Job Search

We are seeking a Principal Product Security Engineer to define and advance security practices across the product development lifecycle. In this senior technical role, you will work closely with engineering, architecture, infrastructure, quality assurance, and product teams to ensure that security is embedded from design through deployment and ongoing operation. You will help shape security strategy, influence technical direction, and provide practical guidance on building resilient, trustworthy products.

Your responsibilities will include establishing and evolving secure development standards, threat modelling approaches, security architecture principles, and risk assessment processes. You will review designs and code for security weaknesses, identify vulnerabilities, and guide teams toward effective remediation. You will lead or support security testing activities, including application testing, penetration testing coordination, dependency analysis, API security reviews, and cloud security assessments. You will also help define security requirements, improve vulnerability management, contribute to incident response, and develop meaningful metrics that demonstrate product security maturity. As a principal-level subject matter expert, you will mentor engineers, facilitate security reviews, and promote practical security awareness across the organisation.

The successful candidate will bring extensive experience in product or application security, with a strong understanding of secure software development, modern application architectures, cloud environments, identity and access management, cryptography, and common web and API vulnerabilities. Experience with threat modelling frameworks, security automation, DevSecOps practices, and industry standards such as OWASP, NIST, or ISO 27001 is highly desirable. You should be confident communicating complex risks to both technical and non-technical audiences, influencing decisions without relying on formal authority, and balancing security, usability, delivery timelines, and business objectives. Strong analytical skills, sound judgement, curiosity, and a collaborative approach are essential.

We are seeking an Operational Technology Cybersecurity Engineer to strengthen the security, resilience and reliability of industrial control systems and connected operational environments. In this role, you will work across engineering, infrastructure, operations and risk teams to identify cyber threats, reduce vulnerabilities and support secure, uninterrupted business operations. You will contribute to the design, implementation and continuous improvement of cybersecurity controls across OT networks, industrial systems, supervisory control and data acquisition environments, programmable logic controllers and related technologies.

Your responsibilities will include conducting risk assessments, vulnerability reviews and security audits; monitoring OT environments for suspicious activity; supporting incident detection, investigation and response; and developing practical remediation plans. You will maintain accurate asset inventories, network diagrams, configuration records and security documentation, while helping to establish and enforce standards for access control, network segmentation, secure remote access, patching, backups and system hardening. You will also support security assessments for new technologies and suppliers, participate in change and project reviews, and help ensure that operational systems align with relevant cybersecurity frameworks, policies and regulatory requirements.

The successful candidate will have experience securing operational technology, industrial control systems or critical infrastructure environments, together with a strong understanding of networking, firewalls, endpoint protection, identity management and security monitoring. Knowledge of recognised frameworks and standards such as IEC 62443, NIST, ISO 27001 or comparable guidance is highly desirable. Experience with industrial protocols, vulnerability management, incident response and risk-based decision-making will be advantageous. You should be able to communicate clearly with both technical and non-technical stakeholders, work effectively in environments where availability and safety are essential, and balance security improvements with operational priorities. Relevant professional certifications or a degree in cybersecurity, engineering, computer science or a related discipline would be beneficial.

We are seeking an experienced Data Protection Officer to lead and coordinate data protection, privacy, and information governance activities across the organisation. You will provide independent advice on compliance with applicable data protection laws and regulations, monitor adherence to internal policies, and promote a strong culture of privacy and responsible information handling. Working with colleagues at all levels, you will help ensure that personal data is collected, used, stored, shared, and deleted lawfully, fairly, and transparently.

Your responsibilities will include maintaining and reviewing data protection policies, procedures, records of processing activities, data retention schedules, and privacy notices. You will advise on data protection impact assessments, legitimate interest assessments, international data transfers, contractual arrangements, and the privacy implications of new systems, projects, and services. You will also oversee the management of individual rights requests, support the investigation and reporting of personal data breaches, and coordinate responses to regulatory enquiries. Regular monitoring, internal audits, risk assessments, and clear reporting to senior stakeholders will be central to the role.

The successful candidate will have substantial experience in a data protection, privacy, compliance, or information governance position, together with a strong working knowledge of relevant legislation and regulatory guidance. A recognised professional qualification in data protection, privacy, law, information governance, or a related discipline is desirable. You should be confident interpreting complex requirements, producing practical guidance, and communicating effectively with both technical and non-technical audiences. Strong organisational skills, sound judgement, discretion, and the ability to manage competing priorities are essential. Experience developing training and awareness programmes, influencing stakeholders, and working with information security, legal, procurement, and technology teams would be highly advantageous.

We are seeking a skilled SailPoint IAM Engineer to design, implement, and support identity and access management solutions across a complex enterprise environment. In this role, you will work closely with security, infrastructure, application, and compliance teams to ensure that users have appropriate access to the systems and data they need, while maintaining strong controls and reducing security risk. You will contribute to the ongoing development of identity governance capabilities and help establish scalable, automated access management processes.

Your responsibilities will include configuring, customising, and maintaining SailPoint IdentityIQ or IdentityNow solutions; developing and supporting identity lifecycle workflows, access certifications, role models, provisioning policies, and separation-of-duties controls; and integrating SailPoint with directories, HR platforms, applications, databases, and other enterprise technologies. You will investigate and resolve incidents, perform root-cause analysis, monitor system performance, and support upgrades, enhancements, and release activities. The role will also involve documenting technical designs, operational procedures, and control evidence, as well as assisting with audits and ensuring solutions align with security and regulatory requirements.

The successful candidate will have commercial experience engineering and supporting SailPoint IAM platforms, together with a solid understanding of identity governance, access management, authentication, authorisation, and provisioning concepts. Experience with Java, BeanShell, PowerShell, REST or SOAP APIs, SQL, and directory services such as Active Directory is highly desirable. You should be comfortable working with complex integrations, troubleshooting technical issues, and translating business and security requirements into practical solutions. Strong communication, documentation, analytical, and stakeholder-management skills are essential, along with the ability to manage priorities independently and collaborate effectively in a delivery-focused environment. Relevant SailPoint certification or experience with additional IAM technologies will be advantageous.

We are seeking an OT Cybersecurity Engineer to help protect industrial control systems, operational technology networks and critical infrastructure environments from evolving cyber threats. In this role, you will work closely with engineering, operations, IT and risk teams to strengthen security across the full OT lifecycle while supporting safe, reliable and continuous operations.

Your responsibilities will include assessing OT environments, identifying vulnerabilities and security gaps, and implementing practical controls aligned with recognised frameworks and industry standards. You will design and maintain network segmentation, secure remote access, asset inventories, monitoring solutions and endpoint protections for industrial systems. You will also support security architecture reviews, risk assessments, incident response investigations and the development of corrective action plans. The role will involve reviewing logs and alerts, contributing to threat modelling, coordinating vulnerability management activities and helping ensure that security changes are tested and introduced without disrupting operational processes.

The successful candidate will have experience securing OT, ICS, SCADA, DCS or related industrial environments, together with a strong understanding of network protocols, firewalls, intrusion detection, identity management and security monitoring. Familiarity with standards such as IEC 62443, NIST Cybersecurity Framework, NIST SP 800-82 or ISO 27001 is highly desirable. Experience with vulnerability assessment tools, SIEM platforms, incident response and secure system design will be advantageous. You should be able to communicate clearly with both technical and non-technical stakeholders, produce accurate documentation and work effectively in environments where safety, availability and resilience are essential. Relevant qualifications in cybersecurity, computer science, engineering or a related discipline are preferred, along with appropriate professional certifications. A proactive mindset, sound judgement and a commitment to continual improvement are essential.

Are you passionate about defending critical infrastructure and organizations from evolving cyber threats? We are seeking a skilled MSSP / SOC Analyst with demonstrated expertise in leveraging AI technologies to enhance security operations. In this role, you will be responsible for monitoring, analyzing, and responding to security incidents across multiple client environments, using both traditional SOC tools and cutting-edge AI-driven solutions. You will collaborate closely with other analysts and engineers to ensure timely detection, investigation, and remediation of potential threats, while continuously optimizing security processes and workflows.

Key responsibilities include real-time monitoring and analysis of security events, triaging alerts, and conducting deep-dive investigations into suspicious activities using SIEM, EDR, and AI-powered platforms. You will contribute to the development and tuning of detection rules, automation scripts, and playbooks to streamline incident response. Your role will also involve generating reports, documenting incidents, and providing actionable recommendations to clients. Staying current with the latest threat intelligence, attack techniques, and AI innovations in cybersecurity will be essential to proactively defend against new threats.

The ideal candidate will have experience working in a SOC or MSSP environment, with a strong understanding of security operations and incident response processes. Proficiency in using AI/ML tools for threat detection and analysis is highly desirable. Familiarity with security frameworks (such as MITRE ATT&CK), scripting languages (Python preferred), and hands-on knowledge of SIEM and EDR solutions is required. Excellent communication skills, a detail-oriented mindset, and the ability to manage multiple tasks in a fast-paced environment are essential. Relevant certifications (e.g., SOC Analyst, CompTIA Security+, or similar) will be considered an advantage.