver training programs for employees to enhance awareness of security protocols and compliance obligations. Additionally, you will be responsible for managing incident response plans and leading investigations into security breaches or compliance violations, ensuring that all incidents are documented and reported appropriately.

The ideal candidate will have a strong background in information security, risk management, and regulatory compliance, along with relevant certifications (e.g., CISSP, CISM, or similar). Exceptional analytical and problem-solving skills, combined with excellent communication abilities, will be essential in this position. If you are passionate about fostering a secure and compliant environment and are ready to take on a challenging role, we invite you to apply and help drive our commitment to security excellence.