Job Search

We are seeking a Cyber Security Consultant / Penetration Tester to assess, improve and strengthen the security of applications, infrastructure, networks and cloud environments. You will work with a range of stakeholders to identify vulnerabilities, evaluate risk and provide practical recommendations that support resilient, secure business operations. The role offers the opportunity to contribute across the full penetration testing lifecycle, from scoping and reconnaissance through to exploitation, reporting and remediation support.

Your responsibilities will include planning and delivering penetration tests across web applications, APIs, mobile applications, internal and external networks, wireless environments, cloud platforms and infrastructure. You will conduct vulnerability assessments, validate security controls, analyse findings and clearly document technical and business risks. You will prepare high-quality reports for both technical and non-technical audiences, present results to clients and internal stakeholders, and provide guidance on remediation. You may also support threat modelling, security reviews, incident response activities, security architecture assessments and the development of testing methodologies and reusable tooling.

Applicants should have demonstrable experience in penetration testing or cyber security consultancy, with strong knowledge of common attack techniques, vulnerability management and secure configuration principles. Practical experience with tools such as Burp Suite, Nmap, Metasploit, BloodHound, Wireshark or comparable technologies is desirable, together with scripting or programming skills in languages such as Python, PowerShell, Bash or JavaScript. Industry certifications such as CREST, OSCP, CRT, OSCE, GPEN or equivalent are advantageous. You should be analytical, curious and comfortable explaining complex issues clearly, while maintaining high standards of professionalism, confidentiality and quality. The ability to manage multiple assignments, work independently and collaborate effectively with clients and colleagues is essential.

We are seeking an experienced Data Protection Officer to lead and strengthen data protection, privacy, and information governance practices across the organisation. The successful candidate will provide independent advice on compliance with applicable data protection legislation, regulatory guidance, and internal policies, while promoting a culture of responsible information handling. You will act as a trusted adviser to senior leaders, employees, and relevant stakeholders, ensuring that privacy considerations are embedded in business planning, systems, and day-to-day operations.

Key responsibilities will include monitoring compliance with data protection requirements; maintaining and reviewing privacy policies, procedures, records of processing activities, and data retention schedules; advising on data protection impact assessments, legitimate interest assessments, contracts, and international data transfers; and supporting the management of individual rights requests, personal data breaches, and regulatory enquiries. You will coordinate staff awareness and training programmes, conduct audits and risk assessments, track remedial actions, and provide clear reports and recommendations to governance forums and senior management. The role will also involve working closely with information security, legal, technology, human resources, procurement, and operational teams to identify and mitigate privacy risks.

You will bring substantial experience in a data protection, privacy, compliance, or information governance role, together with a strong understanding of relevant legislation and regulatory expectations. A recognised privacy or data protection qualification is desirable, as is experience working with complex or sensitive personal data environments. You should be confident interpreting legal and regulatory requirements, translating them into practical guidance, and communicating effectively with audiences at all levels. Strong analytical, organisational, and influencing skills are essential, along with sound judgement, discretion, and the ability to manage competing priorities. The ideal candidate will be proactive, collaborative, detail-oriented, and committed to continuous improvement in privacy standards.

We are seeking an experienced Cyber Incident Manager to lead the effective detection, response, containment and recovery of cybersecurity incidents across a complex technology environment. You will coordinate incident response activities from initial triage through to resolution, ensuring that security events are assessed promptly, appropriately prioritised and managed in line with established procedures, service levels and regulatory obligations. The role will work closely with security operations, infrastructure, applications, risk, legal, communications and senior stakeholders to minimise business impact and restore normal service safely.

Key responsibilities will include managing major and high-severity incidents, directing technical and business response teams, maintaining accurate incident records, and providing clear, timely updates to relevant stakeholders. You will lead incident bridges, coordinate internal and third-party resources, support decisions regarding containment and escalation, and ensure that evidence is preserved for forensic investigation or regulatory reporting where required. Following each significant incident, you will facilitate post-incident reviews, identify root causes and contributing factors, track corrective actions, and produce meaningful reports covering impact, response effectiveness, lessons learned and opportunities for improvement. You will also help develop playbooks, exercise response plans, improve monitoring and contribute to wider cyber resilience initiatives.

Applicants should have proven experience managing cybersecurity incidents within a large or complex organisation, with a strong understanding of incident response frameworks, security operations and risk management. Experience of coordinating cross-functional teams during high-pressure situations is essential, along with excellent communication, stakeholder management and decision-making skills. You will be comfortable translating technical issues for non-technical audiences and presenting concise updates to senior leadership. Familiarity with frameworks such as NIST or ISO 27001, threat intelligence, digital forensics, cloud environments and relevant data protection requirements would be advantageous. Professional certifications in incident response, cybersecurity or service management are desirable. A calm, organised and collaborative approach, combined with a strong focus on continuous improvement, is essential.

We are seeking an experienced Cyber Incident Manager to lead the coordinated response to cybersecurity incidents across a complex technology environment. In this role, you will manage incidents from initial detection through containment, eradication, recovery and post-incident review, ensuring that risks are controlled quickly and business disruption is minimised. You will act as a central point of coordination for security operations, IT infrastructure, application teams, risk, legal, communications and senior stakeholders, providing clear updates and maintaining effective decision-making throughout each incident.

Your responsibilities will include assessing and prioritising suspected incidents, activating response procedures, assigning actions, tracking progress and maintaining accurate incident records. You will coordinate technical investigations, support evidence preservation, oversee containment and recovery activities, and ensure that appropriate escalation and reporting requirements are met. You will also develop and improve incident response plans, playbooks, communication templates and operating procedures. Following significant events, you will lead post-incident reviews, identify root causes and control weaknesses, and ensure that agreed corrective actions are documented, prioritised and completed. The role may include participation in an on-call or out-of-hours rota.

Applicants should have proven experience managing cyber or technology incidents in a medium-to-large organisation, along with a strong understanding of incident response lifecycles, threat intelligence, security monitoring and common attack techniques. You will be confident working under pressure, communicating complex technical issues to non-technical audiences and coordinating teams during time-critical situations. Strong organisational, analytical and stakeholder-management skills are essential, as is the ability to make sound decisions using incomplete or evolving information. Experience with frameworks such as NIST or ISO 27001, security information and event management platforms, case-management tools and formal reporting processes would be advantageous. Relevant professional certifications in cybersecurity, incident management or service management are welcomed.

We are seeking a Cyber Security Consultant to help organisations identify, manage and reduce cyber security risks across their technology, people and operational processes. You will work with stakeholders at different levels to understand business requirements, assess current security capabilities and provide practical, risk-based recommendations. The role will involve supporting clients through security improvements while ensuring that advice is aligned with relevant regulations, recognised frameworks and industry good practice.

Key responsibilities will include conducting cyber security assessments, risk reviews, maturity evaluations and control testing; developing security policies, standards, procedures and improvement roadmaps; and advising on areas such as identity and access management, cloud security, vulnerability management, data protection, incident response and secure system design. You will prepare clear reports and presentations for technical and non-technical audiences, explain findings and priorities, and work collaboratively with internal teams and external stakeholders to track remediation activities. You may also contribute to bids, proposals, security awareness initiatives and the continual development of consulting methodologies.

Applicants should have professional experience in cyber security, information security, IT risk, audit or a closely related discipline, together with a strong understanding of security principles, governance and risk management. Experience working with recognised frameworks or standards such as ISO 27001, NIST, CIS Controls or applicable data protection legislation would be valuable. Relevant certifications, including CISSP, CISM, CRISC, ISO 27001 or equivalent, are desirable but not essential. You should be analytical, organised and confident communicating complex issues in clear business language. The ability to manage competing priorities, produce high-quality written deliverables and build trusted relationships is essential. A proactive approach, sound professional judgement and a commitment to continuous learning will support success in this role.

We are seeking a Cyber Security Consultant to help clients assess, strengthen and maintain their security posture across people, processes and technology. You will work with stakeholders at different levels to understand business objectives, identify cyber risks and develop practical, proportionate recommendations. The role offers the opportunity to contribute to a varied portfolio of assignments, supporting organisations through security improvement programmes, compliance initiatives and technology change.

Your responsibilities will include conducting security assessments, risk and vulnerability reviews, maturity evaluations and gap analyses against recognised frameworks and regulatory requirements. You will produce clear reports, risk registers, policies, procedures and improvement plans, presenting findings and recommendations to both technical and non-technical audiences. You may also support security architecture reviews, incident response planning, third-party risk assessments, security awareness activities and the implementation of governance, risk and compliance controls. Effective project management, accurate documentation and the ability to manage competing priorities will be important to your success.

We are looking for experience in cyber security consulting, information security, risk management, assurance or a closely related discipline. You should have a sound understanding of security principles, threat and risk assessment methodologies, vulnerability management, identity and access management, cloud security and relevant standards such as ISO 27001, NIST or CIS Controls. Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor are advantageous. Strong communication, analytical and stakeholder management skills are essential, together with a commercially aware and collaborative approach. The successful candidate will be expected to handle sensitive information professionally, work independently when required and maintain a commitment to continuous learning as the cyber security landscape evolves.

We are seeking a Security & Network Engineer for a 12-month fixed-term assignment. This role will support the design, implementation, monitoring and continuous improvement of secure, reliable network and technology environments. You will work closely with infrastructure, applications, service delivery and information security teams to ensure systems remain resilient, compliant and fit for purpose.

Key responsibilities will include managing and maintaining network infrastructure such as switches, routers, firewalls, wireless services, VPNs and related security technologies. You will monitor network performance and security events, investigate incidents, respond to vulnerabilities and contribute to remediation activities. The role will also involve administering access controls, supporting identity and authentication services, reviewing firewall rules, maintaining technical documentation and assisting with security audits, risk assessments and compliance reporting. You will participate in incident, problem and change management processes, including planned maintenance, upgrades and technology projects.

The successful candidate will have practical experience in network engineering and cyber security operations, with a strong understanding of TCP/IP, routing and switching, firewalls, intrusion prevention, secure remote access and network monitoring. Experience with cloud networking, endpoint or vulnerability management, security information and event management platforms, and relevant automation or scripting would be advantageous. You will bring strong analytical and troubleshooting skills, sound judgement and the ability to communicate technical information clearly to both technical and non-technical stakeholders. Industry certifications in networking or security are desirable, along with experience working in structured IT service environments. This is an opportunity to contribute to meaningful security and infrastructure improvements while supporting dependable technology services throughout the assignment.

We are seeking an experienced Cyber Technical Lead to provide technical direction across the design, delivery and continuous improvement of cyber security capabilities. You will lead the development of secure, resilient solutions that protect critical systems, data and services, while ensuring technology decisions align with business priorities, security policies and relevant regulatory requirements. The role will involve working across architecture, engineering, operations and delivery teams to translate cyber risk into practical technical outcomes.

Your responsibilities will include leading the technical design and implementation of security controls, reviewing solution architectures, and providing expert guidance on identity and access management, cloud security, network defence, endpoint protection, vulnerability management, security monitoring and incident response. You will support the development of security patterns, standards and roadmaps, assess emerging technologies, and help prioritise remediation activity based on risk. You will also oversee technical delivery across multiple initiatives, manage dependencies, challenge assumptions and ensure solutions are robust, scalable, maintainable and properly documented. The role may include mentoring technical specialists and representing cyber security at design reviews, governance forums and major change programmes.

Applicants should have substantial experience in a cyber security engineering, architecture or technical leadership role, with a strong understanding of enterprise security principles and modern threat landscapes. Practical experience designing and implementing security solutions across on-premises and cloud environments is essential, together with knowledge of recognised security frameworks, secure development practices, risk management and security assurance. Relevant professional certifications or equivalent experience are desirable. You will be an effective communicator who can explain complex technical matters to both specialist and non-specialist audiences, influence stakeholders at all levels and make sound decisions in a changing environment. A proactive approach, strong analytical skills and a commitment to continuous improvement are essential.

We are seeking a Security & Network Engineer for a 12-month fixed-term assignment. This role will support the design, implementation, monitoring and continuous improvement of secure, reliable network infrastructure across a complex technology environment. You will work closely with infrastructure, cloud, service delivery and cybersecurity teams to maintain resilient services, respond to incidents and help protect critical systems and data.

Key responsibilities will include configuring and administering routers, switches, firewalls, VPNs, wireless networks and related security technologies; monitoring network performance, availability and security events; investigating and resolving incidents, vulnerabilities and connectivity issues; and supporting change, problem and capacity management processes. You will contribute to network and security projects, including infrastructure upgrades, cloud connectivity, segmentation, access control and security hardening. The role will also involve maintaining accurate technical documentation, developing operational procedures, supporting audits and compliance activities, and working with internal and external stakeholders to deliver practical, secure solutions.

To be successful, you will have proven experience in network engineering and cybersecurity within a medium-to-large enterprise environment. Strong knowledge of TCP/IP, DNS, DHCP, routing and switching, network monitoring, firewalls, intrusion prevention, secure remote access and identity-based access controls is required. Experience with cloud networking, vulnerability management, incident response, authentication technologies and security frameworks will be highly regarded. Relevant certifications such as CCNA, CCNP, Fortinet, Palo Alto, CISSP, CompTIA Security+ or equivalent experience are advantageous. You will bring strong analytical and troubleshooting skills, a methodical approach to risk and change management, and the ability to communicate technical information clearly to both technical and non-technical audiences. A proactive mindset, sound judgement and a commitment to continuous improvement are essential.

We are seeking a Security & Network Engineer to design, maintain and improve secure, resilient network infrastructure across a dynamic technology environment. The role will combine hands-on network engineering with cybersecurity responsibilities, ensuring systems remain available, well monitored and protected against evolving threats. You will work closely with infrastructure, cloud, service desk and application teams to deliver reliable services and support the ongoing development of security standards and operational processes.

Key responsibilities will include configuring and managing firewalls, switches, routers, wireless networks, VPNs and network access controls; monitoring network performance, availability and security events; investigating incidents, vulnerabilities and suspicious activity; and implementing appropriate remediation measures. You will contribute to security assessments, vulnerability management, patching, access reviews, change control and disaster recovery planning. The role will also involve maintaining accurate technical documentation, producing reports, supporting audits, managing third-party suppliers and assisting with the design and implementation of network and security projects, including cloud connectivity and infrastructure improvements.

Applicants should have proven experience in a network engineering or infrastructure security role, with strong knowledge of TCP/IP, DNS, DHCP, routing, switching, VLANs, firewalls, VPN technologies and network monitoring. Experience with security information and event management, endpoint protection, identity and access management, cloud networking and vulnerability scanning would be advantageous. Relevant professional certifications or equivalent practical experience are welcomed. You will need strong analytical and problem-solving skills, a methodical approach to incident response, and the ability to explain technical issues clearly to both technical and non-technical colleagues. The successful candidate will be collaborative, organised and committed to maintaining high standards of security, service availability and operational resilience.